last executing test programs: 11m30.928056787s ago: executing program 32 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0, 0x0, 0x2}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES64=r2], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='fscache_access\x00', r4, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x8000000000000003) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x0) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x800000009) socket$kcm(0x2, 0xa, 0x2) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x2}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m17.246075608s ago: executing program 33 (id=1037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x44, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close_range(r1, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ee, &(0x7f0000000880)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102019, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000000c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd0239af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) r9 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035aed0dfb5b5441705322225930e6c1e3e2a51a92fd780bc34d7cf000036805b0777f7ab1a9b01c103a4c6a7ef54e6763d97264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r9, r8, r8, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r10, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f00000000c0)="01", 0x24}]) io_setup(0x3ff, &(0x7f0000000080)=0x0) io_submit(r12, 0x1, &(0x7f0000001880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r11, 0x0, 0x0, 0x5}]) 10m56.926252687s ago: executing program 34 (id=1196): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x803341) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x2000000000000016, &(0x7f00000005c0)=ANY=[@ANYBLOB="180010000000000000000000000000850075608d0000009500000000000022f922a17f6d5db6535e9e8e0300133f620331073384230b5c437fed8ebab37ffbdbae8f27794c47b9a4c3715c814ec8ca4bd39f12edaaa3b7475a967d82044e0c1cecca8c5545319cdf2f8c62b5e58fe85727d81e5dc2c46c29c9a25e097ec88f2f0a6a1514b2a67dbf5e2e87742039b62a61d23383230036098d846ac65b0797c59ae6f036f00e6a4085281b9248e48243c7faeda92fa9520431d8b92a4cc04a1200d467ca9579f4520b17deb0c04dd7473fbe"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) write$qrtrtun(r4, &(0x7f0000000340)="b7dd30e7894cda0070926a1a54f5447b7df0b9751347bd64af8a9994467a74ec0db1b21500376cde949da39e7a28f95545dbbfde88450fc9eb63", 0x3a) r10 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x4040, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x101}, {0x0, 0x10, 0x80000}, {0x0, 0x3, 0x0, 0x4}, {0xffffffff}, {0x0, 0x3}, {}, {0x0, 0x40, 0x0, 0x0, 0x3}, {}, {0x0, 0x9, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {0x0, 0xffffffff, 0x1ff, 0x4}, {}, {0x0, 0x1}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x40fe}, {}, {0x0, 0x800006, 0x4}, {0x1}, {0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x20000}, {}, {0x0, 0x0, 0x0, 0xe35}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x8}, {0x3}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0xffffffff}, {0x0, 0x0, 0x92937a}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x800000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2482}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}, {0x1}, {}, {0x4, 0x0, 0x0, 0x0, 0x5}, {0x80, 0x0, 0x0, 0x951b000}, {0x0, 0x0, 0x0, 0x537e, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0xffffffff, 0x80000000}], [{0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10m21.96423415s ago: executing program 35 (id=1450): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7e1722ba4c2c4b3c2edf7dff449a0183995d50eaef72f1b5817a8434147399c792b911970310e79343eb167c56effed7eb"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x7a, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000540)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c", 0x32) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) close_range(r1, r4, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) pause() fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) rmdir(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa014102, @local}, @info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}, 0x0) 10m11.880550048s ago: executing program 7 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendto$inet(r2, &(0x7f0000000480)="cc", 0x1, 0x4004, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) splice(r2, 0x0, r5, 0x0, 0x7ffff000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b00000007000000080000000400000005", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x1a) close(r9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 10m11.826271999s ago: executing program 7 (id=1532): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb0100180d000000000000380000003800000009000000060000000000000c03000000070000810000000e0300000000000000000000000200000d00000000ffffffff000000000d0000000000000000000000002e5f6100"], 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/66, 0x42}, 0xd58}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="00000100dea60100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48840) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x100) pwrite64(r7, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) sendmsg(r1, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, &(0x7f0000000300)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x800, 0x113) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) 10m10.766557415s ago: executing program 7 (id=1537): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa2}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000e36a24000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000100)={0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002000000000000000077e0f3bed8df5be43c6ee5d748ebf897bd95ccd04706f69c2636e643fe9d6a5f69984d05cfb331"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r6, 0x0, 0xa}, 0x18) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) socket$netlink(0x10, 0x3, 0x0) readv(r11, &(0x7f0000000340)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000680)=""/154, 0x9a}], 0x3) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r12, 0x0, 0x4ffe2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in6=@dev, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 10m10.491111559s ago: executing program 7 (id=1542): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x7fffffff}, 0xaaf4, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$eJzs3U9oI9UfAPBvOmnSXfj9tjdREKI3Qct2b3qxRbqw2ItK8M9BDG5XJa1Ci8X2sG09KB4Fj3rypqAHD+JRBEW8efDqCrIqHrS3BRefTCaTTJu02y5WKX4+0PTlvfed73cmQzINyetzc9G9PBlXdnevx9RULepzj8zFjVpMRxal7RjVGNMHAJwON1KK31PhiCG1Ey4JADhhvdf/FyKiFdNFz+tfHjY/efUHgFOv//f/mcPmTB008MqJlAQAnLCR9//v3TPc6P3Uy7v1yqcCAIDT6omnn3l0fjHi8VZrKmLlzfX2ejseGo7PX4mXYjmW4nyci5sRxYVCflPr3V68tLhwvtVqbcVP09GOiIl+YLu4UpjPevHNmB2MDK42UkrZxU8WF2ZbPRGxvdXLHyu19fZknO3n//5sLA0vPKbLIqJ3c2lx4UKrv4H2Shm/FbEzfN8ir38mzsW3zw82k1L5CcbFhauzE/07w/j1djMuD47Cge+AAAAAAAAAAAAAAAAAAAAAAADAbZlpDUwP1s9J+e9ipZyZmTHjvfVxivj++kA7xfpAqZkipd9ee6D9VhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAYGBtoxGd5eWl1bWNzW61sbW6tjEREXnPy19/9MWZGJ1zi0a9SNGMGKRo9dNudjspKyenLGI0PMuTlz0ffDqouDqnOdiLsWU0xw/tRt743z0/vjscujsrt/zncHIW43cwq5Tx8L6kK/8vSjrOgRo0LlR7mqPZr6WUKj1vVMOvPju6wahF1I//wG12J+LgOSlvfHX9xTvLo9/5PBXuu//ck9feef+Xbmc5zxy9R7CxunYzdTu1cvLxDkt+qMueWhSNWvVMqB8WvrO3p5N99+tTd739zdGyp2rPq/n5vG9OVuzOx/vDG0UjLzNvNIZny5lh+GR/J5aXJsec/Ldq3MZjesd7n32Y0g8/HzlFIa9+YuRpo/b3PQMBAAAAAAAAAAAAAAAAAAClynfF+/pf9p08LOrBx06+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD45wz//3+lsbMd+3qO0vhja0xUc2l1LaLxb+8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//zbhVeI=") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x2, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xaef52b8baecf2f1, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) io_uring_setup(0x4666, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) 10m9.372805365s ago: executing program 7 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0xffe0, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc7, 0x0, 0x2, 0x3, 0x951}, 0xd495}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='S\x00\x00\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\t\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000071118e000000000004009f80000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5d, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 10m8.660597586s ago: executing program 7 (id=1555): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_RMID(0x0, 0x300) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2d, 'net'}, {0x2d, 'freezer'}, {0x2b, 'io'}]}, 0x12) r4 = openat$cgroup_int(r3, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r3, &(0x7f00000001c0)='syz0\x00', 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) execveat(r0, 0x0, 0x0, &(0x7f0000000480)={[0x0, &(0x7f0000000400)='\'\x00', &(0x7f0000000440)='9p_protocol_dump\x00']}, 0x1000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 10m8.631987076s ago: executing program 36 (id=1555): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_RMID(0x0, 0x300) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2d, 'net'}, {0x2d, 'freezer'}, {0x2b, 'io'}]}, 0x12) r4 = openat$cgroup_int(r3, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r3, &(0x7f00000001c0)='syz0\x00', 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) execveat(r0, 0x0, 0x0, &(0x7f0000000480)={[0x0, &(0x7f0000000400)='\'\x00', &(0x7f0000000440)='9p_protocol_dump\x00']}, 0x1000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 10m6.078640544s ago: executing program 9 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x79) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[], 0x69) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x7cde) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) r8 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10m5.741500078s ago: executing program 9 (id=1576): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x7fffffff}, 0xaaf4, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x2, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xaef52b8baecf2f1, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) io_uring_setup(0x4666, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) 10m4.22771482s ago: executing program 9 (id=1582): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa2}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000e36a24000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000100)={0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002000000000000000077e0f3bed8df5be43c6ee5d748ebf897bd95ccd04706f69c2636e643fe9d6a5f69984d05cfb331"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r6, 0x0, 0xa}, 0x18) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) socket$netlink(0x10, 0x3, 0x0) readv(r11, &(0x7f0000000340)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000680)=""/154, 0x9a}], 0x3) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r12, 0x0, 0x4ffe2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in6=@dev, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 10m4.22701366s ago: executing program 8 (id=1583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) ioperm(0x1, 0x9, 0xfffffffffffffff8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) epoll_create(0x80008001) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x107000, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='cachefiles_io_error\x00', r3, 0x0, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x4, 0x30, 0x14, 0x7, 0x2f, 0x10001, 0x0}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000200)={@empty, @loopback, @broadcast}, 0xc) shmctl$IPC_RMID(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="3dc1306f22a2e233615258fb13274413b7ab18a28a58c8d98d82d3d1538a2bcf751b93e9c9e129f318c3a1c7e0512e035a4883f3b72a513b65c161f739f70438cd2ec1147e27d07e402c3dab5035f78582fc3b1d909738e42eb1d860582d4028099ff9cb113d674d024c0df0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/158, 0x9e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x52f, &(0x7f0000001e00)="$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") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000006a00850525bd7000fcdbdf25020000000000000008000a0002003951"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10m3.824755466s ago: executing program 8 (id=1588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000400), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x4770, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0xcd8, 0x80af, 0xfffffff7, 0x6, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0}) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x6) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa3e72cc35c200000086dd6000000200303a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078000000006000f21000001100fe8000000000000000000000000000aaff010000000000000000000000000001"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) unshare(0x60000600) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000004000000000000000300000085000000280000001801000020646c2500000000002020207b1af8ff00050000000000000000000007010000f8ffffffb702000008000000b7030000aa04000085000000060000009500000200000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000340)={'batadv0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 10m3.453266001s ago: executing program 8 (id=1591): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000010000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d616328616573290000"], 0x1a0}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x78}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='zonefs\x00', 0x48800, &(0x7f0000000400)='/dev/net/tun\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 10m3.069348877s ago: executing program 8 (id=1597): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x7fffffff}, 0xaaf4, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x2, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xaef52b8baecf2f1, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) io_uring_setup(0x4666, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) 10m2.475220596s ago: executing program 9 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000093320000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x320, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x6b}}, @common=@icmp6={{0x28}, {0xb, "52e1"}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x40, 0x0, 0x2, 'pptp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x24, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0xc, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0xe4ff, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) r8 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) futimesat(r8, &(0x7f0000000000)='./file1\x00', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000020101040000000000000000020001014400028006000340000400041400018008000100ac14142a08000200ac1e0001060003400003000014000180080001000000000008000200ac1414aa06000340000200000c0019800800020006"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r11, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0, 0x17}], 0x2}}], 0x1, 0x2004000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r12}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 10m2.468572756s ago: executing program 37 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000093320000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x320, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x6b}}, @common=@icmp6={{0x28}, {0xb, "52e1"}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x40, 0x0, 0x2, 'pptp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x24, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0xc, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0xe4ff, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) r8 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) futimesat(r8, &(0x7f0000000000)='./file1\x00', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000020101040000000000000000020001014400028006000340000400041400018008000100ac14142a08000200ac1e0001060003400003000014000180080001000000000008000200ac1414aa06000340000200000c0019800800020006"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r11, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0, 0x17}], 0x2}}], 0x1, 0x2004000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r12}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 10m2.463654626s ago: executing program 8 (id=1605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_trace', 0x400, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) setuid(0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) shutdown(r2, 0x1) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mq_notify(r1, 0x0) write$char_usb(r1, &(0x7f0000000140)="ba560bc8aa56975aca7810fbcaee8dab340a8ee8cd40e29a4c72b411a0aaa64d2c9e5a38a6ae48c6790d94cf536a2d5a5a716bf2f2222f08142ba3f2575bb0377048740f5cc02f568c2730b1befd68f48525e3b2c4a534914636c3ebb9e9f2ef44f09b1ca97fc595eafcd73a6a44c67054d75f4d03925e68d04988ba6a817e9125668277d724f2b9b92fddba12433c46d63012fc6711bb96143662e423e062717bb8d0afd6d42b", 0xa7) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000009000000030000000b005a0004000000", @ANYRES32=r1, @ANYBLOB="e8b000"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000002000000020000000b00"/28], 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x6) pwrite64(r7, 0x0, 0x0, 0x8000c60) 10m1.956439873s ago: executing program 8 (id=1609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0xb) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x401, 0x4, 0x7, 0x200}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r12, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001c00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r10, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r8, @ANYRES8=r11, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100"], 0xe8, 0x200400d1}, 0x80) r14 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r14, @ANYRESDEC, @ANYRESHEX=r14], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) sched_setscheduler(r11, 0x0, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xe, 0x6, 0x1, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x20, 0x7800, 0x9, 0x7fff}}) 10m1.955350313s ago: executing program 38 (id=1609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0xb) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x401, 0x4, 0x7, 0x200}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r12, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001c00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r10, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r8, @ANYRES8=r11, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100"], 0xe8, 0x200400d1}, 0x80) r14 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r14, @ANYRESDEC, @ANYRESHEX=r14], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) sched_setscheduler(r11, 0x0, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xe, 0x6, 0x1, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x20, 0x7800, 0x9, 0x7fff}}) 6m44.253456507s ago: executing program 4 (id=4424): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) mmap(&(0x7f000064e000/0x1000)=nil, 0x1000, 0x2800004, 0x11, r0, 0x15d63000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m44.120597709s ago: executing program 4 (id=4430): set_mempolicy(0x1, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @empty}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffff00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3d, &(0x7f00000004c0)=0xc, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000f20000000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd000411000400000000007d6ad9ba00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042088be000000030c000800050086dd88a888be00000002160906050100000000000010080022eb000000002004f03e0200000000000002000494030800655800000004"], 0x7a) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002b00)={0x8000, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b40)=r8, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x18) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r11, @ANYBLOB="080003"], 0x80}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r14 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000010000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000f4f10500ff0fbf910000000000feffffffffffff00008500000085000000b70000000000000095000000000000000000"], &(0x7f0000000100)='GPL\x00', 0xda, 0x96, &(0x7f0000000140)=""/150, 0x41000, 0x4, '\x00', r5, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x2, 0x1ff}, 0x10, r8, 0xffffffffffffffff, 0x9, &(0x7f00000002c0)=[r9, r14], &(0x7f0000000300)=[{0x4, 0x2, 0x7}, {0x5, 0x5, 0xd, 0x2}, {0x1, 0x3, 0x1, 0x5}, {0x0, 0x2, 0x4, 0xa}, {0x5, 0x1, 0x3, 0xc}, {0x1, 0x3, 0xd, 0x7}, {0x2, 0x2, 0x1, 0x1}, {0x5, 0x3, 0xf, 0x8}, {0x3, 0x5, 0xf, 0x5}], 0x10, 0x87ad, @void, @value}, 0x94) 6m44.05036878s ago: executing program 4 (id=4431): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x5) 6m44.03234493s ago: executing program 4 (id=4432): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@user_xattr}, {@noblock_validity}, {@data_ordered}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 6m43.970284571s ago: executing program 4 (id=4434): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYBLOB="0000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 6m43.888677632s ago: executing program 4 (id=4435): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x2200c416, &(0x7f0000000740)={[{@usrjquota_path={'usrjquota', 0x3d, './file1/file0'}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nojournal_checksum}, {@init_itable}, {@nouid32, 0x2e}, {@noload}, {@acl}, {@dax_never}, {@noquota}], [], 0x2c}, 0x0, 0x4d7, &(0x7f0000000fc0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40a00, 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES8, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100"], 0xe8, 0x200400d1}, 0x80) r10 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRESDEC, @ANYRESHEX=r10], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="2c64666c746769643ddebfbfc61e71ad7db91b6b34b25011f418125578cac23d8ab1ef42c2d7a401d74bcbb9704bc5fb3b4bf2d9ce25cc14ef4ac7913895c89b88cf18dedbde11c6c1e722570dd491fd7125d192620c7ca11be81000", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',obj_role=,silent,fscontext=user_u,euid', @ANYRESDEC=r11]) r12 = getgid() setfsgid(r12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000040000000000000003000000854dd9f356600b865fd8b74ca9c2f199d600f0320d71b35de319000020646c2500000000002020207b1ae8ff00000000bfa1000000000000070000b703000081000000bdabb7c9084aac41859df947e09500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10000032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m43.888271972s ago: executing program 39 (id=4435): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x2200c416, &(0x7f0000000740)={[{@usrjquota_path={'usrjquota', 0x3d, './file1/file0'}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nojournal_checksum}, {@init_itable}, {@nouid32, 0x2e}, {@noload}, {@acl}, {@dax_never}, {@noquota}], [], 0x2c}, 0x0, 0x4d7, &(0x7f0000000fc0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40a00, 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES8, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100"], 0xe8, 0x200400d1}, 0x80) r10 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRESDEC, @ANYRESHEX=r10], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="2c64666c746769643ddebfbfc61e71ad7db91b6b34b25011f418125578cac23d8ab1ef42c2d7a401d74bcbb9704bc5fb3b4bf2d9ce25cc14ef4ac7913895c89b88cf18dedbde11c6c1e722570dd491fd7125d192620c7ca11be81000", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',obj_role=,silent,fscontext=user_u,euid', @ANYRESDEC=r11]) r12 = getgid() setfsgid(r12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000040000000000000003000000854dd9f356600b865fd8b74ca9c2f199d600f0320d71b35de319000020646c2500000000002020207b1ae8ff00000000bfa1000000000000070000b703000081000000bdabb7c9084aac41859df947e09500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10000032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m37.88678496s ago: executing program 3 (id=4509): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x60fd, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "00000000001d0002"}}, 0x48}, 0x2}, 0x0) 6m37.851332791s ago: executing program 3 (id=4510): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff50d7, 0x6, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x6, 0x3, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 6m37.560832375s ago: executing program 3 (id=4529): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000002a40)) 6m37.535386616s ago: executing program 3 (id=4532): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) 6m37.448877757s ago: executing program 3 (id=4536): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 6m37.401943358s ago: executing program 3 (id=4538): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x2200c416, &(0x7f0000000740)={[{@usrjquota_path={'usrjquota', 0x3d, './file1/file0'}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nojournal_checksum}, {@init_itable}, {@nouid32, 0x2e}, {@noload}, {@acl}, {@dax_never}, {@noquota}], [], 0x2c}, 0x0, 0x4d7, &(0x7f0000000fc0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40a00, 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES8, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100"], 0xe8, 0x200400d1}, 0x80) r10 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRESDEC, @ANYRESHEX=r10], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="2c64666c746769643ddebfbfc61e71ad7db91b6b34b25011f418125578cac23d8ab1ef42c2d7a401d74bcbb9704bc5fb3b4bf2d9ce25cc14ef4ac7913895c89b88cf18dedbde11c6c1e722570dd491fd7125d192620c7ca11be81000", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',obj_role=,silent,fscontext=user_u,euid', @ANYRESDEC=r11]) r12 = getgid() setfsgid(r12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000040000000000000003000000854dd9f356600b865fd8b74ca9c2f199d600f0320d71b35de319000020646c2500000000002020207b1ae8ff00000000bfa1000000000000070000b703000081000000bdabb7c9084aac41859df947e09500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10000032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m37.347596348s ago: executing program 40 (id=4538): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x2200c416, &(0x7f0000000740)={[{@usrjquota_path={'usrjquota', 0x3d, './file1/file0'}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nojournal_checksum}, {@init_itable}, {@nouid32, 0x2e}, {@noload}, {@acl}, {@dax_never}, {@noquota}], [], 0x2c}, 0x0, 0x4d7, &(0x7f0000000fc0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40a00, 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES8, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100"], 0xe8, 0x200400d1}, 0x80) r10 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRESDEC, @ANYRESHEX=r10], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="2c64666c746769643ddebfbfc61e71ad7db91b6b34b25011f418125578cac23d8ab1ef42c2d7a401d74bcbb9704bc5fb3b4bf2d9ce25cc14ef4ac7913895c89b88cf18dedbde11c6c1e722570dd491fd7125d192620c7ca11be81000", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',obj_role=,silent,fscontext=user_u,euid', @ANYRESDEC=r11]) r12 = getgid() setfsgid(r12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000040000000000000003000000854dd9f356600b865fd8b74ca9c2f199d600f0320d71b35de319000020646c2500000000002020207b1ae8ff00000000bfa1000000000000070000b703000081000000bdabb7c9084aac41859df947e09500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10000032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.476467795s ago: executing program 2 (id=11494): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) fallocate(0xffffffffffffffff, 0x0, 0x3, 0xd) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) socket(0x40000000015, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8}, 0x18) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1.601544167s ago: executing program 2 (id=11504): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x1000000}, @ptr={0x7, 0x0, 0x0, 0x2, 0x2}, @fwd={0x4}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x4}]}}, 0x0, 0x5a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) unshare(0x64000600) 1.514944608s ago: executing program 6 (id=11510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) close(r2) 1.503832818s ago: executing program 0 (id=11511): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) 1.473798469s ago: executing program 6 (id=11512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xfffffffffdfffffd}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.42624313s ago: executing program 6 (id=11514): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.36338544s ago: executing program 6 (id=11516): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.317997041s ago: executing program 6 (id=11518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1.249380562s ago: executing program 6 (id=11519): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.112924854s ago: executing program 5 (id=11523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r3, r3, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) 1.111998884s ago: executing program 2 (id=11524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000004c0)='\x00!', 0x4f}], 0x1, 0x400, 0x0) 998.258865ms ago: executing program 0 (id=11527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 940.852276ms ago: executing program 2 (id=11528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 925.599357ms ago: executing program 2 (id=11529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000480)='.\x00', 0x0, &(0x7f0000000b80)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) 911.295387ms ago: executing program 1 (id=11530): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$eJzs3U9sI1cZAPBvZpO1k6YkhR4AFbqUwoKqtRNvG1W9UE4VQpUQPXLYhsSJothxFDulCXvIHrkjUaknOHHmgMQBqSfuSBzgxqUckAqsQA0SByOPx7vOH2/S3dhu499PGs2b9zzzvbejec963swLYGLdiIjDiLgeEW9HxHyen+RbvN7dOp/7+P7d1aP7d1eTaLff+meSlXfyou+cjqfyaxYj4odvRPw4ORH0TxHN/YOtlVqtuptnlVv1nXJz/+DWZn1lo7pR3a5UlpeWF1+9/Url0tr6fP03H81ExO9/95UP/3j47Z92qjWXl/W34zJ1mz79IE7HVER8fxjBxuBa3p7rj3PyY53EZUoj4vMR8UL2/M/HtexuHnf8Nn1nhLUDAIah3Z6P9nz/MQBw1aXZHFiSlvK5gLlI01KpO4f3bMymtUaz9dJ6Y297rTtXthDT6fpmrbqYzxUuxHSyvjlVXcrSveNatXLi+HZEPBMRPy/MZMel1UZtbZxffABggj11Yvz/T6E7/gMAV1zxYbIwznoAAKNTHHcFAICRM/4DwOQx/gPA5DH+A8DkMf4DwOQx/gPARPnBm292tvZR/v7rtXf297Ya79xaqza3SvW91dJqY3entNFobGTv7Kmfd71ao7Gz9HLsvVtuVZutcnP/4E69sbfdupO91/tOdXokrQIAHuWZ5z/4SxIRh6/NZFv0ve//3LH6uWHXDhimdNwVAMbm2rgrAIzN6dW+gEnxCebjZ4ZZD2B8+pbovdeXXTyVOOm9C10+tW4ofPrc/NITzP8Dn2nm/2FyPd78v+/ycBWY/4fJ1W4n1vwHgAljjh9Izinv//1/sd13cOL3f/+fGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEkyl21JWsrXAp+LNC2VIp6OiIWYTtY3a9XFiPhcRPy5MF3oHC9FhHWDAOCzLP17kq//dXP+xbmTpdcL/y1k+4j4yftv/eLdlVZrdynievKvB/mt9/L8yjjqDwCcpzdO98bxno/v313tbaOsz0ff7S4u2ol7lG/dkqmYyvbFbK5h9t9JftyVXNJao4f3IuKLZ7U/yeZGFvKVT0/G78R+eqTx02Px06ysu+/8W3zhEuoCk+aDTv/z+lnPXxo3sv3Zz38x66GeXK//OzrV/6UP+r9rA/q/G8cvtTAwxst/+N6pzPZ8t+xexJenIo56F+/rf3rxkwHxX7xgG//63FdfGFTW/mXEzTir/cmxWOVWfafc3D+4tVlf2ahuVLcrleWl5cVXb79SKWdz1OXeTPVp/3gtGbi8daf9swPiF89p/zcu2P5f/e/tH33tEfG/9fWz7/+zj4jfGRO/ecH4K7O/LQ4q68RfG9D+8+7/SxeM/+HfDtYu+FEAYASa+wdbK7VadfdUYjv/LaCXM33GZz5BIn2y0y+cSCIOhxziYaLw65+9MapYQ0zEaIO+HxHjbrLEeYlx90zAsD186MddEwAAAAAAAAAAAAAAYJBR/DnRuNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA1fX/AAAA//+zq8/P") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/85, 0x55) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 848.446687ms ago: executing program 2 (id=11531): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) tgkill(0x0, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000001e86ef00000000083fe72ee0bcd440e7e57c4627eeea05000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000c3c8a9f440822a3617f705338773ba5b0000003704000000000000850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580), &(0x7f00000006c0)=0x4) bind$can_raw(r0, &(0x7f0000000800), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4d4000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x549101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x10) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 819.478558ms ago: executing program 1 (id=11532): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xd, 0x9, 0x5, 0x9, 0x80, 0x1, 0x5e, 0xc5c9, [{0x2, 0x3ff, 0x4, 0xfffffffd}, {0x9, 0x1, 0x200, 0x8}, {0x3, 0x80, 0xae, 0x9}, {0x4, 0xe, 0x2, 0x6}, {0x8, 0x8001, 0x9, 0x1ff}]}}]}}]}, 0x94}}, 0x24040084) 691.18162ms ago: executing program 1 (id=11536): socket$inet(0x2, 0x3, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xd155, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, 0x0) 690.77983ms ago: executing program 1 (id=11537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 644.241721ms ago: executing program 0 (id=11538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 626.602891ms ago: executing program 1 (id=11539): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) fallocate(0xffffffffffffffff, 0x0, 0x3, 0xd) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) socket(0x40000000015, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8}, 0x18) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 528.931102ms ago: executing program 5 (id=11540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 511.127923ms ago: executing program 5 (id=11541): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 474.304863ms ago: executing program 5 (id=11542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 464.770203ms ago: executing program 0 (id=11543): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan1\x00', 0x0}) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 192.897637ms ago: executing program 5 (id=11544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) 0s ago: executing program 5 (id=11545): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x62040200) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000380)) kernel console output (not intermixed with test programs): t: type=1400 audit(2000000037.190:53352): avc: denied { relabelto } for pid=9655 comm="syz.0.9292" name="2014" dev="tmpfs" ino=10615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 686.204465][ T29] audit: type=1400 audit(2000000037.190:53353): avc: denied { associate } for pid=9655 comm="syz.0.9292" name="2014" dev="tmpfs" ino=10615 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 686.398502][ T9670] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 686.472519][ T9685] rdma_op ffff888119f7c980 conn xmit_rdma 0000000000000000 [ 686.559977][ T9699] loop1: detected capacity change from 0 to 164 [ 686.595472][ T9706] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9317'. [ 686.612771][ T9699] syz.1.9314: attempt to access beyond end of device [ 686.612771][ T9699] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 686.628065][ T9699] syz.1.9314: attempt to access beyond end of device [ 686.628065][ T9699] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 686.860424][ T9745] dummy0: entered allmulticast mode [ 686.866297][ T9745] dummy0: left allmulticast mode [ 686.879452][ T9747] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 686.945217][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9341'. [ 687.111749][ T9779] tracefs: Unknown parameter 'mod' [ 687.155295][ T9792] loop1: detected capacity change from 0 to 1024 [ 687.188149][ T9792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.204091][ T9792] ext4 filesystem being mounted at /867/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.262700][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.449507][ T9823] lo speed is unknown, defaulting to 1000 [ 687.722914][ T9848] loop1: detected capacity change from 0 to 1024 [ 687.752482][ T9848] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.9365: Failed to acquire dquot type 0 [ 687.785499][ T9848] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 687.810523][ T9848] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9365: corrupted inode contents [ 687.889776][ T9848] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.9365: mark_inode_dirty error [ 687.905414][ T9848] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9365: corrupted inode contents [ 687.920482][ T9848] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.9365: mark_inode_dirty error [ 687.941494][ T9848] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9365: corrupted inode contents [ 687.959640][ T9848] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 687.969059][ T9860] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 687.978506][ T9848] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9365: corrupted inode contents [ 688.004331][ T9848] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.9365: mark_inode_dirty error [ 688.040604][ T9879] xt_hashlimit: max too large, truncated to 1048576 [ 688.043204][ T9848] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 688.126205][ T9848] EXT4-fs (loop1): 1 truncate cleaned up [ 688.150626][ T9848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.192204][ T9848] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 688.285802][ T9906] lo speed is unknown, defaulting to 1000 [ 689.142137][ T9995] lo speed is unknown, defaulting to 1000 [ 689.365658][ T9997] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9388'. [ 689.896853][T10057] lo speed is unknown, defaulting to 1000 [ 690.427504][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.728273][T10168] loop1: detected capacity change from 0 to 512 [ 690.748751][T10168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.765246][T10168] ext4 filesystem being mounted at /876/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 691.009473][T10203] lo speed is unknown, defaulting to 1000 [ 691.360794][T10205] lo speed is unknown, defaulting to 1000 [ 691.872409][T10248] tracefs: Bad value for 'mode' [ 692.797918][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.882604][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 692.882633][ T29] audit: type=1400 audit(2000000043.890:53473): avc: denied { setopt } for pid=10266 comm="syz.1.9435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 692.921075][ T29] audit: type=1326 audit(2000000043.930:53474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 692.988794][ T29] audit: type=1326 audit(2000000043.950:53475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.013481][ T29] audit: type=1326 audit(2000000043.950:53476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.037443][ T29] audit: type=1326 audit(2000000043.950:53477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.061207][ T29] audit: type=1326 audit(2000000043.950:53478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.085773][ T29] audit: type=1326 audit(2000000043.960:53479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.109441][ T29] audit: type=1326 audit(2000000043.960:53480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.133758][ T29] audit: type=1326 audit(2000000043.960:53481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.157620][ T29] audit: type=1326 audit(2000000043.960:53482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 693.258950][T10327] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9449'. [ 693.618193][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9458'. [ 693.820239][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9471'. [ 693.985114][T10455] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 694.048548][T10467] bridge0: entered promiscuous mode [ 694.054165][T10467] macvlan2: entered promiscuous mode [ 694.061272][T10467] bridge0: port 3(macvlan2) entered blocking state [ 694.067866][T10467] bridge0: port 3(macvlan2) entered disabled state [ 694.074614][T10467] macvlan2: entered allmulticast mode [ 694.080050][T10467] bridge0: entered allmulticast mode [ 694.086017][T10467] macvlan2: left allmulticast mode [ 694.091210][T10467] bridge0: left allmulticast mode [ 694.096835][T10467] bridge0: left promiscuous mode [ 694.955785][T10464] lo speed is unknown, defaulting to 1000 [ 695.288111][T10546] xt_limit: Overflow, try lower: 330673899/4200216962 [ 695.305363][T10549] binfmt_misc: register: failed to install interpreter file ./file0 [ 695.409313][T10564] loop1: detected capacity change from 0 to 512 [ 695.429656][T10564] EXT4-fs (loop1): 1 orphan inode deleted [ 695.438222][T10564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.450883][T32225] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:43: Failed to release dquot type 1 [ 695.463614][T10564] ext4 filesystem being mounted at /892/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.489659][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.499553][T32218] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 1 [ 695.546634][T10584] loop1: detected capacity change from 0 to 512 [ 695.554192][T10584] EXT4-fs: Ignoring removed nobh option [ 695.561545][T10585] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.573225][T10584] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.9529: invalid indirect mapped block 256 (level 2) [ 695.596107][T10584] EXT4-fs (loop1): 2 truncates cleaned up [ 695.606903][T10584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.623924][T10584] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9529: bg 0: block 5: invalid block bitmap [ 695.639314][T10585] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.663972][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.743340][T10585] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.773782][T10606] netlink: 'syz.1.9534': attribute type 1 has an invalid length. [ 695.851599][T10609] lo speed is unknown, defaulting to 1000 [ 696.042796][T10585] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.113885][T10585] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.151730][T10585] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.214622][T10642] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9538'. [ 696.226572][T10585] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.236428][T10641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.253020][T10585] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.360324][T10666] loop1: detected capacity change from 0 to 512 [ 696.379615][T10666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.393664][T10666] ext4 filesystem being mounted at /903/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 696.580645][T10674] lo speed is unknown, defaulting to 1000 [ 697.081945][T10679] lo speed is unknown, defaulting to 1000 [ 697.160051][T10681] lo speed is unknown, defaulting to 1000 [ 697.359407][ T23] usb usb6-port1: attempt power cycle [ 698.771579][T10747] lo speed is unknown, defaulting to 1000 [ 699.216915][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.364892][T10801] Cannot find add_set index 0 as target [ 699.460778][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9566'. [ 699.524165][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9569'. [ 699.588285][T10838] Cannot find add_set index 0 as target [ 699.635434][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 699.635448][ T29] audit: type=1400 audit(2000000050.640:53629): avc: denied { create } for pid=10840 comm="syz.0.9574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 699.666515][ T29] audit: type=1400 audit(2000000050.670:53630): avc: denied { bind } for pid=10840 comm="syz.0.9574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 699.777864][ T29] audit: type=1400 audit(2000000050.780:53631): avc: denied { write } for pid=10853 comm="syz.0.9578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 699.839104][ T29] audit: type=1326 audit(2000000050.840:53632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 699.884186][ T29] audit: type=1326 audit(2000000050.840:53633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 699.908502][ T29] audit: type=1326 audit(2000000050.870:53634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 699.932906][ T29] audit: type=1326 audit(2000000050.870:53635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 699.956644][ T29] audit: type=1326 audit(2000000050.870:53636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 699.981048][ T29] audit: type=1326 audit(2000000050.870:53637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 699.989407][T10868] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9581'. [ 700.005051][ T29] audit: type=1326 audit(2000000050.870:53638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.6.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 700.016262][T10862] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9581'. [ 700.127184][T10884] rdma_op ffff88811986e980 conn xmit_rdma 0000000000000000 [ 700.240107][ T23] usb usb6-port1: unable to enumerate USB device [ 700.246622][T10370] vhci_hcd: invalid port number 96 [ 700.252582][T10370] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 700.318579][T10894] lo speed is unknown, defaulting to 1000 [ 700.496540][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9603'. [ 700.603719][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9612'. [ 700.614489][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9612'. [ 700.648213][T10958] loop1: detected capacity change from 0 to 512 [ 700.655936][T10958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 700.668170][T10958] EXT4-fs (loop1): 1 truncate cleaned up [ 700.674529][T10958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.699133][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.764351][T10974] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 700.802271][T10980] xt_hashlimit: size too large, truncated to 1048576 [ 700.809072][T10980] xt_hashlimit: max too large, truncated to 1048576 [ 700.811934][T10982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9624'. [ 700.825410][T10982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9624'. [ 700.968858][T11014] loop1: detected capacity change from 0 to 1024 [ 700.984354][T11014] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.9626: Failed to acquire dquot type 0 [ 700.996660][T11014] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 701.012275][T11014] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9626: corrupted inode contents [ 701.031687][T11014] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.9626: mark_inode_dirty error [ 701.072671][T11014] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9626: corrupted inode contents [ 701.101474][T11014] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.9626: mark_inode_dirty error [ 701.130110][T11014] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9626: corrupted inode contents [ 701.154725][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9635'. [ 701.165465][T11014] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 701.185022][T11014] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.9626: corrupted inode contents [ 701.203054][T11014] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.9626: mark_inode_dirty error [ 701.227346][T11014] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 701.241821][T11014] EXT4-fs (loop1): 1 truncate cleaned up [ 701.260954][T11014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.291704][T11014] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 701.343973][T11074] netlink: 'syz.5.9643': attribute type 16 has an invalid length. [ 701.351865][T11074] netlink: 'syz.5.9643': attribute type 17 has an invalid length. [ 701.371117][T11079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.404314][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.415643][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.441798][T11074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.460893][T11074] bridge0: port 3(dummy0) entered blocking state [ 701.467417][T11074] bridge0: port 3(dummy0) entered forwarding state [ 701.484880][T11074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.502714][T11079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.541860][T11079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.692707][T11079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.772815][T11129] lo speed is unknown, defaulting to 1000 [ 701.973245][T11079] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.988176][T11079] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.026959][T11079] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.072836][T11079] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.225793][T11169] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 702.297950][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.306813][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.888482][T11203] lo speed is unknown, defaulting to 1000 [ 703.418297][T11310] netlink: 'syz.6.9686': attribute type 3 has an invalid length. [ 703.462758][T11312] atomic_op ffff888124d74128 conn xmit_atomic 0000000000000000 [ 703.585963][T11322] lo speed is unknown, defaulting to 1000 [ 704.107204][T11353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.117076][T11353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 704.155786][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.181517][T11360] lo speed is unknown, defaulting to 1000 [ 704.812664][T11392] lo speed is unknown, defaulting to 1000 [ 705.032384][T11353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.042372][T11353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 705.235997][T11353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.245991][T11353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 705.303686][T11419] can0: slcan on ttyS3. [ 705.332386][T11353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.342309][T11353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 705.369538][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 705.369549][ T29] audit: type=1326 audit(2000000056.370:53660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.9710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.399248][ T29] audit: type=1326 audit(2000000056.370:53661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.9710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.422977][ T29] audit: type=1326 audit(2000000056.370:53662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.9710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.446658][ T29] audit: type=1326 audit(2000000056.370:53663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.9710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.472202][ T29] audit: type=1400 audit(2000000056.410:53664): avc: denied { setopt } for pid=11442 comm="syz.5.9708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 705.527030][T11353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.535298][T11353] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 705.548808][T11353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.557090][T11353] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 705.560647][ T29] audit: type=1326 audit(2000000056.560:53665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.589685][ T29] audit: type=1326 audit(2000000056.560:53666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.614197][ T29] audit: type=1326 audit(2000000056.560:53667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.624084][T11353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.637782][ T29] audit: type=1326 audit(2000000056.560:53668): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.669955][T11353] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 705.678255][ T29] audit: type=1326 audit(2000000056.650:53669): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 705.683136][T11353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.710386][T11353] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 705.758555][T11473] __nla_validate_parse: 5 callbacks suppressed [ 705.758571][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9717'. [ 705.774643][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9717'. [ 705.865247][T11489] loop1: detected capacity change from 0 to 1024 [ 705.969166][T11492] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9725'. [ 706.016971][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9726'. [ 706.025892][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9726'. [ 706.080970][T11502] lo speed is unknown, defaulting to 1000 [ 706.276191][T11489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.457988][T11489] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 706.667032][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.873672][T11551] netlink: 'syz.0.9740': attribute type 9 has an invalid length. [ 706.881503][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9740'. [ 706.955106][T11573] loop1: detected capacity change from 0 to 512 [ 706.989680][T11573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.006750][T11573] ext4 filesystem being mounted at /941/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.196814][T11588] lo speed is unknown, defaulting to 1000 [ 707.418905][T11589] lo speed is unknown, defaulting to 1000 [ 708.387247][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.402978][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9754'. [ 708.412022][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9754'. [ 708.421034][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9754'. [ 708.488779][T11647] lo speed is unknown, defaulting to 1000 [ 708.896321][T11685] loop7: detected capacity change from 0 to 16384 [ 709.093574][T11698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 709.189956][T11708] dccp_v6_rcv: dropped packet with invalid checksum [ 709.472308][T11733] veth0_macvtap: left promiscuous mode [ 709.479489][T11736] loop1: detected capacity change from 0 to 512 [ 709.498715][T11733] macvtap0: refused to change device tx_queue_len [ 709.512375][T11736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.525497][T11736] ext4 filesystem being mounted at /950/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 709.679806][T11754] xt_HMARK: spi-set and port-set can't be combined [ 709.721759][T11762] rdma_op ffff888119416180 conn xmit_rdma 0000000000000000 [ 709.770591][T11763] lo speed is unknown, defaulting to 1000 [ 710.082061][T11786] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.9794'. [ 710.128272][T11792] syz.2.9797: attempt to access beyond end of device [ 710.128272][T11792] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 710.352436][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.370107][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 710.370121][ T29] audit: type=1326 audit(2000000061.370:53740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.2.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 710.400617][ T29] audit: type=1326 audit(2000000061.370:53741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.2.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 710.424328][ T29] audit: type=1326 audit(2000000061.370:53742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.2.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 710.691012][T11806] lo speed is unknown, defaulting to 1000 [ 711.523337][ T29] audit: type=1400 audit(2000000062.530:53743): avc: denied { wake_alarm } for pid=11833 comm="syz.1.9802" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.925388][T11838] lo speed is unknown, defaulting to 1000 [ 712.348905][T11839] lo speed is unknown, defaulting to 1000 [ 712.606568][ T29] audit: type=1326 audit(2000000063.600:53744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.6.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 712.630371][ T29] audit: type=1326 audit(2000000063.600:53745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.6.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 712.653991][ T29] audit: type=1326 audit(2000000063.600:53746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.6.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 712.677749][ T29] audit: type=1326 audit(2000000063.600:53747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.6.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 712.701394][ T29] audit: type=1326 audit(2000000063.600:53748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.6.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 712.725016][ T29] audit: type=1326 audit(2000000063.600:53749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.6.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 712.779053][ T23] Process accounting resumed [ 712.797325][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 712.806554][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 712.828885][T11912] netlink: zone id is out of range [ 712.834372][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 712.867146][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 712.876082][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 712.933256][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 712.992438][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 713.001455][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 713.012430][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 713.099918][T11926] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O€!ÝëL›8iHÑ¡ [ 713.300058][T11944] program syz.2.9829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.328351][T11948] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9831'. [ 713.420953][T11956] netlink: 'syz.2.9844': attribute type 1 has an invalid length. [ 713.449688][T11961] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 713.470434][T11963] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O€!ÝëL›8iHÑ¡ [ 713.482811][T11965] xt_hashlimit: max too large, truncated to 1048576 [ 713.510236][T11969] lo: entered promiscuous mode [ 713.515058][T11969] lo: entered allmulticast mode [ 713.614620][T11983] 9pnet: Could not find request transport: t [ 713.683685][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.700511][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.847355][T12006] loop1: detected capacity change from 0 to 164 [ 713.855170][T12006] Unable to read rock-ridge attributes [ 713.863708][T12006] Unable to read rock-ridge attributes [ 714.784171][T12105] lo speed is unknown, defaulting to 1000 [ 715.536787][T12172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.600775][T12172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.758885][T12200] lo speed is unknown, defaulting to 1000 [ 716.152256][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 716.152271][ T29] audit: type=1326 audit(2000000067.160:53817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 716.199494][ T29] audit: type=1326 audit(2000000067.190:53818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 716.223213][ T29] audit: type=1326 audit(2000000067.190:53819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 716.246817][ T29] audit: type=1326 audit(2000000067.190:53820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 716.270555][ T29] audit: type=1326 audit(2000000067.190:53821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 716.294202][ T29] audit: type=1326 audit(2000000067.190:53822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 716.480799][ T29] audit: type=1326 audit(2000000067.490:53823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ce0e969 code=0x7ffc0000 [ 716.504597][ T29] audit: type=1326 audit(2000000067.490:53824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ce0e969 code=0x7ffc0000 [ 716.587395][ T29] audit: type=1326 audit(2000000067.540:53825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f310ce0e969 code=0x7ffc0000 [ 716.611105][ T29] audit: type=1326 audit(2000000067.540:53826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ce0e969 code=0x7ffc0000 [ 716.715413][T12291] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 716.751772][T12299] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 716.760473][T12301] bridge0: port 5(veth0_to_bridge) entered blocking state [ 716.767747][T12301] bridge0: port 5(veth0_to_bridge) entered disabled state [ 716.776615][T12301] veth0_to_bridge: entered allmulticast mode [ 716.783218][T12301] veth0_to_bridge: entered promiscuous mode [ 716.963569][T12345] IPv6: NLM_F_CREATE should be specified when creating new route [ 717.479186][T12397] lo speed is unknown, defaulting to 1000 [ 717.877880][T12422] loop1: detected capacity change from 0 to 512 [ 717.931473][T12422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.945189][T12422] ext4 filesystem being mounted at /979/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.188035][T12449] lo speed is unknown, defaulting to 1000 [ 718.437955][T12451] program syz.6.9952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 718.664579][T12490] __nla_validate_parse: 2 callbacks suppressed [ 718.664596][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9959'. [ 718.680748][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9959'. [ 718.718443][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.769190][T12510] loop1: detected capacity change from 0 to 256 [ 718.781771][T12500] lo speed is unknown, defaulting to 1000 [ 718.877625][T12525] loop1: detected capacity change from 0 to 512 [ 718.946105][T12525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.989637][T12525] ext4 filesystem being mounted at /981/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 719.146313][T12577] lo speed is unknown, defaulting to 1000 [ 719.490700][T12579] lo speed is unknown, defaulting to 1000 [ 720.889058][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.010382][T12651] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 721.206829][T12675] hub 2-0:1.0: USB hub found [ 721.211832][T12675] hub 2-0:1.0: 8 ports detected [ 721.313434][T12689] lo speed is unknown, defaulting to 1000 [ 721.930551][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 721.930566][ T29] audit: type=1326 audit(2000000072.940:53858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 721.960559][ T29] audit: type=1326 audit(2000000072.940:53859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.013962][ T29] audit: type=1326 audit(2000000072.970:53860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.056802][ T29] audit: type=1326 audit(2000000073.050:53861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.080601][ T29] audit: type=1326 audit(2000000073.050:53862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.104255][ T29] audit: type=1326 audit(2000000073.060:53863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.128106][ T29] audit: type=1326 audit(2000000073.060:53864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.151859][ T29] audit: type=1326 audit(2000000073.060:53865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.175549][ T29] audit: type=1326 audit(2000000073.060:53866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.194196][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881195bc000: rx timeout, send abort [ 722.199262][ T29] audit: type=1326 audit(2000000073.060:53867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12757 comm="syz.1.10003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x7ffc0000 [ 722.208857][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881195bc000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 722.304740][T12793] lo speed is unknown, defaulting to 1000 [ 722.312261][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10006'. [ 722.339349][T12817] 9pnet: p9_errstr2errno: server reported unknown error @ÿÿÿÿ [ 722.447003][T12824] bridge0: port 3(gretap0) entered blocking state [ 722.453587][T12824] bridge0: port 3(gretap0) entered disabled state [ 722.465271][T12824] gretap0: entered allmulticast mode [ 722.472198][T12824] gretap0: entered promiscuous mode [ 722.484490][T12824] bridge0: port 3(gretap0) entered blocking state [ 722.490999][T12824] bridge0: port 3(gretap0) entered forwarding state [ 722.518238][T12824] gretap0: left allmulticast mode [ 722.523344][T12824] gretap0: left promiscuous mode [ 722.528472][T12824] bridge0: port 3(gretap0) entered disabled state [ 722.666685][T12868] loop1: detected capacity change from 0 to 128 [ 723.154049][T12955] bridge0: entered promiscuous mode [ 723.168453][T12955] bridge0: port 3(macvlan2) entered blocking state [ 723.175205][T12955] bridge0: port 3(macvlan2) entered disabled state [ 723.193354][T12955] macvlan2: entered allmulticast mode [ 723.198779][T12955] bridge0: entered allmulticast mode [ 723.217118][T12955] macvlan2: left allmulticast mode [ 723.222385][T12955] bridge0: left allmulticast mode [ 723.236912][T12955] bridge0: left promiscuous mode [ 723.327221][T12986] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.10043'. [ 723.343652][T12991] atomic_op ffff88818aad8928 conn xmit_atomic 0000000000000000 [ 723.415015][T13007] syz.6.10048: attempt to access beyond end of device [ 723.415015][T13007] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 724.064481][T13108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10073'. [ 724.073621][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10073'. [ 724.179849][T13115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10076'. [ 724.188936][T13115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10076'. [ 724.214661][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10077'. [ 724.394729][T13135] loop1: detected capacity change from 0 to 128 [ 724.408873][T13135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 724.424963][T13135] ext4 filesystem being mounted at /1001/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.493840][T24204] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.741900][T13179] lo speed is unknown, defaulting to 1000 [ 724.964511][T13181] lo speed is unknown, defaulting to 1000 [ 725.553987][T13177] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 725.638636][T13228] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 726.038950][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10112'. [ 726.205677][T13283] lo speed is unknown, defaulting to 1000 [ 726.427221][T13285] lo speed is unknown, defaulting to 1000 [ 727.091660][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 727.091676][ T29] audit: type=1400 audit(2000000077.180:54033): avc: denied { create } for pid=13279 comm="syz.5.10113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.118161][ T29] audit: type=1400 audit(2000000077.190:54034): avc: denied { bind } for pid=13279 comm="syz.5.10113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.139281][ T29] audit: type=1400 audit(2000000077.190:54035): avc: denied { setopt } for pid=13279 comm="syz.5.10113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.159513][ T29] audit: type=1400 audit(2000000077.190:54036): avc: denied { write } for pid=13279 comm="syz.5.10113" path="socket:[107680]" dev="sockfs" ino=107680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.227497][ T29] audit: type=1400 audit(2000000078.220:54037): avc: denied { create } for pid=13331 comm="syz.6.10114" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 727.259782][ T29] audit: type=1400 audit(2000000078.240:54038): avc: denied { write } for pid=13331 comm="syz.6.10114" name="file0" dev="tmpfs" ino=5924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 727.282837][ T29] audit: type=1400 audit(2000000078.240:54039): avc: denied { open } for pid=13331 comm="syz.6.10114" path="/1139/file0" dev="tmpfs" ino=5924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 727.307380][ T29] audit: type=1400 audit(2000000078.290:54040): avc: denied { setopt } for pid=13338 comm="syz.2.10116" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 727.328296][ T29] audit: type=1400 audit(2000000078.290:54041): avc: denied { write } for pid=13338 comm="syz.2.10116" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 727.363921][ T29] audit: type=1400 audit(2000000078.360:54042): avc: denied { ioctl } for pid=13331 comm="syz.6.10114" path="/1139/file0" dev="tmpfs" ino=5924 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 727.451471][T13351] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 727.460822][T13354] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 727.469379][T13354] SELinux: failed to load policy [ 727.604651][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10127'. [ 727.661939][T13393] loop1: detected capacity change from 0 to 512 [ 727.742432][T13395] pim6reg: entered allmulticast mode [ 727.761687][T13395] pim6reg: left allmulticast mode [ 727.772459][T13393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.819561][T13393] ext4 filesystem being mounted at /1009/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 727.878340][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10127'. [ 728.117217][T13431] lo speed is unknown, defaulting to 1000 [ 728.582560][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.876661][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10146'. [ 728.961094][T13513] hub 2-0:1.0: USB hub found [ 728.976518][T13513] hub 2-0:1.0: 8 ports detected [ 729.143496][T13546] loop1: detected capacity change from 0 to 512 [ 729.162024][T13546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.183662][T13546] ext4 filesystem being mounted at /1018/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 729.410811][T13558] lo speed is unknown, defaulting to 1000 [ 729.914418][T13603] sd 0:0:1:0: device reset [ 730.012285][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.521901][T13699] __nla_validate_parse: 3 callbacks suppressed [ 730.521920][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10181'. [ 730.537213][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10181'. [ 730.590785][T13710] lo speed is unknown, defaulting to 1000 [ 730.637457][T13724] loop1: detected capacity change from 0 to 1024 [ 730.651747][T13724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.667986][T13724] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.10185: Abort forced by user [ 730.678412][T13724] EXT4-fs (loop1): Remounting filesystem read-only [ 730.685007][T13724] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 731.105275][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10191'. [ 731.116294][T13750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.123790][T13750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.132160][T13750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.139605][T13750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.228854][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.365753][T13773] netlink: 'syz.6.10200': attribute type 21 has an invalid length. [ 731.637601][T13789] lo speed is unknown, defaulting to 1000 [ 732.161718][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 732.161735][ T29] audit: type=1400 audit(2000000083.170:54196): avc: denied { ioctl } for pid=13839 comm="syz.5.10206" path="socket:[108074]" dev="sockfs" ino=108074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 732.210121][T13843] netlink: 'syz.1.10205': attribute type 3 has an invalid length. [ 732.267604][ T29] audit: type=1400 audit(2000000083.250:54197): avc: denied { create } for pid=13846 comm="syz.5.10208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 732.288203][ T29] audit: type=1400 audit(2000000083.250:54198): avc: denied { write } for pid=13846 comm="syz.5.10208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 732.329771][T13861] loop1: detected capacity change from 0 to 512 [ 732.364543][T13861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.385165][T13861] ext4 filesystem being mounted at /1037/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 732.396887][ T29] audit: type=1326 audit(2000000083.350:54199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 732.420666][ T29] audit: type=1326 audit(2000000083.350:54200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 732.444396][ T29] audit: type=1326 audit(2000000083.350:54201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 732.468228][ T29] audit: type=1326 audit(2000000083.350:54202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 732.519976][ T3766] usb usb6-port1: attempt power cycle [ 732.722853][T13887] lo speed is unknown, defaulting to 1000 [ 733.153033][T13911] lo speed is unknown, defaulting to 1000 [ 733.234453][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.284135][ T29] audit: type=1400 audit(2000000084.290:54203): avc: denied { getopt } for pid=13927 comm="syz.1.10217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 733.380438][ T29] audit: type=1326 audit(2000000084.390:54204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.0.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 733.445392][ T29] audit: type=1326 audit(2000000084.410:54205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.0.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 734.160585][T14035] bridge0: entered promiscuous mode [ 734.165833][T14035] macvlan2: entered promiscuous mode [ 734.173284][T14035] bridge0: port 4(macvlan2) entered blocking state [ 734.180563][T14035] bridge0: port 4(macvlan2) entered disabled state [ 734.187412][T14035] macvlan2: entered allmulticast mode [ 734.192837][T14035] bridge0: entered allmulticast mode [ 734.199487][T14035] macvlan2: left allmulticast mode [ 734.204678][T14035] bridge0: left allmulticast mode [ 734.214903][T14035] bridge0: left promiscuous mode [ 734.231378][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10234'. [ 734.456801][T14081] loop1: detected capacity change from 0 to 512 [ 734.476588][T14081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.489783][T14081] ext4 filesystem being mounted at /1048/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 734.812960][T14092] lo speed is unknown, defaulting to 1000 [ 735.159911][T14094] lo speed is unknown, defaulting to 1000 [ 735.636222][ T3766] usb usb6-port1: unable to enumerate USB device [ 735.649846][T13708] vhci_hcd: invalid port number 96 [ 735.655009][T13708] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 736.521304][T14143] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 736.546685][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.692605][T14172] lo speed is unknown, defaulting to 1000 [ 736.734261][T14179] hub 4-0:1.0: USB hub found [ 736.799809][T14179] hub 4-0:1.0: 8 ports detected [ 736.955034][T14216] lo speed is unknown, defaulting to 1000 [ 737.359667][T14218] lo speed is unknown, defaulting to 1000 [ 738.784033][T14268] atomic_op ffff88812445e928 conn xmit_atomic 0000000000000000 [ 738.816945][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 738.816962][ T29] audit: type=1326 audit(2000000089.820:54249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.10269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 738.858810][ T29] audit: type=1326 audit(2000000089.850:54250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.10269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 738.883051][ T29] audit: type=1326 audit(2000000089.850:54251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.10269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 738.906943][ T29] audit: type=1326 audit(2000000089.850:54252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.10269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 738.933658][T14277] loop1: detected capacity change from 0 to 128 [ 738.952048][T14277] vfat: Unknown parameter 'õ³ò8' [ 739.056248][T14302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14302 comm=syz.1.10277 [ 739.068939][T14302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14302 comm=syz.1.10277 [ 739.146365][T14317] loop1: detected capacity change from 0 to 512 [ 739.165299][T14317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.178908][T14317] ext4 filesystem being mounted at /1056/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.219189][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.280302][ T29] audit: type=1400 audit(2000000090.280:54253): avc: denied { kexec_image_load } for pid=14285 comm="syz.0.10284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 739.540174][ T29] audit: type=1400 audit(2000000090.540:54254): avc: denied { bind } for pid=14375 comm="syz.1.10293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 739.578838][T14382] openvswitch: netlink: Message has 6 unknown bytes. [ 739.596685][ T29] audit: type=1400 audit(2000000090.600:54255): avc: denied { mounton } for pid=14383 comm="syz.0.10295" path=2F323233332FE91F7189591E9233614B dev="tmpfs" ino=11748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 739.674831][T14397] loop1: detected capacity change from 0 to 1024 [ 739.692202][T14397] EXT4-fs: Ignoring removed nobh option [ 739.697798][T14397] EXT4-fs: Ignoring removed bh option [ 739.728738][T14397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.762283][T14435] sch_fq: defrate 2048 ignored. [ 739.786995][ T29] audit: type=1400 audit(2000000090.790:54256): avc: denied { append } for pid=14394 comm="syz.1.10296" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 739.809573][ T29] audit: type=1400 audit(2000000090.790:54257): avc: denied { open } for pid=14394 comm="syz.1.10296" path="/1061/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 739.869766][ T29] audit: type=1400 audit(2000000090.790:54258): avc: denied { write } for pid=14394 comm="syz.1.10296" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 739.949935][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.007211][T14489] loop1: detected capacity change from 0 to 512 [ 740.028588][T14489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.046046][T14489] ext4 filesystem being mounted at /1062/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.284807][T14528] lo speed is unknown, defaulting to 1000 [ 740.861027][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.012865][T14586] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 741.021667][T14586] vhci_hcd: default hub control req: 1f31 v0017 i0001 l0 [ 741.304592][T14610] lo speed is unknown, defaulting to 1000 [ 741.634387][T14637] netlink: 'syz.1.10320': attribute type 1 has an invalid length. [ 741.780651][T14643] loop1: detected capacity change from 0 to 128 [ 741.806254][T14643] syz.1.10323: attempt to access beyond end of device [ 741.806254][T14643] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 741.831398][T32231] kworker/u8:52: attempt to access beyond end of device [ 741.831398][T32231] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 741.969659][T14664] loop1: detected capacity change from 0 to 164 [ 742.141672][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10337'. [ 742.151179][T14679] IPVS: Unknown mcast interface: vcan0 [ 742.390205][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10351'. [ 742.399291][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10351'. [ 742.506955][T14740] SELinux: syz.5.10355 (14740) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 742.755850][T14772] lo speed is unknown, defaulting to 1000 [ 743.107083][T14805] loop1: detected capacity change from 0 to 512 [ 743.151135][T14805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.197379][T14805] ext4 filesystem being mounted at /1085/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.440756][T14843] lo speed is unknown, defaulting to 1000 [ 743.807071][T14865] lo speed is unknown, defaulting to 1000 [ 743.907028][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10377'. [ 744.145341][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 744.145361][ T29] audit: type=1400 audit(2000000095.150:54353): avc: denied { getopt } for pid=14906 comm="syz.5.10380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 744.200519][ T29] audit: type=1400 audit(2000000095.180:54354): avc: denied { read } for pid=14908 comm="syz.6.10381" name="/" dev="configfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 744.208437][T14915] SELinux: syz.5.10382 (14915) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 744.222725][ T29] audit: type=1400 audit(2000000095.180:54355): avc: denied { open } for pid=14908 comm="syz.6.10381" path="/" dev="configfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 744.342278][ T29] audit: type=1400 audit(2000000095.340:54356): avc: denied { watch watch_reads } for pid=14927 comm="syz.5.10385" path="/1661/file0" dev="tmpfs" ino=8715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 744.416819][ T29] audit: type=1326 audit(2000000095.420:54357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.6.10388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 744.460733][ T29] audit: type=1326 audit(2000000095.420:54358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.6.10388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 744.485325][ T29] audit: type=1326 audit(2000000095.450:54359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.6.10388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 744.509237][ T29] audit: type=1326 audit(2000000095.460:54360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.6.10388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 744.533588][ T29] audit: type=1326 audit(2000000095.460:54361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.6.10388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 744.557328][ T29] audit: type=1326 audit(2000000095.460:54362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.0.10389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 745.005581][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.067249][T15043] netlink: 'syz.1.10407': attribute type 10 has an invalid length. [ 745.076934][T15043] team0: Device ipvlan0 failed to register rx_handler [ 745.259330][T15064] netlink: 87 bytes leftover after parsing attributes in process `syz.1.10415'. [ 745.471284][T15069] lo speed is unknown, defaulting to 1000 [ 745.838799][T15119] IPVS: Error connecting to the multicast addr [ 746.153816][T15157] loop1: detected capacity change from 0 to 512 [ 746.184296][T15157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.204440][T15157] ext4 filesystem being mounted at /1093/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.253184][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.364503][T15196] loop1: detected capacity change from 0 to 1764 [ 746.373448][T15201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10440'. [ 746.583231][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.607938][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.764164][T15260] lo speed is unknown, defaulting to 1000 [ 747.565791][T15334] lo speed is unknown, defaulting to 1000 [ 747.693813][T15372] loop1: detected capacity change from 0 to 512 [ 747.728709][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10467'. [ 747.744832][T15372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.759762][T15372] ext4 filesystem being mounted at /1104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 747.785838][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10469'. [ 747.796878][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10469'. [ 748.041383][T15418] lo speed is unknown, defaulting to 1000 [ 748.232625][T15406] can0 (unregistered): slcan off ttyS3. [ 748.561337][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.748190][T15495] lo speed is unknown, defaulting to 1000 [ 749.716612][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 749.716637][ T29] audit: type=1400 audit(2000000100.720:54518): avc: denied { name_connect } for pid=15542 comm="syz.2.10493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 749.825050][T15549] loop1: detected capacity change from 0 to 512 [ 749.855547][T15549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.898082][T15549] ext4 filesystem being mounted at /1107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 749.944561][T15533] lo speed is unknown, defaulting to 1000 [ 750.163859][T15595] lo speed is unknown, defaulting to 1000 [ 750.780752][ T29] audit: type=1400 audit(2000000101.750:54519): avc: denied { listen } for pid=15634 comm="syz.5.10504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 750.800720][ T29] audit: type=1400 audit(2000000101.760:54520): avc: denied { accept } for pid=15634 comm="syz.5.10504" lport=48390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 750.890248][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.928651][ T29] audit: type=1400 audit(2000000101.930:54521): avc: denied { name_bind } for pid=15663 comm="syz.0.10509" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 750.967525][ T29] audit: type=1326 audit(2000000101.940:54522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15666 comm="syz.1.10507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe90886e969 code=0x0 [ 750.991582][ T29] audit: type=1326 audit(2000000101.960:54523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.2.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 751.015406][ T29] audit: type=1326 audit(2000000101.960:54524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.2.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 751.040137][ T29] audit: type=1326 audit(2000000101.960:54525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.2.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 751.064112][ T29] audit: type=1326 audit(2000000101.960:54526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.2.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 751.088363][ T29] audit: type=1326 audit(2000000101.960:54527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.2.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415293e969 code=0x7ffc0000 [ 751.262692][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.271920][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.575479][T15721] lo speed is unknown, defaulting to 1000 [ 751.862978][T15746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10531'. [ 752.049432][T15761] ipvlan0: entered promiscuous mode [ 752.052335][T15765] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10537'. [ 752.054760][T15761] ipvlan0: entered allmulticast mode [ 752.069161][T15761] hsr0: entered allmulticast mode [ 752.074227][T15761] hsr_slave_0: entered allmulticast mode [ 752.079961][T15761] hsr_slave_1: entered allmulticast mode [ 752.089405][T15771] netlink: 'syz.2.10540': attribute type 10 has an invalid length. [ 752.115512][T15775] bridge0: entered promiscuous mode [ 752.121614][T15775] macvlan2: entered promiscuous mode [ 752.130822][T15782] netlink: 404 bytes leftover after parsing attributes in process `syz.2.10543'. [ 752.136542][T15775] bridge0: port 4(macvlan2) entered blocking state [ 752.146603][T15775] bridge0: port 4(macvlan2) entered disabled state [ 752.153925][T15775] macvlan2: entered allmulticast mode [ 752.159318][T15775] bridge0: entered allmulticast mode [ 752.170736][T15775] macvlan2: left allmulticast mode [ 752.175945][T15775] bridge0: left allmulticast mode [ 752.187817][T15775] bridge0: left promiscuous mode [ 752.201142][T15788] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10546'. [ 752.364793][T15819] sd 0:0:1:0: device reset [ 752.455068][T15835] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10556'. [ 752.472106][T15824] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10556'. [ 752.732500][T15879] lo speed is unknown, defaulting to 1000 [ 753.259545][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10570'. [ 753.272576][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10570'. [ 753.428756][T15943] lo speed is unknown, defaulting to 1000 [ 753.612919][T15985] netlink: 'syz.5.10580': attribute type 3 has an invalid length. [ 753.733669][T16003] loop1: detected capacity change from 0 to 512 [ 753.748690][T16003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.762390][T16003] ext4 filesystem being mounted at /1131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 753.982869][T16026] lo speed is unknown, defaulting to 1000 [ 754.599132][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.656420][T31690] Process accounting resumed [ 754.718526][T16081] loop1: detected capacity change from 0 to 512 [ 754.736823][T16081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.760426][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 754.760444][ T29] audit: type=1400 audit(2000000105.760:54657): avc: denied { create } for pid=16087 comm="syz.5.10593" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 754.795980][T16081] ext4 filesystem being mounted at /1133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 754.824880][T16091] bridge0: entered promiscuous mode [ 754.841277][T16091] macvlan0: entered promiscuous mode [ 754.854141][ T29] audit: type=1400 audit(2000000105.860:54658): avc: denied { name_bind } for pid=16095 comm="syz.2.10604" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 754.876144][ T29] audit: type=1400 audit(2000000105.860:54659): avc: denied { node_bind } for pid=16095 comm="syz.2.10604" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 754.915319][T16091] bridge0: port 6(macvlan0) entered blocking state [ 754.922678][T16091] bridge0: port 6(macvlan0) entered disabled state [ 754.939832][T16091] macvlan0: entered allmulticast mode [ 754.945251][T16091] bridge0: entered allmulticast mode [ 754.964188][ T29] audit: type=1400 audit(2000000105.970:54660): avc: denied { name_bind } for pid=16101 comm="syz.2.10596" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 754.982690][T16091] macvlan0: left allmulticast mode [ 754.991345][T16091] bridge0: left allmulticast mode [ 754.998957][ T29] audit: type=1400 audit(2000000106.000:54661): avc: denied { bind } for pid=16107 comm="syz.0.10597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 755.049066][T16091] bridge0: left promiscuous mode [ 755.229173][ T3766] kernel write not supported for file bpf-prog (pid: 3766 comm: kworker/0:11) [ 755.249922][T16110] lo speed is unknown, defaulting to 1000 [ 755.495125][ T29] audit: type=1400 audit(2000000106.500:54662): avc: denied { create } for pid=16144 comm="syz.2.10599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 755.566807][ T29] audit: type=1400 audit(2000000106.570:54663): avc: denied { connect } for pid=16144 comm="syz.2.10599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 755.599447][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.631024][ T29] audit: type=1400 audit(2000000106.630:54664): avc: denied { create } for pid=16153 comm="syz.1.10603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 755.687610][ T29] audit: type=1400 audit(2000000106.660:54665): avc: denied { write } for pid=16153 comm="syz.1.10603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 755.723348][T16167] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 755.745817][ T29] audit: type=1400 audit(2000000106.750:54666): avc: denied { read write } for pid=16171 comm="syz.2.10611" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 755.746792][T16167] team0 (unregistering): Port device team_slave_0 removed [ 755.772749][T16173] sg_write: data in/out 214/10 bytes for SCSI command 0xff-- guessing data in; [ 755.772749][T16173] program syz.2.10611 not setting count and/or reply_len properly [ 755.810092][T16175] sctp: [Deprecated]: syz.6.10621 (pid 16175) Use of int in maxseg socket option. [ 755.810092][T16175] Use struct sctp_assoc_value instead [ 755.816494][T16167] team0 (unregistering): Port device team_slave_1 removed [ 755.938053][T16215] bridge0: entered promiscuous mode [ 755.980542][T16215] macvlan2: entered promiscuous mode [ 755.989596][T16215] bridge0: port 4(macvlan2) entered blocking state [ 755.996198][T16215] bridge0: port 4(macvlan2) entered disabled state [ 756.034163][T16215] macvlan2: entered allmulticast mode [ 756.039606][T16215] bridge0: entered allmulticast mode [ 756.091965][T16215] macvlan2: left allmulticast mode [ 756.097215][T16215] bridge0: left allmulticast mode [ 757.040369][T16215] bridge0: left promiscuous mode [ 757.246500][T16227] lo speed is unknown, defaulting to 1000 [ 757.310590][T16230] lo speed is unknown, defaulting to 1000 [ 757.575492][T16293] bridge0: entered promiscuous mode [ 757.586897][T16293] macvlan2: entered promiscuous mode [ 757.593378][T16293] bridge0: port 4(macvlan2) entered blocking state [ 757.600193][T16293] bridge0: port 4(macvlan2) entered disabled state [ 757.613863][T16293] macvlan2: entered allmulticast mode [ 757.619255][T16293] bridge0: entered allmulticast mode [ 757.686340][T16293] macvlan2: left allmulticast mode [ 757.691552][T16293] bridge0: left allmulticast mode [ 757.702212][T16293] bridge0: left promiscuous mode [ 757.820296][T16300] lo speed is unknown, defaulting to 1000 [ 758.475170][T16352] lo speed is unknown, defaulting to 1000 [ 758.779442][T16377] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10642'. [ 759.008835][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10648'. [ 759.433470][T16482] lo speed is unknown, defaulting to 1000 [ 759.712610][T16508] netlink: 304 bytes leftover after parsing attributes in process `syz.2.10665'. [ 759.741180][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10665'. [ 759.872066][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 759.872088][ T29] audit: type=1400 audit(2000000110.880:54723): avc: denied { mount } for pid=16520 comm="syz.2.10666" name="/" dev="ramfs" ino=111868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 760.152457][T16560] lo speed is unknown, defaulting to 1000 [ 760.681548][T16607] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 760.758343][T16624] netlink: 'syz.0.10676': attribute type 4 has an invalid length. [ 761.103708][T16656] lo speed is unknown, defaulting to 1000 [ 761.500205][ T23] usb usb8-port2: attempt power cycle [ 761.509527][ T3766] usb usb6-port1: attempt power cycle [ 762.010652][T16684] lo speed is unknown, defaulting to 1000 [ 762.079217][T16685] lo speed is unknown, defaulting to 1000 [ 762.730608][T16729] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 762.739005][T16729] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 763.733545][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10683'. [ 763.823198][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10689'. [ 763.835878][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10689'. [ 763.845821][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10689'. [ 763.856163][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10689'. [ 763.896239][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10689'. [ 763.923610][ T29] audit: type=1400 audit(2000000114.930:54724): avc: denied { create } for pid=16764 comm="syz.5.10691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 763.944344][T16765] Cannot find del_set index 0 as target [ 763.957234][ T29] audit: type=1400 audit(2000000114.950:54725): avc: denied { setopt } for pid=16764 comm="syz.5.10691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 763.977507][ T29] audit: type=1400 audit(2000000114.960:54726): avc: denied { create } for pid=16767 comm="syz.2.10692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 763.997319][ T29] audit: type=1400 audit(2000000114.960:54727): avc: denied { setopt } for pid=16767 comm="syz.2.10692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.020588][ T29] audit: type=1400 audit(2000000114.960:54728): avc: denied { connect } for pid=16767 comm="syz.2.10692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.061849][T16773] netlink: 'syz.5.10693': attribute type 10 has an invalid length. [ 764.069824][T16773] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10693'. [ 764.089015][ T29] audit: type=1400 audit(2000000115.090:54729): avc: denied { read write } for pid=16776 comm="syz.2.10694" name="ptmx" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 764.123404][ T29] audit: type=1400 audit(2000000115.120:54730): avc: denied { open } for pid=16776 comm="syz.2.10694" path="/dev/ptmx" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 764.197880][ T29] audit: type=1400 audit(2000000115.200:54731): avc: denied { read write } for pid=10322 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.222384][ T29] audit: type=1400 audit(2000000115.200:54732): avc: denied { open } for pid=10322 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.531945][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 764.541014][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 764.550155][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 764.744766][T16887] netlink: 'syz.2.10709': attribute type 11 has an invalid length. [ 764.752896][T16887] netlink: 'syz.2.10709': attribute type 15 has an invalid length. [ 764.760859][T16887] netlink: 'syz.2.10709': attribute type 16 has an invalid length. [ 764.768863][T16887] netlink: 12838 bytes leftover after parsing attributes in process `syz.2.10709'. [ 764.823570][T16911] SELinux: policydb version 17152 does not match my version range 15-34 [ 764.832220][T16911] SELinux: failed to load policy [ 764.923471][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 764.923487][ T29] audit: type=1400 audit(2000000115.930:54767): avc: denied { setopt } for pid=16929 comm="syz.2.10717" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 764.950689][ T3766] usb usb6-port1: unable to enumerate USB device [ 764.969858][T16335] vhci_hcd: invalid port number 255 [ 764.975109][T16335] vhci_hcd: default hub control req: 0000 vfffc i00ff l0 [ 764.990715][ T23] usb usb8-port2: unable to enumerate USB device [ 764.997498][ T29] audit: type=1400 audit(2000000115.960:54768): avc: denied { connect } for pid=16929 comm="syz.2.10717" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 765.018309][ T29] audit: type=1400 audit(2000000115.960:54769): avc: denied { write } for pid=16929 comm="syz.2.10717" path="socket:[112101]" dev="sockfs" ino=112101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 765.080750][ T29] audit: type=1400 audit(2000000116.000:54770): avc: denied { read } for pid=16932 comm="syz.5.10718" name="ptmx" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 765.104443][ T29] audit: type=1400 audit(2000000116.000:54771): avc: denied { open } for pid=16932 comm="syz.5.10718" path="/dev/ptmx" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 765.129213][ T29] audit: type=1400 audit(2000000116.000:54772): avc: denied { ioctl } for pid=16932 comm="syz.5.10718" path="/dev/ptmx" dev="devtmpfs" ino=250 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 765.154973][ T29] audit: type=1400 audit(2000000116.020:54773): avc: denied { append } for pid=16940 comm="syz.5.10720" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 765.178855][ T29] audit: type=1400 audit(2000000116.060:54774): avc: denied { write } for pid=16937 comm="syz.2.10719" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 765.202882][ T29] audit: type=1400 audit(2000000116.060:54775): avc: denied { execmem } for pid=16937 comm="syz.2.10719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 765.222428][ T29] audit: type=1400 audit(2000000116.060:54776): avc: denied { create } for pid=16942 comm="syz.5.10721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.365841][T16961] lo speed is unknown, defaulting to 1000 [ 766.092109][T17014] lo speed is unknown, defaulting to 1000 [ 766.409852][T17016] lo speed is unknown, defaulting to 1000 [ 767.897063][T17074] loop1: detected capacity change from 0 to 512 [ 767.912106][T17074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.934836][T17081] 9pnet_fd: Insufficient options for proto=fd [ 767.948195][T17074] ext4 filesystem being mounted at /1142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.226847][T17121] lo speed is unknown, defaulting to 1000 [ 768.676001][ T3766] usb usb8-port2: attempt power cycle [ 768.717853][T17164] program syz.2.10760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.764150][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.783038][T17170] ip6gretap1: entered allmulticast mode [ 768.902588][T17195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10768'. [ 769.042550][T17211] lo speed is unknown, defaulting to 1000 [ 769.412591][T17237] netlink: 11 bytes leftover after parsing attributes in process `syz.1.10771'. [ 769.561950][T17249] loop1: detected capacity change from 0 to 512 [ 769.571784][T17249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.585058][T17249] ext4 filesystem being mounted at /1151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 769.810596][T17275] lo speed is unknown, defaulting to 1000 [ 770.146546][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 770.146565][ T29] audit: type=1400 audit(2000000121.150:54879): avc: denied { watch } for pid=17302 comm="syz.0.10781" path="/2349" dev="tmpfs" ino=12343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 770.175187][ T29] audit: type=1400 audit(2000000121.150:54880): avc: denied { watch_reads } for pid=17302 comm="syz.0.10781" path="/2349" dev="tmpfs" ino=12343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 770.275308][ T29] audit: type=1400 audit(2000000121.280:54881): avc: denied { name_bind } for pid=17309 comm="syz.0.10783" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 770.520349][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.600707][T17333] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10785'. [ 770.609984][ T29] audit: type=1400 audit(2000000121.590:54882): avc: denied { create } for pid=17332 comm="syz.2.10785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 770.630909][ T29] audit: type=1400 audit(2000000121.610:54883): avc: denied { write } for pid=17332 comm="syz.2.10785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 770.718771][T17356] loop1: detected capacity change from 0 to 1024 [ 770.722431][ T3766] usb usb8-port2: unable to enumerate USB device [ 770.735086][T17356] EXT4-fs: Ignoring removed orlov option [ 770.750417][T17356] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 770.765928][ T29] audit: type=1400 audit(2000000121.770:54884): avc: denied { ioctl } for pid=17363 comm="syz.0.10791" path="socket:[111569]" dev="sockfs" ino=111569 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 770.808656][T17356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.879562][ T29] audit: type=1400 audit(2000000121.870:54885): avc: denied { write } for pid=17355 comm="syz.1.10789" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.902598][ T29] audit: type=1400 audit(2000000121.870:54886): avc: denied { add_name } for pid=17355 comm="syz.1.10789" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.923582][ T29] audit: type=1400 audit(2000000121.870:54887): avc: denied { create } for pid=17355 comm="syz.1.10789" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 770.944981][ T29] audit: type=1400 audit(2000000121.870:54888): avc: denied { append } for pid=17355 comm="syz.1.10789" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 770.999363][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.065989][T17389] vhci_hcd: invalid port number 15 [ 771.071218][T17389] vhci_hcd: invalid port number 15 [ 771.089768][T17392] lo speed is unknown, defaulting to 1000 [ 771.592770][T17423] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 771.708991][T17425] SELinux: failed to load policy [ 771.758099][T17431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10802'. [ 772.137486][T17461] lo speed is unknown, defaulting to 1000 [ 772.247147][T17442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.334075][T17442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.556611][T17492] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10816'. [ 772.691262][T17501] netlink: 'syz.0.10820': attribute type 1 has an invalid length. [ 772.710675][T17501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.732700][T17501] bond0: (slave gretap1): making interface the new active one [ 772.742522][T17501] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 772.950220][ T23] usb usb6-port1: attempt power cycle [ 773.159191][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.173771][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.304020][T17608] lo speed is unknown, defaulting to 1000 [ 773.336646][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10850'. [ 773.359779][ T3766] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec [ 773.750440][T17655] loop1: detected capacity change from 0 to 128 [ 773.849264][T17655] syz.1.10858: attempt to access beyond end of device [ 773.849264][T17655] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 773.865078][T17655] syz.1.10858: attempt to access beyond end of device [ 773.865078][T17655] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 773.878958][T17655] syz.1.10858: attempt to access beyond end of device [ 773.878958][T17655] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 773.893797][T17655] syz.1.10858: attempt to access beyond end of device [ 773.893797][T17655] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 773.908033][T17655] syz.1.10858: attempt to access beyond end of device [ 773.908033][T17655] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 773.952803][T17655] syz.1.10858: attempt to access beyond end of device [ 773.952803][T17655] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 773.978581][T17655] syz.1.10858: attempt to access beyond end of device [ 773.978581][T17655] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 773.994771][T17655] syz.1.10858: attempt to access beyond end of device [ 773.994771][T17655] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 774.008661][T17655] syz.1.10858: attempt to access beyond end of device [ 774.008661][T17655] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 774.024172][T17655] syz.1.10858: attempt to access beyond end of device [ 774.024172][T17655] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 774.118309][T17680] loop1: detected capacity change from 0 to 2048 [ 774.133531][T17680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.151384][T17680] ext4 filesystem being mounted at /1168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.173232][T17680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10868'. [ 774.186027][T17688] blktrace: Concurrent blktraces are not allowed on loop11 [ 774.202566][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.222589][T17693] loop1: detected capacity change from 0 to 512 [ 774.231754][T17693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.245095][T17693] ext4 filesystem being mounted at /1169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 774.381297][T17698] lo speed is unknown, defaulting to 1000 [ 774.490966][T17708] lo speed is unknown, defaulting to 1000 [ 774.841004][ T23] usb usb6-port1: unable to enumerate USB device [ 774.848121][T17352] vhci_hcd: invalid port number 94 [ 774.901299][T17738] program syz.6.10877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.960976][T17738] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 775.083485][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.154324][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 775.154340][ T29] audit: type=1400 audit(2000000126.160:54940): avc: denied { ioctl } for pid=17770 comm="syz.6.10883" path="socket:[113819]" dev="sockfs" ino=113819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.201399][ T29] audit: type=1400 audit(2000000126.190:54941): avc: denied { bind } for pid=17770 comm="syz.6.10883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.221122][ T29] audit: type=1400 audit(2000000126.190:54942): avc: denied { read } for pid=17770 comm="syz.6.10883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.240708][ T29] audit: type=1400 audit(2000000126.200:54943): avc: denied { sys_module } for pid=17769 comm="syz.2.10884" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 775.262067][ T29] audit: type=1400 audit(2000000126.200:54944): avc: denied { module_request } for pid=17769 comm="syz.2.10884" kmod="vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 775.283681][ T29] audit: type=1400 audit(2000000126.200:54945): avc: denied { connect } for pid=17769 comm="syz.2.10884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.303529][ T29] audit: type=1400 audit(2000000126.200:54946): avc: denied { write } for pid=17769 comm="syz.2.10884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.348496][T17781] lo speed is unknown, defaulting to 1000 [ 775.377596][ T29] audit: type=1400 audit(2000000126.210:54947): avc: denied { read write } for pid=24204 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.402119][ T29] audit: type=1400 audit(2000000126.210:54948): avc: denied { open } for pid=24204 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.417575][T17788] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10888'. [ 775.426436][ T29] audit: type=1400 audit(2000000126.210:54949): avc: denied { ioctl } for pid=24204 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.461679][T17788] netlink: 'syz.1.10888': attribute type 5 has an invalid length. [ 775.469519][T17788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10888'. [ 775.506011][T17795] A link change request failed with some changes committed already. Interface 2@ÿ may have been left with an inconsistent configuration, please check. [ 775.787525][T17843] loop1: detected capacity change from 0 to 1024 [ 775.794572][T17843] EXT4-fs: Ignoring removed bh option [ 775.831142][T17843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 775.909809][T17860] lo speed is unknown, defaulting to 1000 [ 776.257707][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 776.375210][T17886] lo speed is unknown, defaulting to 1000 [ 776.528760][T17919] netlink: 'syz.6.10908': attribute type 1 has an invalid length. [ 776.536709][T17919] netlink: 'syz.6.10908': attribute type 4 has an invalid length. [ 776.544578][T17919] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.10908'. [ 777.043990][T17991] lo speed is unknown, defaulting to 1000 [ 777.711652][T18035] SELinux: ebitmap: truncated map [ 777.718296][T18035] SELinux: failed to load policy [ 777.740758][T18049] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.800125][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10937'. [ 777.810464][T18055] bond0: (slave 2@ÿ): Releasing backup interface [ 777.818302][T18055] bond0: (slave bond_slave_1): Releasing backup interface [ 777.826971][T18055] team0: Port device team_slave_0 removed [ 777.833380][T18055] team0: Port device team_slave_1 removed [ 777.840343][T18055] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.848841][T18055] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.857736][T18055] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.866203][T18055] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.875588][T18055] team0: Port device geneve1 removed [ 778.428288][T18078] program syz.1.10948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.494521][T18088] loop1: detected capacity change from 0 to 1024 [ 778.531575][T18088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.548390][T18088] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.10952: Allocating blocks 385-513 which overlap fs metadata [ 778.568413][T18088] EXT4-fs (loop1): pa ffff888106e4f930: logic 16, phys. 129, len 24 [ 778.577169][T18088] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 778.612639][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.737281][T18120] lo speed is unknown, defaulting to 1000 [ 779.421316][T18149] lo speed is unknown, defaulting to 1000 [ 779.795288][T18175] loop1: detected capacity change from 0 to 128 [ 779.808486][T18175] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 779.817029][T18175] FAT-fs (loop1): Filesystem has been set read-only [ 779.825329][T18175] bio_check_eod: 102 callbacks suppressed [ 779.825340][T18175] syz.1.10967: attempt to access beyond end of device [ 779.825340][T18175] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 779.849662][T18175] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 779.857529][T18175] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 779.878794][T18175] syz.1.10967: attempt to access beyond end of device [ 779.878794][T18175] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 779.892530][T18175] syz.1.10967: attempt to access beyond end of device [ 779.892530][T18175] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 779.907406][T18175] syz.1.10967: attempt to access beyond end of device [ 779.907406][T18175] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 779.922412][T18175] syz.1.10967: attempt to access beyond end of device [ 779.922412][T18175] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 780.080340][T18211] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 780.221872][T18231] SELinux: failed to load policy [ 780.235384][T18234] loop1: detected capacity change from 0 to 1024 [ 780.288752][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 780.288766][ T29] audit: type=1326 audit(2000000131.250:55088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.318752][ T29] audit: type=1326 audit(2000000131.250:55089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.342478][ T29] audit: type=1326 audit(2000000131.250:55090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.366267][ T29] audit: type=1326 audit(2000000131.250:55091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.390099][ T29] audit: type=1326 audit(2000000131.250:55092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.413998][ T29] audit: type=1326 audit(2000000131.250:55093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.437675][ T29] audit: type=1326 audit(2000000131.250:55094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.461437][ T29] audit: type=1326 audit(2000000131.250:55095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.485307][ T29] audit: type=1326 audit(2000000131.250:55096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18235 comm="syz.6.10985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342e3de969 code=0x7ffc0000 [ 780.495033][T18234] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 780.518819][T18234] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.10981: Failed to acquire dquot type 0 [ 780.532078][T18234] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 780.547145][T18234] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.10981: corrupted inode contents [ 780.559405][T18234] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.10981: mark_inode_dirty error [ 780.571732][T18234] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.10981: corrupted inode contents [ 780.584712][T18234] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.10981: mark_inode_dirty error [ 780.596547][T18234] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.10981: corrupted inode contents [ 780.609024][T18234] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 780.618474][T18234] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.10981: corrupted inode contents [ 780.632012][T18234] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.10981: mark_inode_dirty error [ 780.643609][T18234] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 780.653329][T18234] EXT4-fs (loop1): 1 truncate cleaned up [ 780.659549][T18234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.677064][T18234] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 780.775755][T18289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11002'. [ 780.784919][T18289] netem: unknown loss type 13 [ 780.789615][T18289] netem: change failed [ 780.818203][T18296] ip6t_rpfilter: unknown options [ 780.936768][T18318] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.10999'. [ 781.181362][T18368] block device autoloading is deprecated and will be removed. [ 781.188908][T18368] syz.2.11006: attempt to access beyond end of device [ 781.188908][T18368] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 781.231887][T18371] lo speed is unknown, defaulting to 1000 [ 782.010315][T18460] Falling back ldisc for ttyS3. [ 782.068047][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.124204][T18495] loop1: detected capacity change from 0 to 512 [ 782.152125][T18495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 782.165467][T18495] ext4 filesystem being mounted at /1196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.237761][T24204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 782.403194][T18547] netlink: 'syz.2.11044': attribute type 1 has an invalid length. [ 782.417905][T18547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 782.436920][T18547] bond3: (slave syz_tun): making interface the new active one [ 782.445790][T18547] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 782.589624][T18601] netlink: 'syz.6.11051': attribute type 1 has an invalid length. [ 782.607690][T18601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.623704][T18601] bond2: (slave gretap1): making interface the new active one [ 782.633372][T18601] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 782.687450][T18652] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 782.796150][T18673] binfmt_misc: register: failed to install interpreter file ./file2 [ 783.073496][T18708] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 783.226282][T18748] loop1: detected capacity change from 0 to 164 [ 783.249099][T18748] syz.1.11090: attempt to access beyond end of device [ 783.249099][T18748] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 783.264359][T18748] syz.1.11090: attempt to access beyond end of device [ 783.264359][T18748] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 783.768764][T18878] syzkaller1: entered promiscuous mode [ 783.774378][T18878] syzkaller1: entered allmulticast mode [ 784.412450][T18943] lo speed is unknown, defaulting to 1000 [ 785.034880][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11144'. [ 785.249486][T19048] sd 0:0:1:0: device reset [ 785.306116][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11163'. [ 785.421330][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 785.421348][ T29] audit: type=1400 audit(2000000136.430:55215): avc: denied { create } for pid=19078 comm="syz.5.11170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 785.474962][ T29] audit: type=1400 audit(2000000136.470:55216): avc: denied { write } for pid=19078 comm="syz.5.11170" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 785.513355][ T29] audit: type=1400 audit(2000000136.520:55217): avc: denied { bind } for pid=19078 comm="syz.5.11170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 785.600129][T19105] lo speed is unknown, defaulting to 1000 [ 785.905496][ T29] audit: type=1400 audit(2000000136.910:55218): avc: denied { bind } for pid=19145 comm="syz.5.11181" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.933945][ T29] audit: type=1400 audit(2000000136.910:55219): avc: denied { name_bind } for pid=19145 comm="syz.5.11181" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 785.955174][ T29] audit: type=1400 audit(2000000136.910:55220): avc: denied { node_bind } for pid=19145 comm="syz.5.11181" saddr=fe80::bb src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 785.977558][ T29] audit: type=1400 audit(2000000136.910:55221): avc: denied { connect } for pid=19145 comm="syz.5.11181" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.998456][ T29] audit: type=1400 audit(2000000136.910:55222): avc: denied { write } for pid=19145 comm="syz.5.11181" path="socket:[116077]" dev="sockfs" ino=116077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 786.027013][ T29] audit: type=1400 audit(2000000137.030:55223): avc: denied { bind } for pid=19147 comm="syz.5.11182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.160404][ T29] audit: type=1400 audit(2000000137.160:55224): avc: denied { mount } for pid=19168 comm="syz.2.11191" name="/" dev="configfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 786.204398][T19167] syzkaller0: entered promiscuous mode [ 786.210027][T19167] syzkaller0: entered allmulticast mode [ 786.326804][T19191] netlink: 'syz.0.11197': attribute type 13 has an invalid length. [ 786.347179][T19191] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.355652][T19191] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.364153][T19191] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.372524][T19191] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.390762][T19193] veth1_to_bond: entered allmulticast mode [ 786.397004][T19193] veth1_to_bond: entered promiscuous mode [ 786.410478][T19193] veth1_to_bond: left promiscuous mode [ 786.416142][T19193] veth1_to_bond: left allmulticast mode [ 786.460418][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11203'. [ 786.474470][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11203'. [ 786.580573][T19208] lo speed is unknown, defaulting to 1000 [ 786.857065][T19258] syzkaller0: entered promiscuous mode [ 786.862611][T19258] syzkaller0: entered allmulticast mode [ 787.004728][T19276] SELinux: failed to load policy [ 787.029204][T19280] program syz.1.11221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.122854][T19281] lo speed is unknown, defaulting to 1000 [ 787.434480][T19296] lo speed is unknown, defaulting to 1000 [ 787.577039][T19340] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.940074][T19367] lo speed is unknown, defaulting to 1000 [ 787.973684][T19383] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.134960][T19417] batadv1: entered allmulticast mode [ 788.143282][T19417] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 788.153320][T19417] bridge0: port 6(batadv1) entered blocking state [ 788.159944][T19417] bridge0: port 6(batadv1) entered disabled state [ 788.171952][T19417] batadv1: entered promiscuous mode [ 788.177644][T19417] bridge0: port 6(batadv1) entered blocking state [ 788.184197][T19417] bridge0: port 6(batadv1) entered forwarding state [ 788.258884][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11252'. [ 788.295343][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11252'. [ 788.306687][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11252'. [ 788.435732][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11257'. [ 788.451584][T19424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.461009][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11252'. [ 788.471835][T19424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.480659][T19440] IPVS: Unknown mcast interface: vcan0 [ 788.565701][T19446] lo speed is unknown, defaulting to 1000 [ 788.708304][ T4568] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 788.718234][ T4568] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 789.455437][T19492] lo speed is unknown, defaulting to 1000 [ 789.797446][T19528] veth1_to_bond: entered allmulticast mode [ 789.803573][T19528] veth1_to_bond: entered promiscuous mode [ 789.810593][T19528] veth1_to_bond: left promiscuous mode [ 789.816135][T19528] veth1_to_bond: left allmulticast mode [ 790.402803][T19617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19617 comm=syz.0.11281 [ 790.416168][T19617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19617 comm=syz.0.11281 [ 790.527022][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 790.527040][ T29] audit: type=1400 audit(2000000141.530:55261): avc: denied { ioctl } for pid=19642 comm="syz.0.11285" path="socket:[115456]" dev="sockfs" ino=115456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 790.815068][T19696] random: crng reseeded on system resumption [ 790.815958][ T29] audit: type=1400 audit(2000000141.820:55262): avc: denied { append } for pid=19695 comm="syz.5.11295" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 790.844636][ T29] audit: type=1400 audit(2000000141.820:55263): avc: denied { open } for pid=19695 comm="syz.5.11295" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 790.871792][ T29] audit: type=1400 audit(2000000141.850:55264): avc: denied { firmware_load } for pid=32190 comm="kworker/u8:8" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 790.928270][T19700] lo speed is unknown, defaulting to 1000 [ 791.163986][T19730] smc: net device bond0 erased user defined pnetid SYZ2 [ 791.244690][ T29] audit: type=1400 audit(2000000142.250:55265): avc: denied { read } for pid=19739 comm="syz.5.11304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 791.278315][T19736] syzkaller0: entered promiscuous mode [ 791.283940][T19736] syzkaller0: entered allmulticast mode [ 791.446328][T19755] netlink: 'syz.2.11310': attribute type 13 has an invalid length. [ 791.475304][T19755] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 791.483831][T19755] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 791.492357][T19755] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 791.501542][T19755] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 791.559921][ T29] audit: type=1400 audit(2000000142.560:55266): avc: denied { create } for pid=19760 comm="syz.0.11313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 791.581141][ T29] audit: type=1400 audit(2000000142.560:55267): avc: denied { write } for pid=19760 comm="syz.0.11313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 791.619471][T19767] lo speed is unknown, defaulting to 1000 [ 791.628199][T19767] lo speed is unknown, defaulting to 1000 [ 791.635792][T19767] lo speed is unknown, defaulting to 1000 [ 791.644681][T19767] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 791.670781][T19767] lo speed is unknown, defaulting to 1000 [ 791.687170][T19767] lo speed is unknown, defaulting to 1000 [ 791.697983][ T29] audit: type=1326 audit(2000000142.700:55268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.0.11320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 791.721780][ T29] audit: type=1326 audit(2000000142.700:55269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.0.11320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 791.757059][T19767] lo speed is unknown, defaulting to 1000 [ 791.774893][ T29] audit: type=1326 audit(2000000142.700:55270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.0.11320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe206a7e969 code=0x7ffc0000 [ 791.775316][T19767] lo speed is unknown, defaulting to 1000 [ 791.823635][T19767] lo speed is unknown, defaulting to 1000 [ 792.029946][T19799] Falling back ldisc for ttyS3. [ 792.081719][T19814] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 792.088329][T19814] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 792.096009][T19814] vhci_hcd vhci_hcd.0: Device attached [ 792.111982][T19820] lo speed is unknown, defaulting to 1000 [ 792.147622][T19820] lo speed is unknown, defaulting to 1000 [ 792.262490][T19817] vhci_hcd: connection closed [ 792.262750][T32219] vhci_hcd: stop threads [ 792.272577][T32219] vhci_hcd: release socket [ 792.276994][T32219] vhci_hcd: disconnect device [ 792.621658][T19880] 9pnet_fd: Insufficient options for proto=fd [ 792.742748][T19882] netlink: 'syz.1.11350': attribute type 13 has an invalid length. [ 792.790228][T19882] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.797488][T19882] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.845987][T19882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.864337][T19882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.922685][T19882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.931859][T19882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.941050][T19882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.950018][T19882] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.039528][T19917] can0: slcan on ttyS3. [ 793.109806][T19917] can0 (unregistered): slcan off ttyS3. [ 793.361224][T19965] lo speed is unknown, defaulting to 1000 [ 793.397907][T19965] lo speed is unknown, defaulting to 1000 [ 793.405624][T19976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 793.412923][T19976] IPv6: NLM_F_CREATE should be set when creating new route [ 793.420146][T19976] IPv6: NLM_F_CREATE should be set when creating new route [ 793.603417][T31690] usb usb6-port1: attempt power cycle [ 793.726743][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11403'. [ 793.894599][T20083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11416'. [ 793.942084][T20089] vlan3: entered allmulticast mode [ 793.947550][T20089] dummy0: entered allmulticast mode [ 794.055997][T20094] lo speed is unknown, defaulting to 1000 [ 794.088163][T20094] lo speed is unknown, defaulting to 1000 [ 794.332752][T20122] netlink: 'syz.0.11422': attribute type 7 has an invalid length. [ 794.366237][T20126] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11424'. [ 794.410133][T20132] netlink: 664 bytes leftover after parsing attributes in process `syz.1.11427'. [ 794.454584][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11429'. [ 794.991278][T20259] syzkaller1: entered promiscuous mode [ 794.996819][T20259] syzkaller1: entered allmulticast mode [ 795.213871][T20309] $Hÿ: renamed from bond0 [ 795.220576][T20309] $Hÿ: entered promiscuous mode [ 795.450003][T31690] usb usb6-port1: unable to enumerate USB device [ 795.554138][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 795.554155][ T29] audit: type=1400 audit(2000000146.560:55350): avc: denied { write } for pid=20341 comm="syz.6.11461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 795.777141][T20364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11465'. [ 795.794583][T20364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11465'. [ 796.066742][ T29] audit: type=1400 audit(2000000147.070:55351): avc: denied { mount } for pid=20410 comm="syz.0.11473" name="/" dev="rpc_pipefs" ino=117089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 796.155691][T20422] lo speed is unknown, defaulting to 1000 [ 796.212618][T20422] lo speed is unknown, defaulting to 1000 [ 796.381847][ T29] audit: type=1400 audit(2000000147.390:55352): avc: denied { read } for pid=20421 comm="syz.6.11477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 796.466194][ T29] audit: type=1400 audit(2000000147.410:55353): avc: denied { name_bind } for pid=20448 comm="syz.0.11476" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 796.487991][ T29] audit: type=1400 audit(2000000147.410:55354): avc: denied { name_connect } for pid=20448 comm="syz.0.11476" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 796.510034][ T29] audit: type=1400 audit(2000000147.420:55355): avc: denied { read } for pid=20448 comm="syz.0.11476" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.835299][T20498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20498 comm=syz.2.11485 [ 796.896973][ T3766] kernel write not supported for file /4657/attr/exec (pid: 3766 comm: kworker/0:11) [ 796.938490][T20504] lo speed is unknown, defaulting to 1000 [ 797.088253][T20528] ip6gre1: entered allmulticast mode [ 797.207878][T20504] lo speed is unknown, defaulting to 1000 [ 797.437895][ T29] audit: type=1400 audit(2000000148.440:55356): avc: denied { bind } for pid=20582 comm="syz.1.11496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 797.463533][ T29] audit: type=1400 audit(2000000148.450:55357): avc: denied { listen } for pid=20582 comm="syz.1.11496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 797.483972][ T29] audit: type=1400 audit(2000000148.450:55358): avc: denied { accept } for pid=20582 comm="syz.1.11496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 797.503658][ T29] audit: type=1400 audit(2000000148.460:55359): avc: denied { ioctl } for pid=20584 comm="syz.6.11497" path="socket:[117248]" dev="sockfs" ino=117248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 797.569238][T20594] lo speed is unknown, defaulting to 1000 [ 797.603567][T20594] lo speed is unknown, defaulting to 1000 [ 798.136999][T20645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20645 comm=syz.6.11502 [ 798.200811][T20652] netlink: 664 bytes leftover after parsing attributes in process `syz.0.11505'. [ 798.462113][T20649] lo speed is unknown, defaulting to 1000 [ 798.482221][T20678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11517'. [ 798.518284][T20649] lo speed is unknown, defaulting to 1000 [ 799.099462][T20772] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.11537'. [ 799.376520][T20799] lo speed is unknown, defaulting to 1000 [ 799.543166][T20805] lo speed is unknown, defaulting to 1000 [ 799.603394][T20805] lo speed is unknown, defaulting to 1000 [ 799.864561][T20838] lo speed is unknown, defaulting to 1000 [ 799.889925][T20799] lo speed is unknown, defaulting to 1000 [ 799.937140][T20838] lo speed is unknown, defaulting to 1000 [ 799.954967][T32201] ================================================================== [ 799.963149][T32201] BUG: KCSAN: data-race in alloc_pid / copy_process [ 799.969742][T32201] [ 799.972063][T32201] read-write to 0xffffffff8685f030 of 4 bytes by task 32219 on cpu 1: [ 799.980299][T32201] alloc_pid+0x539/0x720 [ 799.984568][T32201] copy_process+0xe0e/0x1f90 [ 799.989161][T32201] kernel_clone+0x16c/0x5b0 [ 799.993668][T32201] user_mode_thread+0x7d/0xb0 [ 799.998354][T32201] call_usermodehelper_exec_work+0x41/0x160 [ 800.004273][T32201] process_scheduled_works+0x4cb/0x9d0 [ 800.009754][T32201] worker_thread+0x582/0x770 [ 800.014366][T32201] kthread+0x486/0x510 [ 800.018441][T32201] ret_from_fork+0x4b/0x60 [ 800.022880][T32201] ret_from_fork_asm+0x1a/0x30 [ 800.027646][T32201] [ 800.029964][T32201] read to 0xffffffff8685f030 of 4 bytes by task 32201 on cpu 0: [ 800.037587][T32201] copy_process+0x1790/0x1f90 [ 800.042277][T32201] kernel_clone+0x16c/0x5b0 [ 800.046791][T32201] user_mode_thread+0x7d/0xb0 [ 800.051481][T32201] call_usermodehelper_exec_work+0x41/0x160 [ 800.057395][T32201] process_scheduled_works+0x4cb/0x9d0 [ 800.062863][T32201] worker_thread+0x582/0x770 [ 800.067459][T32201] kthread+0x486/0x510 [ 800.071527][T32201] ret_from_fork+0x4b/0x60 [ 800.075956][T32201] ret_from_fork_asm+0x1a/0x30 [ 800.080740][T32201] [ 800.083054][T32201] value changed: 0x80000131 -> 0x80000132 [ 800.088759][T32201] [ 800.091076][T32201] Reported by Kernel Concurrency Sanitizer on: [ 800.097254][T32201] CPU: 0 UID: 0 PID: 32201 Comm: kworker/u8:16 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 800.110192][T32201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 800.120265][T32201] Workqueue: events_unbound call_usermodehelper_exec_work [ 800.127399][T32201] ================================================================== [ 800.820559][T31690] usb usb8-port2: attempt power cycle [ 802.689819][T31690] usb usb8-port2: unable to enumerate USB device [ 802.696278][T20700] usb usb8: usbfs: process 20700 (syz.6.11519) did not claim interface 0 before use