last executing test programs: 44.100697515s ago: executing program 4 (id=1741): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000e27f000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000980)={&(0x7f0000000580), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d3174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8c536f64df3ead70943de5d656df13bb45b52f00"/219, @ANYRESDEC], 0x1, 0x368, &(0x7f0000000180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="84b8d75d9f472e4581da0d06504c6d01d40c03dc8469e9e82470a5085d04853eb9703e22e6e6dc8b47ed73b4466516e58fe6951162403c0efa6c9f8b69e70391c1177bf0dbf2d4845e85490a0109815faf311702dab3ce003b567e63146581fc00b020b069fcddebba5d58638c164fdab2ff76cc9b7216797f30f772a9f2c9b8fb4b6d03881712bbd068770399a85553fac1b108662a30deee", 0x99}, {&(0x7f0000000700)="0e49897892d3b2f8716758618746709e296345c2ed23cf4f6f9b323aead43d5f1d7d026bdcd08b9bba2bc52822e67e1d096b4b444f4ba338b9ec34b038c095b9de7db1f9187799af0e0a671b54335a166fe39a1e978bbf6b351441acbb60f8e5a7ade75fe990d329d69665cda00578e37f919c3e247151771c42465beb682e1c4c5a5c37ac653e1129485cad60cf5f2603c8d023e19079167159972209790b526e5bee78bf833ad73c2963f594dcd5f54c804466eba9923a472c388a0f371d1c95fb612f605d71bc66b3845641b5b994868c242c8658abd7e65dc74c82cfe6df524ccbbe2f311fa9aea0eb58c29be6b2ce711f222539e11b8f", 0xf9}, {&(0x7f0000000800)="11fa943288252d03507daef51176b9fe0ded70d75895067e19ec9d358fdd4687c57ef5db339346b29077f88c09862f318321d6a3a0f32d4c857ed24281ec533a580010e6a4a006512d9b68346ce2b6b48a2433b3b0df05d41b7c7dd78f2ce56d84fa5a1e1478b0989d6ee1c2b5679fb81c2d4ff8196739e9078218fb49b54fb531517748f9b53cffbfc02af123d720b93a95a3e0e744441e7398f0741d7c2a13dedd80048b62c0a0574ea87fcf76f058c70657389cf7a04ced9af86d03d41903414db33294", 0xc5}], 0x3, 0x9000, 0x0, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r4, 0x0, 0x200}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) setreuid(0xee00, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0xe, 0x1, 0xee7, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESOCT=r9, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f6437689f843c4b867ad3c08aeb5d237008000000000"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x33, 0xd, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000ac0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex=r7, r8, 0x16, 0x20, 0x0, @void, @void, @void, @value=r10, r9}, 0x20) setsockopt$inet_buf(r8, 0x0, 0x2b, &(0x7f00000009c0)="cd74ee3fe88d6db4f4988482593a9ebc6cbd505de7a2898c598d6c751cd315b9931dd2260ede719caf6e80b344fa8c4a63f8e4de5788597ad04e825e983d5d960c48ff7e84987f4639f4f0e82680572c16b9de931022abb8bfebffe683568adcc0c4ce0369a2ba08ba3133c430d2d3fa393ed3dbd1ee84a28d388754fd3692af92e12cc2761899916fd8f7a44a904a41ec8a3dbab56e7d26e7bbd353300b485cf2740dd5768b3859", 0xa8) 43.893984625s ago: executing program 4 (id=1743): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000240)={0xfd, 0x5, 0x0, 0x10080}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000"], 0xd8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rxrpc_rx_data\x00', r5, 0x0, 0x1}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fsync(r6) preadv(r0, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e800c00028005"], 0x90}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80"], 0x34}}, 0x0) 43.789291876s ago: executing program 4 (id=1746): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{}], 0x1}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000000000000010000000000"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="00000000ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) fdatasync(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0) r9 = dup(r0) r10 = open(&(0x7f0000000200)='./bus\x00', 0x6c842, 0x8) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) r11 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r11, 0xee72) sendfile(r9, r11, 0x0, 0x8000fffffffe) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000001480)=0x1459) 42.891307159s ago: executing program 4 (id=1759): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x92) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) listxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x3c, 0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x0, 0x25}, 0x0, 0xf, 0xffdf, 0x8, 0x0, 0xfffffffa}, 0x0, 0xf, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x6b5, 0x41) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800130010000100000000000200000000000000", @ANYRES32=r3, @ANYBLOB="408f010008200200280012800e0001006970366772657461700000001400028006000f0000000000060010004e240000"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000031c49016000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r5, &(0x7f00000000c0)}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) fsetxattr$security_capability(r6, &(0x7f00000002c0), &(0x7f0000000340)=@v3={0x3000000, [{0x83}, {0x0, 0x9}]}, 0x18, 0x1) accept4$inet(r6, 0x0, &(0x7f0000000240), 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 42.52813566s ago: executing program 4 (id=1763): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0xf1, 0x4, 0x4}, {0x9e9, 0x7, 0x0, 0xfffffffc}, {0x6, 0x2, 0x9, 0x8000}]}}]}}]}, 0x54}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bind$rxrpc(r0, &(0x7f0000000340)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1, 0x4}}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) capget(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f00000002c0)={0xc3, 0x0, 0x3, 0x1000, 0x6, 0x1}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r7, 0x9, 0x0) getpeername$qrtr(r6, 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x3, 0x10000, 0x5, 0xe1, 0x12, "d64b3a4ec7ee9ba139980500000000000000ab"}) 42.156434721s ago: executing program 4 (id=1767): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000e27f000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000980)={&(0x7f0000000580), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d3174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8c536f64df3ead70943de5d656df13bb45b52f00"/219, @ANYRESDEC], 0x1, 0x368, &(0x7f0000000180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="84b8d75d9f472e4581da0d06504c6d01d40c03dc8469e9e82470a5085d04853eb9703e22e6e6dc8b47ed73b4466516e58fe6951162403c0efa6c9f8b69e70391c1177bf0dbf2d4845e85490a0109815faf311702dab3ce003b567e63146581fc00b020b069fcddebba5d58638c164fdab2ff76cc9b7216797f30f772a9f2c9b8fb4b6d03881712bbd068770399a85553fac1b108662a30deee", 0x99}, {&(0x7f0000000700)="0e49897892d3b2f8716758618746709e296345c2ed23cf4f6f9b323aead43d5f1d7d026bdcd08b9bba2bc52822e67e1d096b4b444f4ba338b9ec34b038c095b9de7db1f9187799af0e0a671b54335a166fe39a1e978bbf6b351441acbb60f8e5a7ade75fe990d329d69665cda00578e37f919c3e247151771c42465beb682e1c4c5a5c37ac653e1129485cad60cf5f2603c8d023e19079167159972209790b526e5bee78bf833ad73c2963f594dcd5f54c804466eba9923a472c388a0f371d1c95fb612f605d71bc66b3845641b5b994868c242c8658abd7e65dc74c82cfe6df524ccbbe2f311fa9aea0eb58c29be6b2ce711f222539e11b8f", 0xf9}, {&(0x7f0000000800)="11fa943288252d03507daef51176b9fe0ded70d75895067e19ec9d358fdd4687c57ef5db339346b29077f88c09862f318321d6a3a0f32d4c857ed24281ec533a580010e6a4a006512d9b68346ce2b6b48a2433b3b0df05d41b7c7dd78f2ce56d84fa5a1e1478b0989d6ee1c2b5679fb81c2d4ff8196739e9078218fb49b54fb531517748f9b53cffbfc02af123d720b93a95a3e0e744441e7398f0741d7c2a13dedd80048b62c0a0574ea87fcf76f058c70657389cf7a04ced9af86d03d41903414db3329494ae89e7c6b7998b93993a5e1c3a", 0xd3}], 0x3, 0x9000, 0x0, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r4, 0x0, 0x200}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) setreuid(0xee00, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0xe, 0x1, 0xee7, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESOCT=r9, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f6437689f843c4b867ad3c08aeb5d237008000000000"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x33, 0xd, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000ac0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex=r7, r8, 0x16, 0x20, 0x0, @void, @void, @void, @value=r10, r9}, 0x20) setsockopt$inet_buf(r8, 0x0, 0x2b, &(0x7f00000009c0)="cd74ee3fe88d6db4f4988482593a9ebc6cbd505de7a2898c598d6c751cd315b9931dd2260ede719caf6e80b344fa8c4a63f8e4de5788597ad04e825e983d5d960c48ff7e84987f4639f4f0e82680572c16b9de931022abb8bfebffe683568adcc0c4ce0369a2ba08ba3133c430d2d3fa393ed3dbd1ee84a28d388754fd3692af92e12cc2761899916fd8f7a44a904a41ec8a3dbab56e7d26e7bbd353300b485cf2740dd5768b3859", 0xa8) 42.036380202s ago: executing program 32 (id=1767): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000e27f000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000980)={&(0x7f0000000580), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d3174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8c536f64df3ead70943de5d656df13bb45b52f00"/219, @ANYRESDEC], 0x1, 0x368, &(0x7f0000000180)="$eJzs3U9oI9UfAPBvOmnSXfj9tjdREKI3Qct2b3qxRbqw2ItK8M9BDG5XJa1Ci8X2sG09KB4Fj3rypqAHD+JRBEW8efDqCrIqHrS3BRefTCaTTJu02y5WKX4+0PTlvfed73cmQzINyetzc9G9PBlXdnevx9RULepzj8zFjVpMRxal7RjVGNMHAJwON1KK31PhiCG1Ey4JADhhvdf/FyKiFdNFz+tfHjY/efUHgFOv//f/mcPmTB008MqJlAQAnLCR9//v3TPc6P3Uy7v1yqcCAIDT6omnn3l0fjHi8VZrKmLlzfX2ejseGo7PX4mXYjmW4nyci5sRxYVCflPr3V68tLhwvtVqbcVP09GOiIl+YLu4UpjPevHNmB2MDK42UkrZxU8WF2ZbPRGxvdXLHyu19fZknO3n//5sLA0vPKbLIqJ3c2lx4UKrv4H2Shm/FbEzfN8ir38mzsW3zw82k1L5CcbFhauzE/07w/j1djMuD47Cge+AAAAAAAAAAAAAAAAAAAAAAADAbZlpDUwP1s9J+e9ipZyZmTHjvfVxivj++kA7xfpAqZkipd9ee6D9VhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAYGBtoxGd5eWl1bWNzW61sbW6tjEREXnPy19/9MWZGJ1zi0a9SNGMGKRo9dNudjspKyenLGI0PMuTlz0ffDqouDqnOdiLsWU0xw/tRt743z0/vjscujsrt/zncHIW43cwq5Tx8L6kK/8vSjrOgRo0LlR7mqPZr6WUKj1vVMOvPju6wahF1I//wG12J+LgOSlvfHX9xTvLo9/5PBXuu//ck9feef+Xbmc5zxy9R7CxunYzdTu1cvLxDkt+qMueWhSNWvVMqB8WvrO3p5N99+tTd739zdGyp2rPq/n5vG9OVuzOx/vDG0UjLzNvNIZny5lh+GR/J5aXJsec/Ldq3MZjesd7n32Y0g8/HzlFIa9+YuRpo/b3PQMBAAAAAAAAAAAAAAAAAAClynfF+/pf9p08LOrBx06+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD45wz//3+lsbMd+3qO0vhja0xUc2l1LaLxb+8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//zbhVeI=") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="84b8d75d9f472e4581da0d06504c6d01d40c03dc8469e9e82470a5085d04853eb9703e22e6e6dc8b47ed73b4466516e58fe6951162403c0efa6c9f8b69e70391c1177bf0dbf2d4845e85490a0109815faf311702dab3ce003b567e63146581fc00b020b069fcddebba5d58638c164fdab2ff76cc9b7216797f30f772a9f2c9b8fb4b6d03881712bbd068770399a85553fac1b108662a30deee", 0x99}, {&(0x7f0000000700)="0e49897892d3b2f8716758618746709e296345c2ed23cf4f6f9b323aead43d5f1d7d026bdcd08b9bba2bc52822e67e1d096b4b444f4ba338b9ec34b038c095b9de7db1f9187799af0e0a671b54335a166fe39a1e978bbf6b351441acbb60f8e5a7ade75fe990d329d69665cda00578e37f919c3e247151771c42465beb682e1c4c5a5c37ac653e1129485cad60cf5f2603c8d023e19079167159972209790b526e5bee78bf833ad73c2963f594dcd5f54c804466eba9923a472c388a0f371d1c95fb612f605d71bc66b3845641b5b994868c242c8658abd7e65dc74c82cfe6df524ccbbe2f311fa9aea0eb58c29be6b2ce711f222539e11b8f", 0xf9}, {&(0x7f0000000800)="11fa943288252d03507daef51176b9fe0ded70d75895067e19ec9d358fdd4687c57ef5db339346b29077f88c09862f318321d6a3a0f32d4c857ed24281ec533a580010e6a4a006512d9b68346ce2b6b48a2433b3b0df05d41b7c7dd78f2ce56d84fa5a1e1478b0989d6ee1c2b5679fb81c2d4ff8196739e9078218fb49b54fb531517748f9b53cffbfc02af123d720b93a95a3e0e744441e7398f0741d7c2a13dedd80048b62c0a0574ea87fcf76f058c70657389cf7a04ced9af86d03d41903414db3329494ae89e7c6b7998b93993a5e1c3a", 0xd3}], 0x3, 0x9000, 0x0, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r4, 0x0, 0x200}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) setreuid(0xee00, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0xe, 0x1, 0xee7, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESOCT=r9, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f6437689f843c4b867ad3c08aeb5d237008000000000"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x33, 0xd, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000ac0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex=r7, r8, 0x16, 0x20, 0x0, @void, @void, @void, @value=r10, r9}, 0x20) setsockopt$inet_buf(r8, 0x0, 0x2b, &(0x7f00000009c0)="cd74ee3fe88d6db4f4988482593a9ebc6cbd505de7a2898c598d6c751cd315b9931dd2260ede719caf6e80b344fa8c4a63f8e4de5788597ad04e825e983d5d960c48ff7e84987f4639f4f0e82680572c16b9de931022abb8bfebffe683568adcc0c4ce0369a2ba08ba3133c430d2d3fa393ed3dbd1ee84a28d388754fd3692af92e12cc2761899916fd8f7a44a904a41ec8a3dbab56e7d26e7bbd353300b485cf2740dd5768b3859", 0xa8) 2.73926929s ago: executing program 5 (id=2221): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r1 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r1, 0xffffffff) r2 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0xd759, 0x400, 0xfffffffc, 0x228}) r3 = eventfd2(0xc, 0x80800) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @loopback, 0xfffffffe}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r6, 0xd4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) sendmsg$inet(r4, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) ustat(0x0, &(0x7f0000000180)) ustat(0x1, &(0x7f0000001f80)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_setup(0x8, &(0x7f00000008c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) io_submit(0x0, 0x0, 0x0) 2.60863874s ago: executing program 5 (id=2224): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r0) open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x50032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ef5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 2.038883632s ago: executing program 3 (id=2234): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) ioctl$VT_DISALLOCATE(r5, 0x5608) ioctl$PIO_UNIMAP(r5, 0x4b67, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x10241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010034"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r6) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r7, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f40)=""/45, 0x2d}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) 1.940038003s ago: executing program 5 (id=2235): r0 = socket(0x2a, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) symlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f7ffffff03000000b309000001f0000def000000958f4c84b493dc4a9272b05753bf054d02f84fe545fa2413700733ad0db5365b08d2ac13515d32a4106ea4affe379b38f63d5b111c2359c6aabc38ea7ac5df503210f15f54e5391ec0027000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000003060101000000000000000000000000050001000700000021ecbd4ece9145cdfdfc54ed60f52b1f686e295d59ba4ad6e2cfe24a5e16b921216d795406034ac73bb0a2d28b465a4dcc6ddab5128c3e93518453a712209a51b5c017f11baa97042b32ed1376c9c34388fa3eb6176a5b55d624329f558a0fde747f2f49131e916a6346e96abbe39d61c66abaa56bae8d526e81500fae3d38adae0974d59ba40e853e6c86395986111b50e425ec4be03550338239de416bd9e8eddec0c8b2deafb03ebc95f1ff9b8718482a197e1ab70ae3f0a7322aea3da843ad808e13e98ea0"], 0x1c}}, 0x0) r4 = syz_clone(0x4001000, &(0x7f0000000000)="a29defae445cdd0f623a71cfc225c6f2a742470c44503bb2af22ece47fa6bb2de015f9b26ea38f77f59fe3e413f335fc004aeff00d3235b967b32791a9f643d56d7fd7891a6c37669d47291961a1c899a416dacd5c4acdb2dc34544c", 0x5c, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="155211e59cfbcfb91aa7a8732f0d462e80f89f2ab7ae9cc9c04190ef4fd5581b259fdf9daa2e25eff013d8079f7deab7a60c46dc905a4519d88f932b86e55388682accdfd08b66fddc8cb6158df39f554c4ee47be14af35eed89a3a28b85b0e7ea32e0c9beadb3ebdbe7c5e579c5c15eebb336deb4d7a71adfd9043b5177e5e77f80884e2debab456fbf9428f1133b1b79aa54d5b49072d8199ca94c3851503d01fba8b15346b8441ef19cff4f85c075000fab") r5 = getpgid(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000003c0)={0x2, [0x0, 0x0]}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x303}, "d24f1a08ec7b8714", "38118bca87f8ab1efadd796dc4920500000000000000deab994585869a54fc61", "abd468df", "e64bafb4e3dc898a"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) tgkill(r4, r5, 0x5) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff2b) syz_open_pts(r8, 0x40000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101080, 0x10) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0x2) move_mount(r9, &(0x7f0000000200)='./file0\x00', r10, &(0x7f0000000280)='./file0\x00', 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 1.584422494s ago: executing program 0 (id=2236): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x9, 0x5, [{0x6, 0xf1, 0x4, 0x4}, {0x9e9, 0x7, 0x0, 0xfffffffc}, {0x7a0, 0x5, 0x7, 0x5}, {0x6, 0x2, 0x9, 0x8000}]}}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) bind$rxrpc(r0, &(0x7f0000000340)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1, 0x4}}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) capget(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f00000002c0)={0xc3, 0x0, 0x3, 0x1000, 0x6, 0x1}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r7, 0x9, 0x0) getpeername$qrtr(r6, 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x3, 0x10000, 0x5, 0xe1, 0x12, "d64b3a4ec7ee9ba139980500000000000000ab"}) 1.553437964s ago: executing program 0 (id=2237): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r1 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r1, 0xffffffff) r2 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0xd759, 0x400, 0xfffffffc, 0x228}) r3 = eventfd2(0xc, 0x80800) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @loopback, 0xfffffffe}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r6, 0xd4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) sendmsg$inet(r4, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) ustat(0x0, &(0x7f0000000180)) ustat(0x1, &(0x7f0000001f80)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_setup(0x8, &(0x7f00000008c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) io_submit(0x0, 0x0, 0x0) 1.450095804s ago: executing program 0 (id=2238): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x9460, 0x19, 0x0, 0x0, 0x83}, 0x0, 0x1, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff1, 0x5}, {0xc, 0xfff3}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x3c}}, 0x0) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r4, @ANYBLOB="08001c00", @ANYRES32=r9], 0x24}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='gid_map\x00') write$P9_ROPEN(r10, 0x0, 0x0) syz_open_dev$rtc(0x0, 0xad2, 0x0) r11 = syz_io_uring_setup(0x10e, &(0x7f0000001140)={0x0, 0x0, 0x800, 0x800000}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r11, 0x47f9, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r11, 0x13, &(0x7f00000001c0)=[0x4, 0x9], 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) getsockname$packet(r10, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) syz_open_dev$usbfs(&(0x7f0000000400), 0x8, 0x800) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000011c0)=@newtfilter={0x2124, 0x2c, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xfff1, 0x6}, {0xfff2}, {0x8, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_u32={{0x8}, {0x2060, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xb}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xd8}, @TCA_U32_POLICE={0xa0, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0xd, 0x10, 0x0, {0x3, 0x1, 0x7, 0x1, 0xe9, 0xdbc}, {0x8, 0x0, 0x15, 0xa, 0x0, 0xe06}, 0x9, 0x7f, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x9, 0x2ce, 0x7, 0x0, {0x5, 0x2, 0x340, 0x4, 0x1}, {0x7f, 0x1, 0xc3cb, 0x2, 0xfff8, 0x1}, 0x0, 0x7, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_U32_ACT={0x150, 0x7, [@m_mpls={0x14c, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0xfffffffb, 0x8, 0x5, 0x8}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe1fc7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x77aa0}]}, {0xe4, 0x6, "c25393f14ff07198b67027e5410094e089a270a3c7f1e2ff9fa5bd64e00c674f438720a1a531e33ee7c4bee19688ab3f66031bd1b71c833988a7d57dadb633d62f602fb07c8ce5872b8601ee7aa740c96f3b2f320e30704a99f4ec3ee00778054cb4d834850ba51e8d13510766858ac36634a3475085eeb0513b17ecb1b9feb6be67e0b447c28e5e13aab46e95a038b3f4e329dd1aa51f47e2568acf963a48e9ad435e91a809a82e30a2e77db8b681e922bceba321774e97aa9705fa3d11c9121041a62cacde91c0c7e3c4a870ff901b283e7a47cba34537df2e47f50fcfee7b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_ACT={0xc14, 0x7, [@m_police={0x940, 0x3, 0x0, 0x0, {{0xb}, {0x878, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa3, 0x0, 0x7, 0x7, 0x0, 0xd, 0x3, 0x92a, 0x3, 0xb, 0x9, 0x7, 0x9, 0x100, 0x4, 0x2, 0x1, 0xef, 0xb, 0x0, 0x83c, 0x100000, 0x4, 0x40, 0x1, 0x5, 0x8, 0x1, 0xe479, 0x44a7, 0x1020, 0x0, 0x80, 0x7, 0x3, 0x1, 0x7f, 0x1, 0x9, 0x1000, 0xffff6fc0, 0x3, 0x7, 0x5, 0x1, 0x1, 0x8, 0xfc, 0x3, 0x6, 0x8, 0xb, 0xfff, 0x6, 0x8, 0xd, 0x9, 0x4, 0x3, 0xdec, 0x8, 0xe0, 0x8, 0x1, 0x5, 0x1, 0x401, 0x9, 0x6, 0xc6, 0x0, 0xe, 0x2, 0x56d, 0xffffffff, 0x7, 0x9, 0x5, 0x8000, 0xf, 0x4b, 0x1, 0x6, 0x3, 0x32ad, 0x0, 0x4, 0x80000000, 0x0, 0x2, 0x7, 0xfffffffc, 0x6, 0x40bc, 0xffff, 0x6, 0x2ee84b2f, 0x9, 0xffffff81, 0x7, 0x3d, 0xe, 0x10, 0xe, 0x7, 0xa, 0xd, 0x9, 0x4, 0x4, 0x1000, 0x6, 0x8001, 0x4, 0x1000, 0x285, 0x1ff, 0x8001, 0x57, 0xe4a8000, 0xffffffff, 0xb22, 0xa5, 0x9, 0x20, 0x7, 0x1, 0x9, 0x400, 0x0, 0x1c0, 0xeb, 0x6, 0x6, 0x7fff, 0xffffffff, 0xfa60, 0x1ff, 0x7fffffff, 0x0, 0x40, 0xae5, 0x4, 0xfffffffb, 0x9, 0x40, 0x5, 0x9, 0x8, 0x845, 0x4, 0xffffffb0, 0x1, 0x1000, 0x7fffffff, 0x9, 0x7fffffff, 0x4, 0x1, 0xf416, 0xe, 0xc78d, 0x8001, 0xc, 0x3, 0x572, 0x658044e8, 0xbb7, 0x401, 0x5, 0x5, 0x9, 0xc, 0x9, 0x10001, 0x7, 0x80, 0x7, 0x6, 0x3, 0x2, 0x1, 0x31460314, 0x79, 0x80000001, 0x2, 0x1, 0x4, 0x1, 0x2, 0x0, 0x9, 0x10, 0xfffffffb, 0x0, 0x800000, 0x6, 0x8000, 0xa, 0x6, 0x7fffffff, 0x1ff, 0xe5c, 0xf8, 0x43, 0x0, 0x0, 0x7, 0xfffffffd, 0x6, 0xffffff81, 0x9, 0x2, 0x100, 0xd, 0x2, 0x5, 0x6, 0x3, 0x7, 0x10, 0x1, 0x80000000, 0xc, 0x1, 0x6, 0x1, 0x80000000, 0x8001, 0x80, 0x1f3, 0x9, 0x9, 0x1, 0xd18b, 0x83a, 0x2, 0x9, 0x401, 0x0, 0x1, 0x4, 0xd3, 0xffff, 0x48, 0xffffffff, 0x4, 0x8, 0x3ff, 0x4, 0x7, 0xd, 0x8, 0x4, 0x9, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x2, 0x7, 0x0, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x8, 0x5, 0x3, 0x2, 0xfffffffe, 0x6, 0x3, 0x0, 0x0, 0x81, 0x63, 0x7f, 0x81, 0x1, 0xe0, 0xe7, 0x0, 0x3, 0x2, 0x6, 0xf, 0x6, 0xe81d, 0x74, 0x81, 0xed2b, 0x8, 0xd, 0x4, 0x9, 0x4, 0x14, 0x81, 0x1000, 0x7fffffff, 0xbff, 0x7, 0x8, 0x10001, 0x1ff, 0x1, 0x5a, 0x1e8, 0x4, 0x5, 0x4, 0x0, 0x6, 0x7, 0x7, 0x6, 0x1, 0x3, 0x7, 0x6, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x9, 0x73, 0xe, 0x2, 0x80000000, 0xce68, 0x6, 0x11, 0x3, 0x5, 0xfffffff9, 0x2, 0x4, 0x80000000, 0x0, 0xc, 0xa, 0xfa10, 0xfffffffd, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xd, 0x2, 0x7, 0x7, 0x3, 0x4, 0x8, 0x10000, 0x9, 0x8, 0xd8c, 0xd, 0xffff70cc, 0x800, 0x4, 0x8, 0x5, 0x81, 0x1, 0x7, 0x1, 0x9, 0x0, 0x4, 0x2, 0xd8c, 0xfffffffa, 0x4, 0x7, 0x9, 0x2, 0x0, 0x6, 0xbe, 0x0, 0xc, 0x1, 0xc, 0xf5, 0x162, 0x87, 0x8, 0x1, 0x7ff, 0x7, 0x100, 0x8, 0x401, 0x0, 0x5, 0x2, 0x8, 0xbd8, 0x80000000, 0x2211, 0xa9, 0x1, 0x5, 0x4, 0x1, 0x6b, 0x9e6e, 0xca7, 0xff, 0x9da, 0x4, 0x38, 0x401, 0x5, 0xb8, 0x0, 0x2, 0x10000, 0x10, 0x6, 0x7, 0x80, 0x5, 0x6, 0x3, 0x7f, 0x4f9, 0x91, 0x4, 0x40, 0x10000, 0xfff, 0xe, 0x5, 0xf, 0x40, 0x4, 0xd, 0x8, 0x58ee, 0x7, 0x2, 0xfffffffa, 0x7fffffff, 0xffffffff, 0xb40, 0x0, 0x8, 0x6, 0x400, 0x5, 0x8, 0x7, 0x9, 0x7f, 0x1ff, 0xffff, 0x1, 0x7, 0xc357, 0xfff, 0x9, 0x6d4c9ca9, 0x3, 0xfffffc00, 0x7, 0xb, 0x1, 0x7, 0x10, 0x6, 0xf2, 0x9, 0x6, 0x800, 0x266, 0x6, 0x10, 0x8de, 0x0, 0x6, 0x4, 0x0, 0x80000001, 0x2c, 0x9, 0xa, 0x9, 0x4dd0, 0x3, 0x9, 0x0, 0x6, 0x372e, 0x6, 0x6, 0x7, 0x0, 0xfffffffa, 0x3, 0x81, 0x2, 0x1, 0xc8e0, 0x2, 0x2, 0x511]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x73}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0xa0, 0x6, "98e9463ceceb41f9f47dca383e10e41ef18ba37331a5b107292e64db7ca75b70cce4669d14ee01f003d45b522daa29d48c78b2ba12394813c011c3f78c9466f462ed005af5bf4c34844b6f69f156ca10ebf5159e3debe820df8505b0d21390c6cfe3f9504060f986a35b3efc4af0d9cbd2fdac4a72a7e1b51236bbb8fced394eb48b959ce7f0e33cdd3fbae3b054152a652a46e80624103dd30b6b57"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x134, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x0, 0xb50, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x8, 0x5, 0x0, 0xe}}]}, {0xd8, 0x6, "b40eebd6e63dbd3a32efb05aef370ac3e56fc158250dc0b2b21d7090605ac6013a4f9ba74bfb2cc263185886d16eadcf0aaa72957f7d7743e426a5b8ad24e620d1bea06da24dc0fff562d6e2de6ce113d491a5a4ab40f8c311a33bd29a34552346d9fac4eeeafaa346256156b092e3e8c50c1a25fcce751aeeb8ed6a4deae082dc659e80d7320a6b8d0e21630b700d366f008c4260ced838278853ae934a70ce33d481dc6408fee45c5fe5924ec4fd490a9d38b498033216b334ad6af039cd4dfb7ca39008392bc0857a8e7bed31cfbe9577a999"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x19c, 0x12, 0x0, 0x0, {{0xa}, {0xd0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0xb4, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x526ccbb1c87d4a39}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xa4, 0x6, "fe6ea3c900cf972f4cddcc124dd89ac3944269e622d2a35f5d62cd63abe4e362b2c6dad307458145853f15dc18a813af54794d28708beb7acd34983a7326382420d5c54fd1af857ea83e66971fa3c355fa80921f1ddab2d58cb2b87fbf9a8c2f44238439d455a380d43b10b3d23e110334d360fcb8f7571223878cc36e56f90fa1c2d2e98971dd1d3bc09ea13cf3c43f9253597b0391922f0cb964e21907a1ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_ACT={0x1230, 0x7, [@m_connmark={0xdc, 0x17, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0x6, 0x4, 0x3}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0xffffff13, 0x20000000, 0x39}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6c, 0x9, 0x3, 0x1000, 0x7ff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x10000000, 0xfff983f, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x20000000, 0x200, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a3, 0xda5, 0x0, 0x9, 0xb}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0xe4, 0x20, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xa5, 0x2, 0x1, 0x10000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x70000, 0x0, 0x5fceebee, 0x4}, 0x9}}]}, {0x7b, 0x6, "6221707c98cf405dafd65f3d3b1a1fde6dc327302b2a20e5b188377885775e9011d997a96a0c909a1be54c9dc7c6b6fa1e05d499f9a9bc2c4b2c3b9386ca8b5d73335ace5b1d391cd272d67ccd7b1babc08a4ecb433d6b8e3340a8a9862399041af3f46c2369d5c7f480b6437cb2189b41b986caf0b9b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_connmark={0x106c, 0x1a, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1fb6ca4f, 0x6, 0x4, 0x6, 0x4a8}, 0xfbff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x805, 0xfffffffffffffff7}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_U32_FLAGS={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="7ef502ab5215"}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x930}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x64}]}, 0x2124}, 0x1, 0x0, 0x0, 0x4000}, 0xc8000) 1.437632474s ago: executing program 2 (id=2239): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x10) clock_gettime(0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmmsg$unix(r1, &(0x7f0000000a00)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000640)=""/24, 0x18}, {&(0x7f00000006c0)=""/19, 0x13}], 0x4, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x2, 0x1103, &(0x7f0000000a80)={0x77359400}) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000240)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) 1.411887744s ago: executing program 2 (id=2240): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x50032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ef5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000002, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 1.377473794s ago: executing program 0 (id=2241): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r0) open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x50032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ef5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000002, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) 1.264143055s ago: executing program 2 (id=2242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41001, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000700, 0x0, &(0x7f00000008c0)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x8, 0x1, 0x3, 0xa0, 0x3, 0xd99e, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$peekuser(0x3, r10, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0x0], 0x1}, 0x58) 1.179726226s ago: executing program 1 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ff00", "cf0d00", "8657e2b7e43b34e4"}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="5ec000e5eae4e66cc6378375809f770a49", @ANYBLOB="0000000000000065a6f1fe000000000000627a93000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="005eb000"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r4 = dup(r0) connect$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x1}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) connect$nfc_raw(r8, &(0x7f00000006c0)={0x27, 0x0, 0x1, 0x7}, 0x10) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffa1, &(0x7f00000001c0)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x40, 0x13, 0x8, 0x9, 0xbb, 0x6, &(0x7f0000000300)="9cae93907beacb287fab0d73b06a62f5d39d8cdd3789bb86291665997f2baf4e6165fe1228fdfadc6a7106c24b301bd0688e96ed072f97ca146f724dba030b11b7e9e21e3b176841780fb88a3b1d76c0e8cda7a097d53c66bd242c51792b6036f3969ca035bbd8c859ae821d85d5194cf74c3563a7db597de8b51c2b6b4104fd9c2368b32a44c74bc8264e4582b291c8070c4f818749c4db39fa2d24da538659120cd0b4c023012eabbfb20deeef9ac8014c0b3d5d00031b5dfa37"}) 1.177436455s ago: executing program 1 (id=2244): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0xfffffffffffffff7, 0x7}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r8, &(0x7f00000006c0)="8b9add72c10cfcacfa9c1d600d5a1f254cd9fa9a819c35e26928c08a2cdf7f3e72f75134a333769fad806281b1e4d9b7a022e390dd52916e48a9d21bb06a31c4eb02ed940071875354fa8486bf2bcd087df1f37cbddd961282ccdcac47189c1bf43bbebcf1e700bba2cd1d4ef4127a23e5fd98fa0e2f36ead8d40229e46cc88be62deba7ee78629fa7709926e31e362b954180209e2bc021e720268f845ed6b9e7b6b24825fd3f6f", 0xa8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) process_madvise(r10, 0x0, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r7) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='( \x00\x00', @ANYRES16=r11, @ANYBLOB="02002bbd7000fedbdf25020000000900030073797a30000000000500040002000000"], 0x28}}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616d73a0834a14d3923c8909eef60e9432ddc45b269c830511d7cd45594c3a1719ee5d3550e33bd70869482e4ca98e9d4e4737d01d5e004b7ba92e046f7a3111cc81000000000000000000000000000000da346f38c631bd92fae0276bd5538ba4699c10ed8fc67c59bb966dc3221fd6e78f16cca99d76dae0fd6798ced06a253f9f9952ec3016bf1a1ad0d43ad4c5849ae0bafe9a2bcc1e56c41231c2c53f0edf8a691587b060f59a99bdf425a2b39faa6eff7afae7c51b288299141dcf64dfae6353b563390f4a2bd553c76810434446cf8dcab36ca73176495f546c7c4e422ba10d85", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',\x00']) syz_io_uring_setup(0x4973, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r13, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4000, @fd_index=0x800005, 0x8001, 0x0, 0x0, 0x11}) 1.172146585s ago: executing program 2 (id=2245): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r0) open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x50032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ef5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 1.168867855s ago: executing program 3 (id=2246): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108800000000405000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) openat(0xffffffffffffffff, 0x0, 0x8000, 0x1) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x20000, 0x10}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000100000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r10 = socket(0x10, 0x3, 0x6) r11 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a680000000202050000000000000000000000000008000240000000000900010073797a30000000000c00044000000000000000050c0004400000000000000001080002400000000308000240000000020900010073797a31000000000900010073797a300000000014000000020a0108000000000000000001000007140000001100010000000000000000000000000a"], 0xa4}}, 0x0) r13 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$invalidate(0x15, r13) 1.059129556s ago: executing program 1 (id=2247): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="f6ff81ffff1f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syslog(0x2, 0x0, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x1938, 0x30, 0x829, 0x70bd2a, 0x0, {0x0, 0x0, 0x2}, [{0x1924, 0x1, [@m_gact={0x134, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x6, 0x1, 0x453d}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffff, 0x5, 0x1, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x7a7, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0xffffffffffffffff, 0x80, 0x5}}]}, {0xb2, 0x6, "af2d227bd491b7b1d49aec7b4a3080126feff8b1032baa3cbf4ea3cc280319edfc92564840e8bf6f073540998b13d8d92e448a7731cbb2ebd620451bfbbf9ca99c8c505a0bd6937968955a36e49885be67f87abaec5e392054854761b00baa57c995ed69add310a8b00be34e42a2c1ee2af44a947e91789f435e3a3a2360a4ef5755a08af1ee6256e1b18093e1ef9ad34bab73226b9872add118fc9c4b775a57b215ad40e711ca47ec84e71afa4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x150, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x53}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x2, 0x8, 0x1, 0x9}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd4c7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0xe1, 0x6, "184ff690581828592b13aaaf6ea5e443e96f1f9decef6fc3a761cc476dd3ec872a15cd9ed164322cada54dfd7f414d47ca1ba0a9d3b49d59bf38dbe391aef59145a2869fd6ff9769288daf545cd00b591e75d0e3a8cad2c60d956e89ffc389f7f55bdc1016f8d8a9ee97e4ff4a34951f7d50f8e1ba295ae50a8ebd6256b74320af3fe25d1048b42890d056a8fae20969f11289b74bc411677c47e0023f8db6f36cc1b7c7e475ecd626026f817753bdbe061cd68f2419fb7809c1a55a3bb0cad27ee6f1089855eaecdb3ece16aec70af7e1bac3b1fc6765181ccfe50750"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x10, 0x0, 0x8, 0x1}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x58, 0x6, "1073ecfc8c60dffd7faa87e78de26f5e4607cdaac219c22c36fe4fe495a79b9694a0f20c29902d25a96016474f66b2a390606e03257b7c84089b8d99383d561ada7de02c6c3ec90cae81d90d18ecb66eb8f8c00c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x1098, 0x13, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffa, 0x2, 0x2000000a, 0x1, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd4e}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaed}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000000, 0xdbc1, 0xffffffffffffffff, 0x0, 0x5fd}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xf8, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="5ee130bd35d0"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x800, 0x1, 0x19f, 0x6}, 0xa}}]}, {0x84, 0x6, "3e81843074c38bc3cdbb328b38492be0d8847e900038af05446b7eec72d33d4cdeb7f4b7faf74dddf4db2995efb434f00372a7971a5042ea8c4494cedd6f3cc2eec610f847f4e4f68dde7d038fcae48da2862098ea39c37eea6c08d01c1b5441ced0b9846aab679bae40d9a6ceb7a538b414cf1038fb0b1520e3a509224a3019"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x190, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x12, 0x0, 0x7}, @multicast2, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x800, 0x10000007, 0xfffffff8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x0, 0x8, 0x10000, 0xc}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe0000000, 0x10000, 0x0, 0x3c, 0x3}, @broadcast, @multicast2, 0x0, 0x1}}]}, {0xc8, 0x6, "03de431abe6ca5c74cef5a8aa06f90e0df40ebbfd94cc5a93277e6ddb09b30f2991243a5461767cf6b6215c8fd3d9b7a8f4d75ba2e886cfa997907439f7d56e2b58f77790219cf959a39217883e577c56f580c32757b6e6c68420c2a660976befeddf72ebb3f929d3b7e8184abfb83f9446d8523923ca473171c7203508128814b0d96b0e7277d352fb4c00c8513dc4f6b27537979fce81e7fa8d7f7378ba58c099364c89736b0de13781bf844702ec6455b1ec9ddd797de2163e9ab21a4a2653990470f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xdc, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x6, 0x3, 0xf736, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1788, 0xffffffffffffffff}}]}, {0x8a, 0x6, "6ab618fcafae17338324ad31e68181a746e22afcb594d457239fd22e1b12afb652eecab05a1e0b3c19c5b42107e95f3d494545a44ede480a2b5d89f9e3cd61d5b14939dea1ce41b8390708436c9c872ff877936382ed87fe7d9cf7e3d1503a8c55409ca955f752a42240b1946d0237e1c74a182206e00efa62cae57533e08c8ee0a491174128"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xc8, 0x1b, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="55d6172e003d"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="9397dfef965c"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="96a44dd2bb40"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1, 0x1, 0x0, 0x5}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x10000000, 0x6, 0x5}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x8, 0x6, "7e9ba3f1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x134, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x5344, 0x800}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0xa4b1, 0x0, 0x0, 0x5}, 0x30}}]}, {0xcd, 0x6, "8bbf75e9abae902360c523b350e8991347492a4133ab121e5efa553695ddb3845b16e2435357cfa1e5c467ca5aeb74a5be8ab0917d09def03419dd17a36167d3cfa9add99361525e931c50dbc480013e20345dea8bc91ab32247f8fb63b870519002f320cd1a4cb91cdc197aa69bba94fc11d8d797e741d85a2eff05f357fb415b76347ffbbdb163f204680a86c13d8d3becb836d1cc0352c3507ee4e942a3e266627d226a26c04d3104f90b0b951234b7abe0adf27d69137790c34296c5a529e08c7bd7ec9eb9dd3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x1938}}, 0x40) lsm_list_modules(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r7, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) 1.032668906s ago: executing program 5 (id=2248): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="749ec46f5a32f942d92b04"], &(0x7f0000000780)=""/142, 0x8e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000020000000002617f580db923b8dd260ae00"/39], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r9, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe10, 0xfffffffffffffffc, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xd0}}, 0x0) creat(0x0, 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000005711f587b299948654f2eb00"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x41000000, &(0x7f0000000340)="29ac", 0x2, 0x0, &(0x7f00000003c0), &(0x7f0000000400)="fcfb11a856a43945a7dc4cb33d96bc73695b46e3c3dadfb7dd816ea33dd319317d68029f3b906fed6309d6dbba") 1.001688226s ago: executing program 3 (id=2249): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%pB \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x6, 0x7b, 0x8}, {0xe, 0x1, 0x8}, {0x6, 0x0, 0x7}, {0x10, 0xff, 0x5}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x31cf}, {0xd, 0x8}]}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000800)=""/149, 0x9c, 0x95, 0x1, 0xd3a, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x78e, 0x10000, 0x4, 0x4200, r1, 0x2c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x4, @void, @value, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000050021000000000008000d"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e21, 0x95a3, @private2, 0x1}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 971.606636ms ago: executing program 1 (id=2250): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x10) clock_gettime(0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmmsg$unix(r1, &(0x7f0000000a00)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000640)=""/24, 0x18}, {&(0x7f00000006c0)=""/19, 0x13}], 0x4, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x2, 0x1103, &(0x7f0000000a80)={0x77359400}) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000240)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) 934.689146ms ago: executing program 1 (id=2251): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r1 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r1, 0xffffffff) r2 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0xd759, 0x400, 0xfffffffc, 0x228}) r3 = eventfd2(0xc, 0x80800) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @loopback, 0xfffffffe}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r6, 0xd4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) sendmsg$inet(r4, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) ustat(0x0, &(0x7f0000000180)) ustat(0x1, &(0x7f0000001f80)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_setup(0x8, &(0x7f00000008c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) io_submit(0x0, 0x0, 0x0) 848.478516ms ago: executing program 3 (id=2252): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x50032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ef5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000002, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 837.587546ms ago: executing program 1 (id=2253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b00)={@initdev, 0x0}, &(0x7f0000000b40)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRESDEC=0x0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0xec, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) 712.133837ms ago: executing program 3 (id=2254): syz_read_part_table(0x5c4, &(0x7f0000000dc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0xd, 0xb007}, 0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x4c2, &(0x7f0000000900)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0xef29}}, './file0\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x7, &(0x7f0000000140)=[{0xe, 0x0, 0xb, 0x9}, {0x9624, 0x8e, 0x10, 0x2}, {0x808, 0xbd, 0x7, 0x3}, {0x7, 0x0, 0xa, 0x1}, {0x800, 0xcf, 0x8, 0x788c}, {0xfc01, 0x40, 0x1}, {0x6, 0x9, 0x9, 0x5}]}, 0x10) write$rfkill(r4, &(0x7f0000000080)={0x3, 0x0, 0x3, 0x1, 0x1}, 0x8) shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) socket(0x10, 0x3, 0x0) 663.968357ms ago: executing program 0 (id=2255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ff00", "cf0d00", "8657e2b7e43b34e4"}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="5ec000e5eae4e66cc6378375809f770a49", @ANYBLOB="0000000000000065a6f1fe000000000000627a93000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="005eb000"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r4 = dup(r0) connect$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x1}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) connect$nfc_raw(r8, &(0x7f00000006c0)={0x27, 0x0, 0x1, 0x7}, 0x10) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffa1, &(0x7f00000001c0)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x40, 0x13, 0x8, 0x9, 0xbb, 0x6, &(0x7f0000000300)="9cae93907beacb287fab0d73b06a62f5d39d8cdd3789bb86291665997f2baf4e6165fe1228fdfadc6a7106c24b301bd0688e96ed072f97ca146f724dba030b11b7e9e21e3b176841780fb88a3b1d76c0e8cda7a097d53c66bd242c51792b6036f3969ca035bbd8c859ae821d85d5194cf74c3563a7db597de8b51c2b6b4104fd9c2368b32a44c74bc8264e4582b291c8070c4f818749c4db39fa2d24da538659120cd0b4c023012eabbfb20deeef9ac8014c0b3d5d00031b5dfa37"}) 488.672148ms ago: executing program 0 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x8000000094}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00') pread64(r2, &(0x7f0000000200)=""/171, 0xab, 0x73) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0x10002}], 0x1, 0x0, 0xe}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "24eaf7a2ee66e95b", "3055fbfe96bf1afd87dc98fde2ee85b3", '\x00', "4e694600000000e4"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x210002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x904e) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200408c4}, 0x0) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) r7 = socket(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000300)="d0c6", 0x2}]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x8000000}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) pwrite64(r7, &(0x7f00000002c0)="a7839f23b3b9b5bbda69926e2137c8a5a3e597ad1e458ce198cba236d57b8935ab5473c904f3640483242aed9ae24b36fec880ef7b9e3a62a26a3c99c61399df5b1300db90e08b0ce8ad1a72bed3006fe0156563716603017347e4cd107922ad08531b6723b5180802262c0a83a14706b48358f2b9a6a87598a7a9ea7fd9a35946ce020809ed76331119d09abb47c9bf0407c16d3b4edec805dd0833093b6c3c62805a858b66e24243", 0xa9, 0x1) 487.982967ms ago: executing program 2 (id=2257): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x1, 0x3, {0xa, 0x4e23, 0x7fff, @mcast2, 0x101}}}, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) setgroups(0x0, 0x0) fallocate(r4, 0x3, 0x1001, 0x10000) pread64(r3, &(0x7f0000003640)=""/4083, 0xff3, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ff89cd7ee7f4f1c1df7a6f795a291866e1326fedc40815bf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x26000400) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='rpcgss_oid_to_mech\x00', r11}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r13, r6, 0x0, r13}, 0x10) io_setup(0x4, &(0x7f00000014c0)) 315.866928ms ago: executing program 5 (id=2258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) writev(r4, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) statx(0xffffffffffffffff, &(0x7f0000001d80)='./file0/../file0\x00', 0x4000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fdb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 148.104719ms ago: executing program 3 (id=2259): r0 = socket(0x2a, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) symlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f7ffffff03000000b309000001f0000def000000958f4c84b493dc4a9272b05753bf054d02f84fe545fa2413700733ad0db5365b08d2ac13515d32a4106ea4affe379b38f63d5b111c2359c6aabc38ea7ac5df503210f15f54e5391ec0027000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000003060101000000000000000000000000050001000700000021ecbd4ece9145cdfdfc54ed60f52b1f686e295d59ba4ad6e2cfe24a5e16b921216d795406034ac73bb0a2d28b465a4dcc6ddab5128c3e93518453a712209a51b5c017f11baa97042b32ed1376c9c34388fa3eb6176a5b55d624329f558a0fde747f2f49131e916a6346e96abbe39d61c66abaa56bae8d526e81500fae3d38adae0974d59ba40e853e6c86395986111b50e425ec4be03550338239de416bd9e8eddec0c8b2deafb03ebc95f1ff9b8718482a197e1ab70ae3f0a7322aea3da843ad808e13e98ea0"], 0x1c}}, 0x0) r4 = syz_clone(0x4001000, &(0x7f0000000000)="a29defae445cdd0f623a71cfc225c6f2a742470c44503bb2af22ece47fa6bb2de015f9b26ea38f77f59fe3e413f335fc004aeff00d3235b967b32791a9f643d56d7fd7891a6c37669d47291961a1c899a416dacd5c4acdb2dc34544c", 0x5c, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="155211e59cfbcfb91aa7a8732f0d462e80f89f2ab7ae9cc9c04190ef4fd5581b259fdf9daa2e25eff013d8079f7deab7a60c46dc905a4519d88f932b86e55388682accdfd08b66fddc8cb6158df39f554c4ee47be14af35eed89a3a28b85b0e7ea32e0c9beadb3ebdbe7c5e579c5c15eebb336deb4d7a71adfd9043b5177e5e77f80884e2debab456fbf9428f1133b1b79aa54d5b49072d8199ca94c3851503d01fba8b15346b8441ef19cff4f85c075000fab") r5 = getpgid(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000003c0)={0x2, [0x0, 0x0]}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x303}, "d24f1a08ec7b8714", "38118bca87f8ab1efadd796dc4920500000000000000deab994585869a54fc61", "abd468df", "e64bafb4e3dc898a"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) tgkill(r4, r5, 0x5) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff2b) syz_open_pts(r8, 0x40000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101080, 0x10) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0x2) move_mount(r9, &(0x7f0000000200)='./file0\x00', r10, &(0x7f0000000280)='./file0\x00', 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 84.208109ms ago: executing program 5 (id=2260): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108800000000405000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) openat(0xffffffffffffffff, 0x0, 0x8000, 0x1) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x20000, 0x10}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000100000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r10 = socket(0x10, 0x3, 0x6) r11 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a680000000202050000000000000000000000000008000240000000000900010073797a30000000000c00044000000000000000050c0004400000000000000001080002400000000308000240000000020900010073797a31000000000900010073797a300000000014000000020a0108000000000000000001000007140000001100010000000000000000000000000a"], 0xa4}}, 0x0) r13 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$invalidate(0x15, r13) 0s ago: executing program 2 (id=2261): syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0xb0b4724863edde19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = syz_io_uring_setup(0x1267, &(0x7f00000006c0)={0x0, 0x3}, &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0xfffb, 0x1000000, &(0x7f0000000180)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010009c2ebe2b8ac34011000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000008001f0000000000"], 0x28}}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000000006fab960be555d9402d65478e8a6c07cd1af445c716bb46f28c9e239065504c02001c0012801c000100697036746e"], 0x3c}}, 0x20004010) r9 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r9, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001100", @ANYRESDEC], 0xc0}, 0x1, 0x0, 0x0, 0x40895}, 0x20008800) kernel console output (not intermixed with test programs): 0000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 173.141178][ T9909] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.152862][ T11] bio_check_eod: 7 callbacks suppressed [ 173.152909][ T11] kworker/u8:0: attempt to access beyond end of device [ 173.152909][ T11] loop3: rw=1, sector=7608, nr_sectors = 2056 limit=256 [ 173.195960][ T11] kworker/u8:0: attempt to access beyond end of device [ 173.195960][ T11] loop3: rw=1, sector=9664, nr_sectors = 2080 limit=256 [ 173.212388][ T11] kworker/u8:0: attempt to access beyond end of device [ 173.212388][ T11] loop3: rw=1, sector=11744, nr_sectors = 1744 limit=256 [ 173.247737][ T9931] x_tables: duplicate underflow at hook 3 [ 173.258715][ T9909] rdma_rxe: rxe_newlink: failed to add lo [ 173.304557][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 173.352985][ T9934] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 173.359575][ T9934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.367026][ T9934] vhci_hcd vhci_hcd.0: Device attached [ 173.455910][ T9941] vhci_hcd: connection closed [ 173.456006][ T57] vhci_hcd: stop threads [ 173.465204][ T57] vhci_hcd: release socket [ 173.469790][ T57] vhci_hcd: disconnect device [ 173.469935][ T9946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1798'. [ 173.489684][ T9940] team0 (unregistering): Port device team_slave_0 removed [ 173.499330][ T9940] team0 (unregistering): Port device team_slave_1 removed [ 173.531622][ T9948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 173.538253][ T9948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.545831][ T9948] vhci_hcd vhci_hcd.0: Device attached [ 173.551539][ T9943] loop5: detected capacity change from 0 to 4096 [ 173.559380][ T9943] EXT4-fs (loop5): unsupported descriptor size 1344 [ 173.644502][ T9951] vhci_hcd: connection closed [ 173.680123][ T50] vhci_hcd: stop threads [ 173.689266][ T50] vhci_hcd: release socket [ 173.693969][ T50] vhci_hcd: disconnect device [ 173.722326][ T9961] pim6reg: entered allmulticast mode [ 173.728300][ T9954] vhci_hcd: default hub control req: 4001 v0220 i0001 l0 [ 173.753328][ T9961] pim6reg: left allmulticast mode [ 173.863567][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1805'. [ 173.908455][ T9965] loop3: detected capacity change from 0 to 1024 [ 173.917497][ T9965] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.930040][ T9970] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1806'. [ 173.940335][ T9965] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 173.948950][ T9965] EXT4-fs (loop3): orphan cleanup on readonly fs [ 173.955961][ T9965] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 173.974485][ T9974] x_tables: duplicate underflow at hook 3 [ 173.993504][ T9965] EXT4-fs (loop3): Remounting filesystem read-only [ 174.006060][ T9965] EXT4-fs (loop3): 1 orphan inode deleted [ 174.017695][ T9965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.030370][ T9965] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 174.037434][ T9965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.053334][ T9978] netlink: 'syz.1.1809': attribute type 13 has an invalid length. [ 174.061250][ T9978] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1809'. [ 174.141760][ T9965] loop3: detected capacity change from 0 to 1764 [ 174.221680][ T9983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1810'. [ 174.271973][ T9985] loop3: detected capacity change from 0 to 764 [ 174.346718][ T9987] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 174.353465][ T9987] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.361387][ T9987] vhci_hcd vhci_hcd.0: Device attached [ 174.453778][ T9988] vhci_hcd: connection closed [ 174.454114][ T11] vhci_hcd: stop threads [ 174.463051][ T11] vhci_hcd: release socket [ 174.467506][ T11] vhci_hcd: disconnect device [ 174.540314][ T9995] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1814'. [ 174.572898][ T9995] 0ªX¹¦À: renamed from caif0 [ 174.583991][ T9995] 0ªX¹¦À: entered allmulticast mode [ 174.589284][ T9995] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 175.000790][T10000] syz.0.1815[10000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.000912][T10000] syz.0.1815[10000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.017965][T10001] pim6reg: entered allmulticast mode [ 175.035315][T10000] syz.0.1815[10000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.086193][T10001] pim6reg: left allmulticast mode [ 175.207343][T10007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1818'. [ 175.216632][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 175.262781][T10012] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 175.269418][T10012] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.276934][T10012] vhci_hcd vhci_hcd.0: Device attached [ 175.311939][T10000] can0: slcan on ttyS3. [ 175.372677][T10013] vhci_hcd: connection closed [ 175.372883][ T57] vhci_hcd: stop threads [ 175.381980][ T57] vhci_hcd: release socket [ 175.386430][ T57] vhci_hcd: disconnect device [ 175.394510][T10000] can0 (unregistered): slcan off ttyS3. [ 175.402933][T10000] Falling back ldisc for ttyS3. [ 175.468523][T10019] syz.0.1822[10019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.468623][T10019] syz.0.1822[10019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.489552][T10019] syz.0.1822[10019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.586718][T10028] loop3: detected capacity change from 0 to 512 [ 175.608632][T10016] rdma_rxe: rxe_newlink: failed to add lo [ 175.631239][T10028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.646258][T10028] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.661352][T10028] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1824'. [ 175.685960][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.698333][ T7911] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 175.708132][ T7911] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.716070][T10036] loop5: detected capacity change from 0 to 512 [ 175.742258][T10036] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 175.752610][T10036] EXT4-fs (loop5): group descriptors corrupted! [ 175.758877][T10040] Cannot find set identified by id 0 to match [ 175.785111][T10036] syz.5.1827[10036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.785241][T10036] syz.5.1827[10036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.797258][T10036] syz.5.1827[10036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.816064][T10036] loop5: detected capacity change from 0 to 1024 [ 175.847576][T10036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.859929][T10036] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.877088][T10036] syz.5.1827[10036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.904810][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.975219][T10054] loop5: detected capacity change from 0 to 256 [ 176.024927][T10054] FAT-fs (loop5): Directory bread(block 64) failed [ 176.031715][T10054] FAT-fs (loop5): Directory bread(block 65) failed [ 176.039098][T10054] FAT-fs (loop5): Directory bread(block 66) failed [ 176.046038][T10054] FAT-fs (loop5): Directory bread(block 67) failed [ 176.052800][T10054] FAT-fs (loop5): Directory bread(block 68) failed [ 176.060449][T10054] FAT-fs (loop5): Directory bread(block 69) failed [ 176.067273][T10054] FAT-fs (loop5): Directory bread(block 70) failed [ 176.074646][T10054] FAT-fs (loop5): Directory bread(block 71) failed [ 176.081426][T10054] FAT-fs (loop5): Directory bread(block 72) failed [ 176.088392][T10054] FAT-fs (loop5): Directory bread(block 73) failed [ 176.124369][T10057] vlan1: entered promiscuous mode [ 176.149634][T10057] vlan1: left promiscuous mode [ 176.208560][T10059] loop3: detected capacity change from 0 to 256 [ 176.246411][T10059] FAT-fs (loop3): Directory bread(block 64) failed [ 176.255683][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.255683][ T57] loop5: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 176.258797][T10059] FAT-fs (loop3): Directory bread(block 65) failed [ 176.276983][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.276983][ T57] loop5: rw=1, sector=1864, nr_sectors = 2048 limit=256 [ 176.293998][T10059] FAT-fs (loop3): Directory bread(block 66) failed [ 176.310138][T10059] FAT-fs (loop3): Directory bread(block 67) failed [ 176.318337][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.318337][ T57] loop5: rw=1, sector=3912, nr_sectors = 1808 limit=256 [ 176.323467][T10059] FAT-fs (loop3): Directory bread(block 68) failed [ 176.357536][T10059] FAT-fs (loop3): Directory bread(block 69) failed [ 176.358167][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.358167][ T57] loop5: rw=2049, sector=5720, nr_sectors = 2048 limit=256 [ 176.380940][T10059] FAT-fs (loop3): Directory bread(block 70) failed [ 176.396027][T10059] FAT-fs (loop3): Directory bread(block 71) failed [ 176.405790][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.405790][ T57] loop5: rw=2049, sector=7768, nr_sectors = 2048 limit=256 [ 176.411448][T10059] FAT-fs (loop3): Directory bread(block 72) failed [ 176.443975][T10059] FAT-fs (loop3): Directory bread(block 73) failed [ 176.445309][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.445309][ T57] loop5: rw=2049, sector=9816, nr_sectors = 2048 limit=256 [ 176.486347][ T57] kworker/u8:4: attempt to access beyond end of device [ 176.486347][ T57] loop5: rw=2049, sector=11864, nr_sectors = 96 limit=256 [ 176.624716][T10066] siw: device registration error -23 [ 176.628088][T10067] siw: device registration error -23 [ 176.741143][T10074] loop3: detected capacity change from 0 to 512 [ 176.751249][T10074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.811117][T10074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.827769][T10078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 176.834377][T10078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.841833][T10078] vhci_hcd vhci_hcd.0: Device attached [ 176.901537][T10074] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.933659][T10081] vhci_hcd: connection closed [ 176.940810][ T50] vhci_hcd: stop threads [ 176.948934][T10074] ebt_among: dst integrity fail: 101 [ 176.949960][ T50] vhci_hcd: release socket [ 176.949970][ T50] vhci_hcd: disconnect device [ 177.143910][T10089] ALSA: seq fatal error: cannot create timer (-22) [ 177.179096][T10098] loop5: detected capacity change from 0 to 512 [ 177.197295][T10098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.210079][T10098] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.215275][T10096] hub 5-0:1.0: USB hub found [ 177.227842][T10096] hub 5-0:1.0: 8 ports detected [ 177.252633][T10106] __nla_validate_parse: 6 callbacks suppressed [ 177.252646][T10106] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1851'. [ 177.253347][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.259807][T10106] 0ªX¹¦À: renamed from caif0 [ 177.294092][T10106] 0ªX¹¦À: entered allmulticast mode [ 177.299327][T10106] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 177.365356][ T29] kauditd_printk_skb: 1335 callbacks suppressed [ 177.365430][ T29] audit: type=1326 audit(1733963407.165:41181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.403119][ T29] audit: type=1326 audit(1733963407.165:41182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.427374][ T29] audit: type=1326 audit(1733963407.165:41183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.451268][ T29] audit: type=1326 audit(1733963407.165:41184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.474937][ T29] audit: type=1326 audit(1733963407.165:41185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.498601][ T29] audit: type=1326 audit(1733963407.165:41186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.505041][T10117] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.522245][ T29] audit: type=1326 audit(1733963407.165:41187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 177.528603][T10117] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 177.528616][T10117] audit: backlog limit exceeded [ 177.575634][T10113] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 177.582332][T10113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.589890][T10113] vhci_hcd vhci_hcd.0: Device attached [ 177.673162][T10122] vhci_hcd: connection closed [ 177.673461][ T3398] vhci_hcd: stop threads [ 177.682509][ T3398] vhci_hcd: release socket [ 177.682525][ T3398] vhci_hcd: disconnect device [ 177.746057][T10134] SELinux: policydb version 0 does not match my version range 15-33 [ 177.755205][T10134] SELinux: failed to load policy [ 177.763887][T10134] futex_wake_op: syz.1.1858 tries to shift op by 144; fix this program [ 177.797071][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 177.827569][T10146] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 177.865698][T10149] netlink: 'syz.1.1863': attribute type 10 has an invalid length. [ 178.050110][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.061532][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.072371][T10142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1861'. [ 178.228513][T10199] loop5: detected capacity change from 0 to 128 [ 178.237820][T10199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.259917][T10199] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.272894][T10199] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.449380][T10205] vhci_hcd: default hub control req: 4001 v0220 i0001 l0 [ 178.550831][T10199] can0: slcan on ttyS3. [ 178.614118][T10199] can0 (unregistered): slcan off ttyS3. [ 178.624261][T10199] Falling back ldisc for ttyS3. [ 178.662865][T10238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 178.669410][T10238] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.677181][T10238] vhci_hcd vhci_hcd.0: Device attached [ 178.773976][T10242] vhci_hcd: connection closed [ 178.776819][ T11] vhci_hcd: stop threads [ 178.785824][ T11] vhci_hcd: release socket [ 178.790242][ T11] vhci_hcd: disconnect device [ 178.804818][ T9809] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.825345][T10259] vlan1: entered promiscuous mode [ 178.848948][T10259] vlan1: left promiscuous mode [ 178.866302][T10263] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 178.876227][T10263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 178.954476][ T8] usb usb8-port2: attempt power cycle [ 178.974714][T10277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1873'. [ 179.371804][T10294] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 179.984217][ T9928] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 180.804198][ T8] usb usb8-port2: unable to enumerate USB device [ 180.812655][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.828944][T10307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=10307 comm=syz.0.1892 [ 180.852062][T10310] bpf_get_probe_write_proto: 5 callbacks suppressed [ 180.852078][T10310] syz.3.1881[10310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.854208][T10304] vlan1: entered promiscuous mode [ 180.869293][T10310] syz.3.1881[10310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.877864][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 180.880713][T10310] syz.3.1881[10310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.907548][T10307] geneve2: entered promiscuous mode [ 180.924334][T10307] geneve2: entered allmulticast mode [ 180.946324][T10310] loop3: detected capacity change from 0 to 128 [ 180.954954][T10304] vlan1: left promiscuous mode [ 180.963539][T10310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.995036][T10310] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.013299][T10310] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.051392][T10314] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 181.115313][T10322] netlink: 'syz.1.1889': attribute type 21 has an invalid length. [ 181.146704][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 181.155940][T10322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 181.227852][T10327] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 181.234485][T10327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 181.242211][T10327] vhci_hcd vhci_hcd.0: Device attached [ 181.334806][T10329] vhci_hcd: connection closed [ 181.337929][ T3398] vhci_hcd: stop threads [ 181.347158][ T3398] vhci_hcd: release socket [ 181.351582][ T3398] vhci_hcd: disconnect device [ 181.368064][T10310] can0: slcan on ttyS3. [ 181.392415][T10336] ebt_among: dst integrity fail: 101 [ 181.424276][T10310] can0 (unregistered): slcan off ttyS3. [ 181.430127][T10310] Falling back ldisc for ttyS3. [ 181.488715][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 181.502401][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.377857][ T29] kauditd_printk_skb: 1181 callbacks suppressed [ 182.377871][ T29] audit: type=1400 audit(1733963412.175:42369): avc: denied { create } for pid=10345 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.386709][T10348] vlan1: entered promiscuous mode [ 182.413132][T10346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1899'. [ 182.422607][ T29] audit: type=1400 audit(1733963412.205:42370): avc: denied { create } for pid=10345 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.442246][ T29] audit: type=1400 audit(1733963412.205:42371): avc: denied { setopt } for pid=10345 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.461876][ T29] audit: type=1400 audit(1733963412.205:42372): avc: denied { write } for pid=10345 comm="syz.5.1899" path="socket:[27531]" dev="sockfs" ino=27531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.486499][ T29] audit: type=1400 audit(1733963412.205:42373): avc: denied { nlmsg_read } for pid=10345 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.507781][T10346] geneve0: entered allmulticast mode [ 182.515425][T10348] vlan1: left promiscuous mode [ 182.539611][T10352] loop3: detected capacity change from 0 to 764 [ 182.550857][ T29] audit: type=1326 audit(1733963412.345:42374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 182.574592][ T29] audit: type=1326 audit(1733963412.345:42375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 182.598661][ T29] audit: type=1326 audit(1733963412.375:42376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 182.622475][ T29] audit: type=1326 audit(1733963412.375:42377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 182.646506][ T29] audit: type=1326 audit(1733963412.375:42378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 182.671005][T10358] geneve0: entered allmulticast mode [ 182.709045][T10362] loop5: detected capacity change from 0 to 512 [ 182.715759][T10362] EXT4-fs: Ignoring removed orlov option [ 182.722488][T10362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.731712][T10362] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.738980][T10362] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1905: bg 0: block 248: padding at end of block bitmap is not set [ 182.754682][T10362] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1905: Failed to acquire dquot type 1 [ 182.766774][T10362] EXT4-fs (loop5): 1 truncate cleaned up [ 182.773005][T10362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.847378][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.853445][T10370] loop3: detected capacity change from 0 to 4096 [ 182.869518][T10370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.877353][T10374] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1908'. [ 182.898277][T10370] netlink: 'syz.3.1907': attribute type 27 has an invalid length. [ 182.903904][T10374] 0ªX¹¦À: renamed from caif0 [ 182.912969][T10374] 0ªX¹¦À: entered allmulticast mode [ 182.918351][T10374] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 182.934702][T10370] 0ªX¹¦À: left allmulticast mode [ 182.939821][T10370] geneve0: left allmulticast mode [ 182.971474][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.009327][T10384] loop3: detected capacity change from 0 to 512 [ 183.048012][T10384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.060891][T10384] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.074625][T10384] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1910'. [ 183.083134][T10382] loop5: detected capacity change from 0 to 512 [ 183.085047][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1910'. [ 183.115224][T10382] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 183.124789][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.125412][T10382] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.140464][T10382] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.144967][T10395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=10395 comm=syz.1.1915 [ 183.155887][T10382] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 183.175660][T10382] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1911: bg 0: block 40: padding at end of block bitmap is not set [ 183.193536][T10382] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 183.202563][T10382] EXT4-fs (loop5): 1 truncate cleaned up [ 183.208822][T10382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.216323][T10397] netlink: 'syz.3.1914': attribute type 21 has an invalid length. [ 183.251295][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 183.260662][T10395] geneve2: entered promiscuous mode [ 183.265899][T10395] geneve2: entered allmulticast mode [ 183.271721][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.284376][T10397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.332367][T10403] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1917'. [ 183.343033][T10403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1917'. [ 183.347347][T10405] can: request_module (can-proto-0) failed. [ 183.362630][T10407] netlink: 'syz.5.1916': attribute type 10 has an invalid length. [ 183.374790][ T7504] usb usb8-port2: attempt power cycle [ 183.396737][T10410] loop3: detected capacity change from 0 to 512 [ 183.403167][T10405] netlink: 'syz.1.1918': attribute type 2 has an invalid length. [ 183.403562][T10410] EXT4-fs: Ignoring removed orlov option [ 183.411213][T10405] netlink: 'syz.1.1918': attribute type 8 has an invalid length. [ 183.411228][T10405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1918'. [ 183.427594][T10405] netlink: 'syz.1.1918': attribute type 39 has an invalid length. [ 183.441974][T10410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.451108][T10410] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.458400][T10410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1919: bg 0: block 248: padding at end of block bitmap is not set [ 183.473290][T10410] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1919: Failed to acquire dquot type 1 [ 183.485572][T10410] EXT4-fs (loop3): 1 truncate cleaned up [ 183.491885][T10410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.586664][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.591264][T10415] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 183.630607][T10419] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1922'. [ 183.635625][T10417] loop3: detected capacity change from 0 to 2048 [ 183.640083][T10419] 1ªX¹¦À: renamed from 60ªX¹¦À [ 183.646815][T10417] ext4: Unknown parameter 'obj_type' [ 183.658455][T10419] 1ªX¹¦À: entered allmulticast mode [ 183.663702][T10419] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 183.701691][T10421] loop3: detected capacity change from 0 to 764 [ 183.750899][T10426] loop3: detected capacity change from 0 to 764 [ 183.802978][T10430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 184.316096][T10447] can: request_module (can-proto-0) failed. [ 184.341219][T10447] netlink: 'syz.5.1932': attribute type 2 has an invalid length. [ 184.349005][T10447] netlink: 'syz.5.1932': attribute type 8 has an invalid length. [ 184.365585][T10447] netlink: 'syz.5.1932': attribute type 39 has an invalid length. [ 184.572068][T10454] loop5: detected capacity change from 0 to 2048 [ 184.586851][T10454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.656423][T10454] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 184.656423][T10454] program syz.5.1933 not setting count and/or reply_len properly [ 184.736125][T10464] 1ªX¹¦À: renamed from 60ªX¹¦À [ 184.747186][T10464] 1ªX¹¦À: entered allmulticast mode [ 184.752453][T10464] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 184.801708][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.837974][T10469] loop5: detected capacity change from 0 to 512 [ 184.851949][T10471] x_tables: duplicate underflow at hook 3 [ 184.859549][T10469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.872242][T10469] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.907098][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.128840][T10497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 185.135409][T10497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.143007][T10497] vhci_hcd vhci_hcd.0: Device attached [ 185.234123][T10498] vhci_hcd: connection closed [ 185.235927][ T3398] vhci_hcd: stop threads [ 185.240101][T10501] loop5: detected capacity change from 0 to 512 [ 185.240636][ T3398] vhci_hcd: release socket [ 185.255650][ T3398] vhci_hcd: disconnect device [ 185.264425][ T7504] usb usb8-port2: unable to enumerate USB device [ 185.344434][T10507] netlink: 'syz.2.1949': attribute type 27 has an invalid length. [ 185.405590][T10512] x_tables: duplicate underflow at hook 3 [ 185.442339][T10515] 0ªX¹¦À: renamed from caif0 [ 185.451388][T10515] 0ªX¹¦À: entered allmulticast mode [ 185.456637][T10515] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 185.479410][T10519] siw: device registration error -23 [ 185.626082][T10526] syz.2.1958[10526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.626183][T10526] syz.2.1958[10526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.637976][T10526] syz.2.1958[10526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.086072][T10539] can: request_module (can-proto-0) failed. [ 186.572625][T10554] loop5: detected capacity change from 0 to 512 [ 186.626955][T10554] xt_TCPMSS: Only works on TCP SYN packets [ 186.815462][T10559] siw: device registration error -23 [ 186.842938][T10561] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 186.849531][T10561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.856977][T10561] vhci_hcd vhci_hcd.0: Device attached [ 186.947628][T10562] vhci_hcd: connection closed [ 186.950005][ T57] vhci_hcd: stop threads [ 186.958975][ T57] vhci_hcd: release socket [ 186.963379][ T57] vhci_hcd: disconnect device [ 186.994381][T10565] hub 5-0:1.0: USB hub found [ 187.024303][T10565] hub 5-0:1.0: 8 ports detected [ 187.283495][T10575] lo speed is unknown, defaulting to 1000 [ 187.295498][T10578] infiniband sz1: set active [ 187.300396][T10578] infiniband sz1: set active [ 187.327377][T10578] gretap0: refused to change device tx_queue_len [ 187.334027][T10578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.354044][ T7911] lo speed is unknown, defaulting to 1000 [ 187.364488][ T7504] lo speed is unknown, defaulting to 1000 [ 187.370959][ T7911] lo speed is unknown, defaulting to 1000 [ 187.386218][ T29] kauditd_printk_skb: 1526 callbacks suppressed [ 187.386239][ T29] audit: type=1326 audit(1733963417.185:43900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.416154][ T29] audit: type=1326 audit(1733963417.185:43901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.440079][ T29] audit: type=1326 audit(1733963417.185:43902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.463564][ T29] audit: type=1326 audit(1733963417.185:43903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.468788][T10575] lo speed is unknown, defaulting to 1000 [ 187.487116][ T29] audit: type=1326 audit(1733963417.185:43904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.487195][ T29] audit: type=1326 audit(1733963417.185:43905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.539968][ T29] audit: type=1326 audit(1733963417.185:43906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.563520][ T29] audit: type=1326 audit(1733963417.185:43907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.585729][T10583] __nla_validate_parse: 16 callbacks suppressed [ 187.585771][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1974'. [ 187.587077][ T29] audit: type=1326 audit(1733963417.185:43908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.625829][ T29] audit: type=1326 audit(1733963417.185:43909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 187.686125][T10575] lo speed is unknown, defaulting to 1000 [ 187.869783][T10591] loop5: detected capacity change from 0 to 2048 [ 187.895665][T10591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.949357][T10598] syz.2.1979[10598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.949534][T10598] syz.2.1979[10598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.962775][T10598] syz.2.1979[10598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.989508][T10591] syz.5.1978[10591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.024483][T10591] syz.5.1978[10591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.051411][T10592] syz.3.1977[10592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.070373][T10591] syz.5.1978[10591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.088781][T10592] syz.3.1977[10592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.115926][T10596] loop3: detected capacity change from 0 to 256 [ 188.150823][T10592] syz.3.1977[10592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.178613][T10592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1977'. [ 188.210949][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.342637][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'. [ 188.355640][T10611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1983'. [ 188.376280][T10609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.494414][T10598] can0: slcan on ttyS3. [ 188.594465][T10598] can0 (unregistered): slcan off ttyS3. [ 188.602732][T10598] Falling back ldisc for ttyS3. [ 188.776870][T10638] bio_check_eod: 8 callbacks suppressed [ 188.776951][T10638] syz.2.1987: attempt to access beyond end of device [ 188.776951][T10638] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 188.822049][T10643] validate_nla: 4 callbacks suppressed [ 188.822066][T10643] netlink: 'syz.1.1989': attribute type 2 has an invalid length. [ 188.900383][T10654] x_tables: unsorted entry at hook 3 [ 188.920839][T10654] tipc: Enabling of bearer rejected, already enabled [ 189.197291][T10666] veth0_to_team: entered promiscuous mode [ 189.203108][T10666] veth0_to_team: entered allmulticast mode [ 189.210491][T10668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=10668 comm=syz.5.1993 [ 189.245257][T10666] rdma_rxe: rxe_newlink: failed to add lo [ 189.404123][T10668] geneve2: entered promiscuous mode [ 189.409434][T10668] geneve2: entered allmulticast mode [ 189.627085][T10683] loop3: detected capacity change from 0 to 512 [ 189.706023][T10683] EXT4-fs: inline encryption not supported [ 189.815686][T10683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.996670][T10692] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 190.077585][T10695] loop5: detected capacity change from 0 to 764 [ 190.254484][T10683] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1995: Failed to acquire dquot type 1 [ 190.270656][T10703] syz.1.1998[10703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.290021][T10683] EXT4-fs (loop3): 1 truncate cleaned up [ 190.329818][T10708] x_tables: duplicate underflow at hook 3 [ 190.401142][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.416505][T10709] @: (slave vlan0): Opening slave failed [ 190.420268][T10716] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2001'. [ 190.445676][T10716] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2001'. [ 190.462227][T10683] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.569419][T10724] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 190.576042][T10724] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.583590][T10724] vhci_hcd vhci_hcd.0: Device attached [ 190.672422][T10729] vhci_hcd: connection closed [ 190.673240][ T28] vhci_hcd: stop threads [ 190.682408][ T28] vhci_hcd: release socket [ 190.686929][ T28] vhci_hcd: disconnect device [ 190.789160][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.834496][T10703] can0: slcan on ttyS3. [ 190.894883][T10703] can0 (unregistered): slcan off ttyS3. [ 190.900558][T10703] Falling back ldisc for ttyS3. [ 190.903669][T10744] loop3: detected capacity change from 0 to 1764 [ 190.971611][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 190.980875][T10744] block device autoloading is deprecated and will be removed. [ 191.008343][T10740] SELinux: syz.2.2014 (10740) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 191.016831][T10744] syz.3.2004: attempt to access beyond end of device [ 191.016831][T10744] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 191.146251][T10761] loop0: detected capacity change from 0 to 2048 [ 191.213773][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2006'. [ 191.222904][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2006'. [ 191.240723][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2006'. [ 191.263134][T10761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.287304][T10772] program syz.5.2009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.303490][T10770] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 191.314026][T10761] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 191.377692][T10778] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 191.377813][T10770] GUP no longer grows the stack in syz.3.2008 (10770): 20004000-2000a000 (20002000) [ 191.397973][T10770] CPU: 0 UID: 0 PID: 10770 Comm: syz.3.2008 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 191.408820][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.418885][T10770] Call Trace: [ 191.422171][T10770] [ 191.425196][T10770] dump_stack_lvl+0xf2/0x150 [ 191.429925][T10770] dump_stack+0x15/0x1a [ 191.434122][T10770] __get_user_pages+0x209b/0x2670 [ 191.439183][T10770] ? __rcu_read_unlock+0x4e/0x70 [ 191.444334][T10770] get_user_pages_remote+0x1df/0x790 [ 191.449668][T10770] __access_remote_vm+0x15b/0x580 [ 191.454713][T10770] access_remote_vm+0x34/0x50 [ 191.459507][T10770] proc_pid_cmdline_read+0x3e6/0x660 [ 191.464815][T10770] vfs_readv+0x3e2/0x660 [ 191.469136][T10770] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 191.474992][T10770] __x64_sys_preadv+0xf4/0x1c0 [ 191.479851][T10770] x64_sys_call+0x2680/0x2dc0 [ 191.484709][T10770] do_syscall_64+0xc9/0x1c0 [ 191.489225][T10770] ? clear_bhb_loop+0x55/0xb0 [ 191.493930][T10770] ? clear_bhb_loop+0x55/0xb0 [ 191.498621][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.504551][T10770] RIP: 0033:0x7f532cf6ff19 [ 191.509062][T10770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.528682][T10770] RSP: 002b:00007f532b5e1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 191.537178][T10770] RAX: ffffffffffffffda RBX: 00007f532d135fa0 RCX: 00007f532cf6ff19 [ 191.545216][T10770] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 191.553283][T10770] RBP: 00007f532cfe3cc8 R08: 00000000fffffff9 R09: 0000000000000000 [ 191.561247][T10770] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 191.569247][T10770] R13: 0000000000000000 R14: 00007f532d135fa0 R15: 00007fff2263ec48 [ 191.577222][T10770] [ 191.599249][T10776] loop3: detected capacity change from 0 to 1024 [ 191.611952][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.621915][T10776] EXT4-fs: Ignoring removed nobh option [ 191.627649][T10776] EXT4-fs: Ignoring removed orlov option [ 191.720279][T10776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.854749][T10816] loop0: detected capacity change from 0 to 256 [ 191.867280][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.912025][T10816] FAT-fs (loop0): Directory bread(block 64) failed [ 191.937698][T10819] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 191.939761][T10816] FAT-fs (loop0): Directory bread(block 65) failed [ 191.944311][T10819] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.944422][T10819] vhci_hcd vhci_hcd.0: Device attached [ 191.976855][T10816] FAT-fs (loop0): Directory bread(block 66) failed [ 191.993773][T10816] FAT-fs (loop0): Directory bread(block 67) failed [ 192.013267][T10816] FAT-fs (loop0): Directory bread(block 68) failed [ 192.046794][T10816] FAT-fs (loop0): Directory bread(block 69) failed [ 192.053671][T10816] FAT-fs (loop0): Directory bread(block 70) failed [ 192.060315][T10820] vhci_hcd: connection closed [ 192.060428][T10816] FAT-fs (loop0): Directory bread(block 71) failed [ 192.062194][ T28] vhci_hcd: stop threads [ 192.065187][T10816] FAT-fs (loop0): Directory bread(block 72) failed [ 192.071689][ T28] vhci_hcd: release socket [ 192.076841][T10816] FAT-fs (loop0): Directory bread(block 73) failed [ 192.082509][ T28] vhci_hcd: disconnect device [ 192.099681][T10823] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.133122][T10816] syz.0.2018: attempt to access beyond end of device [ 192.133122][T10816] loop0: rw=2049, sector=1296, nr_sectors = 4 limit=256 [ 192.147045][ T7911] vhci_hcd: vhci_device speed not set [ 192.165658][ T28] kworker/u8:1: attempt to access beyond end of device [ 192.165658][ T28] loop0: rw=1, sector=1224, nr_sectors = 72 limit=256 [ 192.425341][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 192.425355][ T29] audit: type=1400 audit(1733963422.225:44709): avc: denied { write } for pid=10827 comm="syz.0.2021" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.425691][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.431555][ T29] audit: type=1400 audit(1733963422.225:44710): avc: denied { ioctl } for pid=10827 comm="syz.0.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.455621][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.515288][ T29] audit: type=1400 audit(1733963422.315:44711): avc: denied { create } for pid=10827 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.557197][ T29] audit: type=1400 audit(1733963422.345:44712): avc: denied { create } for pid=10827 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 192.612628][ T29] audit: type=1326 audit(1733963422.355:44713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 192.636402][ T29] audit: type=1326 audit(1733963422.355:44714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 192.660381][ T29] audit: type=1326 audit(1733963422.355:44715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 192.667102][T10837] lo speed is unknown, defaulting to 1000 [ 192.728888][T10837] lo speed is unknown, defaulting to 1000 [ 192.736683][T10837] lo speed is unknown, defaulting to 1000 [ 192.762634][ T29] audit: type=1400 audit(1733963422.405:44716): avc: denied { create } for pid=10827 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.782506][ T29] audit: type=1400 audit(1733963422.405:44717): avc: denied { setopt } for pid=10827 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.800804][T10841] __nla_validate_parse: 1 callbacks suppressed [ 192.800819][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2025'. [ 192.802488][ T29] audit: type=1400 audit(1733963422.405:44718): avc: denied { name_bind } for pid=10834 comm="syz.1.2023" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 192.808633][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2025'. [ 192.887711][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2025'. [ 192.908329][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 192.925365][T10837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.386610][T10884] loop0: detected capacity change from 0 to 2048 [ 193.408714][T10884] EXT4-fs (loop0): failed to initialize system zone (-117) [ 193.432571][T10884] EXT4-fs (loop0): mount failed [ 193.557496][T10900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 193.564124][T10900] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.571743][T10900] vhci_hcd vhci_hcd.0: Device attached [ 193.660047][T10902] vhci_hcd: connection closed [ 193.660574][ T28] vhci_hcd: stop threads [ 193.669556][ T28] vhci_hcd: release socket [ 193.674054][ T28] vhci_hcd: disconnect device [ 193.754068][T10910] x_tables: duplicate underflow at hook 3 [ 193.803064][T10914] loop5: detected capacity change from 0 to 512 [ 193.821190][T10914] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.832897][T10914] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 193.843150][T10914] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2039: Corrupt directory, running e2fsck is recommended [ 193.924983][T10914] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 193.957475][T10914] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2039: corrupted in-inode xattr: invalid ea_ino [ 193.984624][T10918] loop3: detected capacity change from 0 to 512 [ 194.010569][T10914] EXT4-fs (loop5): Remounting filesystem read-only [ 194.019851][T10918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.037838][T10914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.050841][T10918] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.061416][T10914] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 194.068883][T10918] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.079068][T10914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.184628][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2039'. [ 194.343569][T10939] geneve1: entered promiscuous mode [ 194.357475][T10938] loop5: detected capacity change from 0 to 164 [ 194.388309][T10938] syz.5.2044: attempt to access beyond end of device [ 194.388309][T10938] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 194.407022][T10941] loop3: detected capacity change from 0 to 256 [ 194.412219][T10931] lo speed is unknown, defaulting to 1000 [ 194.422107][T10938] syz.5.2044: attempt to access beyond end of device [ 194.422107][T10938] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.442989][T10926] SELinux: syz.0.2043 (10926) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 194.445397][T10942] syz.5.2044: attempt to access beyond end of device [ 194.445397][T10942] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.472959][T10938] syz.5.2044: attempt to access beyond end of device [ 194.472959][T10938] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.496705][T10938] syz.5.2044: attempt to access beyond end of device [ 194.496705][T10938] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.514369][T10941] FAT-fs (loop3): Directory bread(block 64) failed [ 194.524062][T10941] FAT-fs (loop3): Directory bread(block 65) failed [ 194.535694][T10931] lo speed is unknown, defaulting to 1000 [ 194.540531][T10942] syz.5.2044: attempt to access beyond end of device [ 194.540531][T10942] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.541469][T10941] FAT-fs (loop3): Directory bread(block 66) failed [ 194.570297][T10938] syz.5.2044: attempt to access beyond end of device [ 194.570297][T10938] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.573009][T10931] lo speed is unknown, defaulting to 1000 [ 194.594435][T10941] FAT-fs (loop3): Directory bread(block 67) failed [ 194.608765][T10941] FAT-fs (loop3): Directory bread(block 68) failed [ 194.608994][T10942] syz.5.2044: attempt to access beyond end of device [ 194.608994][T10942] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.634422][T10941] FAT-fs (loop3): Directory bread(block 69) failed [ 194.636922][T10938] syz.5.2044: attempt to access beyond end of device [ 194.636922][T10938] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.651263][T10941] FAT-fs (loop3): Directory bread(block 70) failed [ 194.666215][T10941] FAT-fs (loop3): Directory bread(block 71) failed [ 194.669461][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2046'. [ 194.682026][T10941] FAT-fs (loop3): Directory bread(block 72) failed [ 194.693603][T10941] FAT-fs (loop3): Directory bread(block 73) failed [ 194.708924][T10942] syz.5.2044: attempt to access beyond end of device [ 194.708924][T10942] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.894928][T10952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10952 comm=syz.1.2049 [ 195.136043][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.144738][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.174861][T10959] lo speed is unknown, defaulting to 1000 [ 195.228315][T10959] lo speed is unknown, defaulting to 1000 [ 195.234582][T10959] lo speed is unknown, defaulting to 1000 [ 195.430949][T10959] lo speed is unknown, defaulting to 1000 [ 195.484105][T10959] lo speed is unknown, defaulting to 1000 [ 195.490535][T10959] lo speed is unknown, defaulting to 1000 [ 196.137926][T10970] xt_hashlimit: max too large, truncated to 1048576 [ 196.280282][T10974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2055'. [ 196.520632][T10980] netlink: 'syz.5.2054': attribute type 13 has an invalid length. [ 196.557425][T10977] lo speed is unknown, defaulting to 1000 [ 196.586862][T10980] gretap0: refused to change device tx_queue_len [ 196.612485][T10980] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.810685][T10977] lo speed is unknown, defaulting to 1000 [ 196.848409][T10977] lo speed is unknown, defaulting to 1000 [ 197.633324][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 197.633340][ T29] audit: type=1400 audit(1733963427.425:45115): avc: denied { setopt } for pid=10995 comm="syz.1.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.661631][T10996] program syz.1.2060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.731503][ T29] audit: type=1400 audit(1733963427.515:45116): avc: denied { create } for pid=10997 comm="syz.5.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 197.812581][T11003] block device autoloading is deprecated and will be removed. [ 197.827012][ T29] audit: type=1326 audit(1733963427.595:45117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 197.850693][ T29] audit: type=1326 audit(1733963427.595:45118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 197.874358][ T29] audit: type=1326 audit(1733963427.595:45119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 197.898071][ T29] audit: type=1326 audit(1733963427.595:45120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 197.921859][ T29] audit: type=1326 audit(1733963427.595:45121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 197.945512][ T29] audit: type=1400 audit(1733963427.595:45122): avc: denied { read write } for pid=11001 comm="syz.5.2062" name="resume" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 197.972736][ T29] audit: type=1326 audit(1733963427.595:45124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2a9d2bff19 code=0x7ffc0000 [ 197.996381][ T29] audit: type=1400 audit(1733963427.595:45123): avc: denied { open } for pid=11001 comm="syz.5.2062" path="/sys/power/resume" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 198.067701][T11007] netlink: 'syz.0.2065': attribute type 10 has an invalid length. [ 198.081964][T11008] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 198.088651][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 198.180894][T11010] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 198.189312][T11010] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 198.289095][T11017] loop5: detected capacity change from 0 to 764 [ 198.641163][T11026] bpf_get_probe_write_proto: 5 callbacks suppressed [ 198.641179][T11026] syz.5.2070[11026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.649463][T11026] syz.5.2070[11026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.661494][T11026] syz.5.2070[11026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.704542][T11031] loop3: detected capacity change from 0 to 256 [ 198.743437][T11034] netlink: 'syz.5.2073': attribute type 10 has an invalid length. [ 198.765618][T11031] FAT-fs (loop3): Directory bread(block 64) failed [ 198.773857][T11031] FAT-fs (loop3): Directory bread(block 65) failed [ 198.781760][T11031] FAT-fs (loop3): Directory bread(block 66) failed [ 198.788704][T11031] FAT-fs (loop3): Directory bread(block 67) failed [ 198.795883][T11031] FAT-fs (loop3): Directory bread(block 68) failed [ 198.802983][T11031] FAT-fs (loop3): Directory bread(block 69) failed [ 198.809698][T11031] FAT-fs (loop3): Directory bread(block 70) failed [ 198.816918][T11031] FAT-fs (loop3): Directory bread(block 71) failed [ 198.823701][T11031] FAT-fs (loop3): Directory bread(block 72) failed [ 198.830973][T11031] FAT-fs (loop3): Directory bread(block 73) failed [ 198.929332][T11040] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 198.966918][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 198.989743][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2075'. [ 199.007233][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.028749][T11042] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 199.035937][T11045] x_tables: duplicate underflow at hook 3 [ 199.061230][T11042] bond0: (slave sit0): Error -95 calling set_mac_address [ 199.618114][T11054] delete_channel: no stack [ 199.865696][T11102] loop5: detected capacity change from 0 to 2048 [ 199.927333][T11102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.029002][T11116] x_tables: duplicate underflow at hook 3 [ 200.059063][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.108112][T11122] program syz.1.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.125409][T11125] xt_hashlimit: max too large, truncated to 1048576 [ 200.133018][T11124] loop5: detected capacity change from 0 to 764 [ 200.326846][T11141] loop5: detected capacity change from 0 to 512 [ 200.367094][T11141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.400557][T11141] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.489791][T11148] x_tables: duplicate underflow at hook 3 [ 200.561072][T11152] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 200.727568][T11157] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 200.734199][T11157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.741630][T11157] vhci_hcd vhci_hcd.0: Device attached [ 200.831170][T11158] vhci_hcd: connection closed [ 200.831521][ T50] vhci_hcd: stop threads [ 200.840648][ T50] vhci_hcd: release socket [ 200.845254][ T50] vhci_hcd: disconnect device [ 200.850872][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.910812][T11164] loop5: detected capacity change from 0 to 512 [ 200.937937][T11164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.947746][T11168] loop3: detected capacity change from 0 to 764 [ 200.957819][T11164] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.979786][T11164] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2104'. [ 201.017427][T11164] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2104'. [ 201.070044][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.140614][T11178] loop5: detected capacity change from 0 to 512 [ 201.164198][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 201.173101][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 201.191723][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 201.192354][T11178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.236617][T11178] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.281815][T11188] loop0: detected capacity change from 0 to 2048 [ 201.307242][T11188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.317855][T11178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11178 comm=syz.5.2109 [ 201.331994][T11178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11178 comm=syz.5.2109 [ 201.359406][T11192] No such timeout policy "syz1" [ 201.375958][T11188] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.391517][T11188] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 201.404058][T11188] EXT4-fs (loop0): This should not happen!! Data will be lost [ 201.404058][T11188] [ 201.413777][T11188] EXT4-fs (loop0): Total free blocks count 0 [ 201.419887][T11188] EXT4-fs (loop0): Free/Dirty block details [ 201.426029][T11188] EXT4-fs (loop0): free_blocks=2415919104 [ 201.431791][T11188] EXT4-fs (loop0): dirty_blocks=16 [ 201.437017][T11188] EXT4-fs (loop0): Block reservation details [ 201.442995][T11188] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 201.464669][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.484214][T11200] syz.2.2117[11200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.484269][T11200] syz.2.2117[11200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.496448][T11200] syz.2.2117[11200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.536102][T11202] loop5: detected capacity change from 0 to 512 [ 201.551864][T11204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11204 comm=syz.2.2118 [ 201.604992][T11202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.614589][T11208] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2119'. [ 201.637450][T11202] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.647132][T11208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2119'. [ 201.726712][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.879899][T11217] loop5: detected capacity change from 0 to 512 [ 201.927723][T11217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.953361][T11217] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.959838][T11224] syzkaller1: entered promiscuous mode [ 201.966960][T11217] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.2123: corrupted inode contents [ 201.969059][T11224] syzkaller1: entered allmulticast mode [ 201.981638][T11217] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.2123: mark_inode_dirty error [ 201.997976][T11217] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.2123: corrupted inode contents [ 202.037794][T11217] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2123: mark_inode_dirty error [ 202.091903][T11230] EXT4-fs warning (device loop5): ext4_empty_dir:3105: inode #18: comm syz.5.2123: directory missing '.' [ 202.126219][T11210] delete_channel: no stack [ 202.145548][ T3398] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 202.217732][T11235] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 202.379701][T11242] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 202.399071][T11244] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11244 comm=syz.0.2131 [ 202.474579][T11244] loop0: detected capacity change from 0 to 8192 [ 202.514655][T11244] loop0: p2 p3 p4 [ 202.519742][T11244] loop0: p2 start 14935 is beyond EOD, truncated [ 202.526119][T11244] loop0: p3 size 196608 extends beyond EOD, truncated [ 202.537314][T11249] syz.2.2133[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.537435][T11249] syz.2.2133[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.550034][T11249] syz.2.2133[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.554151][T11244] loop0: p4 start 4026530307 is beyond EOD, truncated [ 202.641071][T11251] loop0: detected capacity change from 0 to 512 [ 202.665587][T11251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.724648][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.735329][T11251] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.797444][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 202.797457][ T29] audit: type=1326 audit(1733963432.595:45966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.0.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 202.872624][ T29] audit: type=1326 audit(1733963432.595:45967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.0.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 202.896397][ T29] audit: type=1326 audit(1733963432.595:45968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.0.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 202.920061][ T29] audit: type=1326 audit(1733963432.595:45969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.0.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 202.943713][ T29] audit: type=1326 audit(1733963432.595:45970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.0.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 202.967377][ T29] audit: type=1326 audit(1733963432.595:45971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.0.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2a3fa3ff19 code=0x7ffc0000 [ 202.990980][ T29] audit: type=1326 audit(1733963432.635:45972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.5.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 203.014820][ T29] audit: type=1326 audit(1733963432.635:45973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.5.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 203.038477][ T29] audit: type=1326 audit(1733963432.635:45974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.5.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 203.062111][ T29] audit: type=1326 audit(1733963432.635:45975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.5.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655e3ff19 code=0x7ffc0000 [ 203.195683][T11269] loop3: detected capacity change from 0 to 256 [ 203.221218][T11255] futex_wake_op: syz.2.2135 tries to shift op by -1; fix this program [ 203.240800][T11269] FAT-fs (loop3): Directory bread(block 64) failed [ 203.252548][T11269] FAT-fs (loop3): Directory bread(block 65) failed [ 203.274093][T11269] FAT-fs (loop3): Directory bread(block 66) failed [ 203.280686][T11269] FAT-fs (loop3): Directory bread(block 67) failed [ 203.294297][T11269] FAT-fs (loop3): Directory bread(block 68) failed [ 203.300838][T11269] FAT-fs (loop3): Directory bread(block 69) failed [ 203.308867][T11269] FAT-fs (loop3): Directory bread(block 70) failed [ 203.317443][T11269] FAT-fs (loop3): Directory bread(block 71) failed [ 203.324971][T11269] FAT-fs (loop3): Directory bread(block 72) failed [ 203.331928][T11269] FAT-fs (loop3): Directory bread(block 73) failed [ 203.360549][T11269] bio_check_eod: 3424 callbacks suppressed [ 203.360566][T11269] syz.3.2139: attempt to access beyond end of device [ 203.360566][T11269] loop3: rw=2049, sector=1296, nr_sectors = 4 limit=256 [ 203.438958][ T28] kworker/u8:1: attempt to access beyond end of device [ 203.438958][ T28] loop3: rw=1, sector=1224, nr_sectors = 72 limit=256 [ 203.482137][T11278] loop3: detected capacity change from 0 to 512 [ 203.509535][T11278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.531830][T11278] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.549802][T11278] __nla_validate_parse: 8 callbacks suppressed [ 203.549850][T11278] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2143'. [ 203.577371][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.599933][T11278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2143'. [ 203.617517][T11288] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 203.624126][T11288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.631667][T11288] vhci_hcd vhci_hcd.0: Device attached [ 203.642959][T11289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11289 comm=syz.0.2145 [ 203.689918][T11289] loop0: detected capacity change from 0 to 8192 [ 203.707128][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.724340][T11290] vhci_hcd: connection closed [ 203.724467][ T11] vhci_hcd: stop threads [ 203.733452][ T11] vhci_hcd: release socket [ 203.737949][ T11] vhci_hcd: disconnect device [ 203.744074][T11289] loop0: p2 p3 p4 [ 203.747927][T11289] loop0: p2 start 14935 is beyond EOD, truncated [ 203.751127][T11296] loop3: detected capacity change from 0 to 2048 [ 203.754287][T11289] loop0: p3 size 196608 extends beyond EOD, truncated [ 203.768580][T11289] loop0: p4 start 4026530307 is beyond EOD, truncated [ 203.777098][T11296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.815721][T11296] syz.3.2147[11296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.815828][T11296] syz.3.2147[11296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.829540][T11296] syz.3.2147[11296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.856007][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 203.902367][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.551920][T11319] loop5: detected capacity change from 0 to 512 [ 204.565637][T11319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.583497][T11319] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.598718][T11319] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2157'. [ 204.611324][T11319] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2157'. [ 204.646990][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.663617][T11326] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2158'. [ 204.709114][T11329] loop5: detected capacity change from 0 to 2048 [ 204.766110][T11329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.802514][T11329] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.858081][T11329] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 204.870688][T11329] EXT4-fs (loop5): This should not happen!! Data will be lost [ 204.870688][T11329] [ 204.880424][T11329] EXT4-fs (loop5): Total free blocks count 0 [ 204.886428][T11329] EXT4-fs (loop5): Free/Dirty block details [ 204.892321][T11329] EXT4-fs (loop5): free_blocks=2415919104 [ 204.898137][T11329] EXT4-fs (loop5): dirty_blocks=32 [ 204.903259][T11329] EXT4-fs (loop5): Block reservation details [ 204.909248][T11329] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 204.985665][T11340] rdma_op ffff888102209980 conn xmit_rdma 0000000000000000 [ 205.075301][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 205.084672][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 205.247764][T11342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.258854][T11342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.463058][T11356] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 205.469715][T11356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.477189][T11356] vhci_hcd vhci_hcd.0: Device attached [ 205.533000][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 205.559970][T11357] vhci_hcd: connection closed [ 205.564498][ T11] vhci_hcd: stop threads [ 205.573457][ T11] vhci_hcd: release socket [ 205.577928][ T11] vhci_hcd: disconnect device [ 205.710738][T11365] xt_cluster: node mask cannot exceed total number of nodes [ 205.725453][T11365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.734578][T11365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.797267][T11368] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2169'. [ 205.807690][T11368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2169'. [ 205.853416][T11372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11372 comm=syz.2.2171 [ 205.866792][T11372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11372 comm=syz.2.2171 [ 206.055589][T11380] tmpfs: Unknown parameter 'mp' [ 206.143337][T11382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 206.149963][T11382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 206.157523][T11382] vhci_hcd vhci_hcd.0: Device attached [ 206.249242][T11383] vhci_hcd: connection closed [ 206.249632][ T11] vhci_hcd: stop threads [ 206.258787][ T11] vhci_hcd: release socket [ 206.263252][ T11] vhci_hcd: disconnect device [ 206.494403][T11394] loop5: detected capacity change from 0 to 1024 [ 206.507120][T11394] EXT4-fs: Ignoring removed orlov option [ 206.512880][T11394] EXT4-fs: Ignoring removed orlov option [ 206.521039][T11394] EXT4-fs: Ignoring removed bh option [ 206.541179][T11394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.549652][T11396] ebtables: ebtables: counters copy to user failed while replacing table [ 206.597630][T11396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2178'. [ 206.609551][T11396] IPVS: Error joining to the multicast group [ 206.809981][T11410] loop3: detected capacity change from 0 to 1024 [ 206.832226][T11412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11412 comm=syz.2.2182 [ 206.835670][T11410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.954889][T11420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=11420 comm=syz.2.2184 [ 206.994937][T11422] vlan1: entered promiscuous mode [ 207.310046][T11421] vlan1: left promiscuous mode [ 207.749071][ T9809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.773215][T11436] futex_wake_op: syz.1.2188 tries to shift op by -1; fix this program [ 207.783650][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.816772][ T29] kauditd_printk_skb: 1475 callbacks suppressed [ 207.816786][ T29] audit: type=1400 audit(1733963437.615:47451): avc: denied { write } for pid=11435 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.831614][T11438] loop5: detected capacity change from 0 to 8192 [ 207.850966][ T29] audit: type=1400 audit(1733963437.645:47452): avc: denied { mounton } for pid=11437 comm="syz.5.2189" path="/86/file2" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.864974][T11438] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.878421][ T29] audit: type=1400 audit(1733963437.665:47453): avc: denied { create } for pid=11441 comm="syz.3.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.914197][ T29] audit: type=1400 audit(1733963437.705:47454): avc: denied { mount } for pid=11437 comm="syz.5.2189" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 207.936321][ T29] audit: type=1326 audit(1733963437.705:47455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 207.959966][ T29] audit: type=1326 audit(1733963437.705:47456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 207.983641][ T29] audit: type=1326 audit(1733963437.705:47457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 208.007325][ T29] audit: type=1326 audit(1733963437.705:47458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 208.030961][ T29] audit: type=1326 audit(1733963437.705:47459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 208.056625][ T29] audit: type=1326 audit(1733963437.705:47460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f532cf6ff19 code=0x7ffc0000 [ 208.191797][T11447] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 208.198550][T11447] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.206024][T11447] vhci_hcd vhci_hcd.0: Device attached [ 208.293890][T11449] vhci_hcd: connection closed [ 208.294588][ T28] vhci_hcd: stop threads [ 208.303549][ T28] vhci_hcd: release socket [ 208.308073][ T28] vhci_hcd: disconnect device [ 208.486784][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.496245][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.767317][T11466] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 208.779729][T11466] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 208.788050][T11466] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 208.873656][T11477] tmpfs: Unknown parameter 'nr_ino' [ 208.905342][T11479] __nla_validate_parse: 2 callbacks suppressed [ 208.905356][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 208.923668][T11481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11481 comm=syz.1.2200 [ 209.012498][T11487] loop3: detected capacity change from 0 to 512 [ 209.021728][T11487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.035124][T11487] EXT4-fs (loop3): 1 truncate cleaned up [ 209.038060][T11486] IPVS: length: 4096 != 8 [ 209.041197][T11487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.106245][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2201'. [ 209.113694][T11493] bond0: entered promiscuous mode [ 209.115339][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2201'. [ 209.120293][T11493] bond0: entered allmulticast mode [ 209.134914][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.145993][T11493] bond0 (unregistering): Released all slaves [ 209.176045][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.267418][T11510] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 209.269421][T11516] blktrace: Concurrent blktraces are not allowed on loop3 [ 209.325799][T11519] 9pnet_fd: Insufficient options for proto=fd [ 209.350914][T11521] loop3: detected capacity change from 0 to 512 [ 209.490044][T11536] ebtables: ebtables: counters copy to user failed while replacing table [ 209.517386][T11536] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2218'. [ 209.528873][T11536] IPVS: Error joining to the multicast group [ 209.556205][T11544] veth0_to_team: entered promiscuous mode [ 209.561966][T11544] veth0_to_team: entered allmulticast mode [ 209.595090][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2217'. [ 209.626904][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'. [ 209.637358][T11546] rdma_rxe: rxe_newlink: failed to add lo [ 209.933504][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2220'. [ 209.942689][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 210.048420][ T3376] IPVS: starting estimator thread 0... [ 210.106898][T11559] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 210.113522][T11559] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.120942][T11559] vhci_hcd vhci_hcd.0: Device attached [ 210.210799][T11560] vhci_hcd: connection closed [ 210.212787][ T57] vhci_hcd: stop threads [ 210.221787][ T57] vhci_hcd: release socket [ 210.226321][ T57] vhci_hcd: disconnect device [ 210.231055][T11554] IPVS: using max 2832 ests per chain, 141600 per kthread [ 210.373129][T11571] bond1: entered promiscuous mode [ 210.378510][T11571] bond1: entered allmulticast mode [ 210.384392][T11571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.409778][T11571] bond1 (unregistering): Released all slaves [ 210.432906][T11582] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 210.482470][T11585] siw: device registration error -23 [ 210.556052][T11585] netlink: 'syz.3.2230': attribute type 3 has an invalid length. [ 210.580189][T11597] loop3: detected capacity change from 0 to 512 [ 210.596654][T11597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.609317][T11597] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.624866][T11597] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2233'. [ 210.635779][T11597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2233'. [ 210.654931][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.761496][T11607] futex_wake_op: syz.5.2235 tries to shift op by -1; fix this program [ 211.366371][T11625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 211.372986][T11625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.380477][T11625] vhci_hcd vhci_hcd.0: Device attached [ 211.473153][T11627] vhci_hcd: connection closed [ 211.474427][ T50] vhci_hcd: stop threads [ 211.483423][ T50] vhci_hcd: release socket [ 211.487914][ T50] vhci_hcd: disconnect device [ 211.545749][T11638] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 211.549606][T11636] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 211.552391][T11638] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.566493][T11638] vhci_hcd vhci_hcd.0: Device attached [ 211.658395][T11642] vhci_hcd: connection closed [ 211.659390][ T28] vhci_hcd: stop threads [ 211.668518][ T28] vhci_hcd: release socket [ 211.672925][ T28] vhci_hcd: disconnect device [ 211.737547][T11652] bond1: entered promiscuous mode [ 211.742616][T11652] bond1: entered allmulticast mode [ 211.748074][T11652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.765717][T11652] bond1 (unregistering): Released all slaves [ 211.947367][T11662] lo speed is unknown, defaulting to 1000 [ 212.008808][T11664] lo speed is unknown, defaulting to 1000 [ 212.016207][T11662] lo speed is unknown, defaulting to 1000 [ 212.022484][T11662] lo speed is unknown, defaulting to 1000 [ 212.047380][T11667] loop3: detected capacity change from 0 to 2048 [ 212.118837][T11667] loop3: p1 < > p3 < > p4 < > [ 212.123627][T11667] loop3: partition table partially beyond EOD, truncated [ 212.147664][T11664] lo speed is unknown, defaulting to 1000 [ 212.153782][T11664] lo speed is unknown, defaulting to 1000 [ 212.232767][T11667] loop3: p3 start 4284289 is beyond EOD, truncated [ 212.280445][ T2998] loop3: p1 < > p3 < > p4 < > [ 212.285390][ T2998] loop3: partition table partially beyond EOD, truncated [ 212.325690][ T2998] loop3: p3 start 4284289 is beyond EOD, truncated [ 212.495487][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 212.507415][ T3665] udevd[3665]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 212.585210][T11685] futex_wake_op: syz.3.2259 tries to shift op by -1; fix this program [ 213.194338][ T29] kauditd_printk_skb: 1575 callbacks suppressed [ 213.194352][ T29] audit: type=1400 audit(1733963442.995:49036): avc: denied { recv } for pid=57 comm="kworker/u8:4" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 213.226574][ T29] audit: type=1400 audit(1733963442.995:49037): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 213.251797][ T29] audit: type=1400 audit(1733963443.025:49038): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 12 00:30:43 [ 213.274631][ T29] audit: type=1400 audit(1733963443.075:49039): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.w[ 213.298595][ T29] audit: type=1400 audit(1733963443.095:49040): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 2[ 213.321383][ T29] audit: type=1400 audit(1733963443.095:49041): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 13.194338][ T2[ 213.344767][ T29] audit: type=1400 audit(1733963443.105:49042): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9] kauditd_print[ 213.368182][ T29] audit: type=1400 audit(1733963443.115:49043): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 k_skb: 1575 call[ 213.392081][ T29] audit: type=1400 audit(1733963443.195:49044): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 backs suppressed[ 213.415673][ T29] audit: type=1400 audit(1733963443.195:49045): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.194352][ T29] audit: type=1400 audit(1733963442.995:49036): avc: denied { recv } for pid=57 comm="kworker/u8:4" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tc Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.226574][ T29] audit: type=1400 audit(1733963442.995:49037): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:s[ 213.483478][T11702] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 213.490680][T11702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) ysadm_r:sysadm_t[ 213.498358][T11702] vhci_hcd vhci_hcd.0: Device attached tcontex Dec 12 00:30:43 syzkal[ 213.506506][T11703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 213.514219][T11703] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) ler kern.notice [ 213.521898][T11703] vhci_hcd vhci_hcd.0: Device attached kernel: [ 213.251797][ T29] audit: type=1400 [ 213.531915][T11705] vhci_hcd: connection closed audit(1733963443[ 213.532206][ T3398] vhci_hcd: stop threads .025:49038): avc[ 213.542947][ T3398] vhci_hcd: release socket : denied { rea[ 213.542958][ T3398] vhci_hcd: disconnect device d } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 [ 213.557091][T11707] vhci_hcd: connection closed scontext=system_[ 213.559266][ T3398] vhci_hcd: stop threads u:system_r:syslo[ 213.570754][ T3398] vhci_hcd: release socket gd_t tcontext=sy[ 213.576573][ T3398] vhci_hcd: disconnect device stem_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.274631][ T29] audit: type=1400 audit(1733963443.075:49039): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.298595][ T29] audit: type=1400 audit(1733963443.095:49040): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.321383][ T29] audit: type=1400 audit(1733963443.095:49041): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.344767][ T29] audit: type=1400 audit(1733963443.105:49042): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.368182][ T29] audit: type=1400 audit(1733963443.115:49043): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.392081][ T29] audit: type=1400 audit(1733963443.195:49044): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.notice kernel: [ 213.415673][ T29] audit: type=1400 audit(1733963443.195:49045): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.483478][T11702] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.490680][T11702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.498358][T11702] vhci_hcd vhci_hcd.0: Device attached Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.506506][T11703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.514219][T11703] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.521898][T11703] vhci_hcd vhci_hcd.0: Device attached Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.531915][T11705] vhci_hcd: connection closed Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.532206][ T3398] vhci_hcd: stop threads Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.542947][ T3398] vhci_hcd: release socket Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.542958][ T3398] vhci_hcd: disconnect device Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.557091][T11707] vhci_hcd: connection closed Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.559266][ T3398] vhci_hcd: stop threads Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.570754][ T3398] vhci_hcd: release socket Dec 12 00:30:43 syzkaller kern.info kernel: [ 213.576573][ T3398] vhci_hcd: disconnect device [ 219.264571][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 219.264586][ T29] audit: type=1400 audit(1733963449.065:49239): avc: denied { recv } for pid=3398 comm="kworker/u8:7" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 219.296734][ T29] audit: type=1400 audit(1733963449.095:49240): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 12 00:30:49 [ 219.319224][ T29] audit: type=1400 audit(1733963449.115:49241): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.w[ 219.342915][ T29] audit: type=1400 audit(1733963449.135:49242): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 2[ 219.366253][ T29] audit: type=1400 audit(1733963449.165:49243): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 19.264571][ T2[ 219.389692][ T29] audit: type=1400 audit(1733963449.185:49244): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9] kauditd_print[ 219.413328][ T29] audit: type=1400 audit(1733963449.215:49245): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 k_skb: 193 callb[ 219.436278][ T29] audit: type=1400 audit(1733963449.215:49246): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 acks suppressed[ 219.459820][ T29] audit: type=1400 audit(1733963449.255:49247): avc: denied { recv } for pid=2980 comm="syslogd" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 Dec 12 00:30:49[ 219.486201][ T29] audit: type=1400 audit(1733963449.255:49248): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.notice kernel: [ 219.264586][ T29] audit: type=1400 audit(1733963449.065:49239): avc: denied { recv } for pid=3398 comm="kworker/u8:7" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.296734][ T29] audit: type=1400 audit(1733963449.095:49240): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.319224][ T29] audit: type=1400 audit(1733963449.115:49241): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.342915][ T29] audit: type=1400 audit(1733963449.135:49242): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.366253][ T29] audit: type=1400 audit(1733963449.165:49243): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.389692][ T29] audit: type=1400 audit(1733963449.185:49244): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.413328][ T29] audit: type=1400 audit(1733963449.215:49245): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.436278][ T29] audit: type=1400 audit(1733963449.215:49246): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.459820][ T29] audit: type=1400 audit(1733963449.255:49247): avc: denied { recv } for pid=2980 comm="syslogd" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcont Dec 12 00:30:49 syzkaller kern.notice kernel: [ 219.486201][ T29] audit: type=1400 audit(1733963449.255:49248): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass [ 226.225531][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 226.225542][ T29] audit: type=1400 audit(1733963456.025:49252): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 Dec 12 00:30:56 [ 226.257368][ T29] audit: type=1400 audit(1733963456.055:49253): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.w[ 226.280622][ T29] audit: type=1400 audit(1733963456.055:49254): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 2[ 226.304242][ T29] audit: type=1400 audit(1733963456.105:49255): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 26.225531][ T2[ 226.328214][ T29] audit: type=1400 audit(1733963456.125:49256): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9] kauditd_print[ 226.352214][ T29] audit: type=1400 audit(1733963456.155:49257): avc: denied { recv } for pid=28 comm="kworker/u8:1" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 k_skb: 3 callbac[ 226.378180][ T29] audit: type=1400 audit(1733963456.155:49258): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ks suppressed D[ 226.401962][ T29] audit: type=1400 audit(1733963456.155:49259): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ec 12 00:30:56 s[ 226.425580][ T29] audit: type=1400 audit(1733963456.195:49260): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 yzkaller kern.no[ 226.449528][ T29] audit: type=1400 audit(1733963456.245:49261): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 tice kernel: [ 226.225542][ T29] audit: type=1400 audit(1733963456.025:49252): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tconte Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.257368][ T29] audit: type=1400 audit(1733963456.055:49253): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.280622][ T29] audit: type=1400 audit(1733963456.055:49254): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.304242][ T29] audit: type=1400 audit(1733963456.105:49255): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.328214][ T29] audit: type=1400 audit(1733963456.125:49256): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.352214][ T29] audit: type=1400 audit(1733963456.155:49257): avc: denied { recv } for pid=28 comm="kworker/u8:1" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tc Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.378180][ T29] audit: type=1400 audit(1733963456.155:49258): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.401962][ T29] audit: type=1400 audit(1733963456.155:49259): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.425580][ T29] audit: type=1400 audit(1733963456.195:49260): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:30:56 syzkaller kern.notice kernel: [ 226.449528][ T29] audit: type=1400 audit(1733963456.245:49261): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass [ 237.104485][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 237.104497][ T29] audit: type=1400 audit(1733963466.905:49265): avc: denied { egress } for pid=3376 comm="kworker/1:4" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 237.134493][ T29] audit: type=1400 audit(1733963466.935:49266): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 12 00:31:06 [ 237.157364][ T29] audit: type=1400 audit(1733963466.955:49267): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.w[ 237.181133][ T29] audit: type=1400 audit(1733963466.975:49268): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 2[ 237.204511][ T29] audit: type=1400 audit(1733963467.005:49269): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 37.104485][ T2[ 237.228017][ T29] audit: type=1400 audit(1733963467.025:49270): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9] kauditd_print[ 237.250913][ T29] audit: type=1400 audit(1733963467.025:49271): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 k_skb: 3 callbac[ 237.275098][ T29] audit: type=1400 audit(1733963467.075:49272): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ks suppressed D[ 237.297826][ T29] audit: type=1400 audit(1733963467.075:49273): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ec 12 00:31:06 s[ 237.321807][ T29] audit: type=1400 audit(1733963467.115:49274): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 yzkaller kern.notice kernel: [ 237.104497][ T29] audit: type=1400 audit(1733963466.905:49265): avc: denied { egress } for pid=3376 comm="kworker/1:4" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:o Dec 12 00:31:06 syzkaller kern.notice kernel: [ 237.134493][ T29] audit: type=1400 audit(1733963466.935:49266): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:06 syzkaller kern.notice kernel: [ 237.157364][ T29] audit: type=1400 audit(1733963466.955:49267): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.181133][ T29] audit: type=1400 audit(1733963466.975:49268): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.204511][ T29] audit: type=1400 audit(1733963467.005:49269): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.228017][ T29] audit: type=1400 audit(1733963467.025:49270): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.250913][ T29] audit: type=1400 audit(1733963467.025:49271): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.275098][ T29] audit: type=1400 audit(1733963467.075:49272): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.297826][ T29] audit: type=1400 audit(1733963467.075:49273): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:07 syzkaller kern.notice kernel: [ 237.321807][ T29] audit: type=1400 audit(1733963467.115:49274): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass [ 257.974813][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 257.974827][ T29] audit: type=1400 audit(1733963487.775:49280): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 12 00:31:27 [ 258.003357][ T29] audit: type=1400 audit(1733963487.805:49281): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 258.027100][ T29] audit: type=1400 audit(1733963487.825:49282): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[3036[ 258.050937][ T29] audit: type=1400 audit(1733963487.825:49283): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ]: ps_sendpsmmsg[ 258.074898][ T29] audit: type=1400 audit(1733963487.875:49284): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 : Connection ref[ 258.098118][ T29] audit: type=1400 audit(1733963487.895:49285): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 used Dec 12 00:[ 258.121358][ T29] audit: type=1400 audit(1733963487.895:49286): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 31:27 syzkaller [ 258.145085][ T29] audit: type=1400 audit(1733963487.945:49287): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 daemon.err dhcpc[ 258.168565][ T29] audit: type=1400 audit(1733963487.965:49288): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 d[3036]: ps_root[ 258.191945][ T29] audit: type=1400 audit(1733963487.995:49289): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 _recvmsgcb: failed to send message to pid 10951: Connection refused Dec 12 00:31:27 syzkaller kern.warn kernel: [ 257.974813][ T29] kauditd_printk_skb: 5 callbacks suppressed Dec 12 00:31:27 syzkaller kern.notice kernel: [ 257.974827][ T29] audit: type=1400 audit(1733963487.775:49280): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.003357][ T29] audit: type=1400 audit(1733963487.805:49281): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.027100][ T29] audit: type=1400 audit(1733963487.825:49282): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.050937][ T29] audit: type=1400 audit(1733963487.825:49283): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.074898][ T29] audit: type=1400 audit(1733963487.875:49284): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.098118][ T29] audit: type=1400 audit(1733963487.895:49285): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.121358][ T29] audit: type=1400 audit(1733963487.895:49286): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.145085][ T29] audit: type=1400 audit(1733963487.945:49287): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:27 syzkaller kern.notice kernel: [ 258.168565][ T29] audit: type=1400 audit(1733963487.965:49288): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:28 syzkaller kern.notice kernel: [ 258.191945][ T29] audit: type=1400 audit(1733963487.995:49289): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:32 syzkaller daemon.err dhcpcd[3036]: ps_sendpsmmsg: Connection refused Dec 12 00:31:32 syzkaller daemon.err dhcpcd[3036]: ps_root_recvmsgcb: failed to send message to pid 11032: Connection refused [ 267.825216][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 267.825228][ T29] audit: type=1400 audit(1733963497.625:49295): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 Dec 12 00:31:37 [ 267.856579][ T29] audit: type=1400 audit(1733963497.655:49296): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.w[ 267.880792][ T29] audit: type=1400 audit(1733963497.685:49297): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 2[ 267.904172][ T29] audit: type=1400 audit(1733963497.695:49298): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 67.825216][ T2[ 267.927177][ T29] audit: type=1400 audit(1733963497.705:49299): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9] kauditd_print[ 267.950714][ T29] audit: type=1400 audit(1733963497.755:49300): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 k_skb: 5 callbac[ 267.974353][ T29] audit: type=1400 audit(1733963497.775:49301): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ks suppressed D[ 267.997714][ T29] audit: type=1400 audit(1733963497.795:49302): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ec 12 00:31:37 s[ 268.021840][ T29] audit: type=1400 audit(1733963497.815:49303): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 yzkaller kern.no[ 268.044463][ T29] audit: type=1400 audit(1733963497.815:49304): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 tice kernel: [ 267.825228][ T29] audit: type=1400 audit(1733963497.625:49295): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.140 dest=49490 netif=eth0 scontext=root:sysadm_r:sysadm_t tconte Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.856579][ T29] audit: type=1400 audit(1733963497.655:49296): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.880792][ T29] audit: type=1400 audit(1733963497.685:49297): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.904172][ T29] audit: type=1400 audit(1733963497.695:49298): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.927177][ T29] audit: type=1400 audit(1733963497.705:49299): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.950714][ T29] audit: type=1400 audit(1733963497.755:49300): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.974353][ T29] audit: type=1400 audit(1733963497.775:49301): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 267.997714][ T29] audit: type=1400 audit(1733963497.795:49302): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 268.021840][ T29] audit: type=1400 audit(1733963497.815:49303): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Dec 12 00:31:37 syzkaller kern.notice kernel: [ 268.044463][ T29] audit: type=1400 audit(1733963497.815:49304): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass [ 279.114177][ C0] ================================================================== [ 279.122296][ C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 279.130438][ C0] [ 279.132739][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 279.140084][ C0] __tmigr_cpu_activate+0x55/0x200 [ 279.145178][ C0] tmigr_cpu_activate+0x8a/0xc0 [ 279.150010][ C0] timer_clear_idle+0x28/0x100 [ 279.154754][ C0] tick_nohz_restart_sched_tick+0x22/0x110 [ 279.160549][ C0] tick_nohz_idle_exit+0xfe/0x1d0 [ 279.165558][ C0] do_idle+0x1eb/0x230 [ 279.169628][ C0] cpu_startup_entry+0x25/0x30 [ 279.174375][ C0] start_secondary+0x96/0xa0 [ 279.178940][ C0] common_startup_64+0x12c/0x137 [ 279.183858][ C0] [ 279.186155][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 279.193668][ C0] tmigr_handle_remote+0x26e/0x940 [ 279.198773][ C0] run_timer_softirq+0x5f/0x70 [ 279.203513][ C0] handle_softirqs+0xbf/0x280 [ 279.208173][ C0] __irq_exit_rcu+0x3a/0xc0 [ 279.212656][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 279.218265][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.224234][ C0] acpi_safe_halt+0x21/0x30 [ 279.228722][ C0] acpi_idle_do_entry+0x1d/0x30 [ 279.233547][ C0] acpi_idle_enter+0x96/0xb0 [ 279.238109][ C0] cpuidle_enter_state+0xc5/0x260 [ 279.243127][ C0] cpuidle_enter+0x40/0x70 [ 279.247521][ C0] do_idle+0x192/0x230 [ 279.251574][ C0] cpu_startup_entry+0x25/0x30 [ 279.256329][ C0] rest_init+0xef/0xf0 [ 279.260370][ C0] start_kernel+0x586/0x5e0 [ 279.264851][ C0] x86_64_start_reservations+0x2a/0x30 [ 279.270291][ C0] x86_64_start_kernel+0x9a/0xa0 [ 279.275211][ C0] common_startup_64+0x12c/0x137 [ 279.280215][ C0] [ 279.282518][ C0] value changed: 0x00 -> 0x01 [ 279.287164][ C0] [ 279.289461][ C0] Reported by Kernel Concurrency Sanitizer on: [ 279.295596][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 279.305905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.315943][ C0] ================================================================== [ 279.324508][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 279.324529][ T29] audit: type=1400 audit(1733963509.125:49308): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 12 00:31:49 [ 279.353085][ T29] audit: type=1400 audit(1733963509.155:49309): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.e[ 279.376913][ T29] audit: type=1400 audit(1733963509.155:49310): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 rr kernel: [ 27[ 279.400519][ T29] audit: type=1400 audit(1733963509.175:49311): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9.114177][ C0[ 279.400548][ T29] audit: type=1400 audit(1733963509.175:49312): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ] ==============[ 279.447723][ T29] audit: type=1400 audit(1733963509.245:49313): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ================[ 279.470758][ T29] audit: type=1400 audit(1733963509.245:49314): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ================[ 279.494490][ T29] audit: type=1400 audit(1733963509.295:49315): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ================[ 279.517628][ T29] audit: type=1400 audit(1733963509.295:49316): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ==== Dec 12 00:[ 279.541276][ T29] audit: type=1400 audit(1733963509.335:49317): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 31:49 syzkaller kern.err kernel: [ 279.122296][ C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.130438][ C0] Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.132739][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.140084][ C0] __tmigr_cpu_activate+0x55/0x200 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.145178][ C0] tmigr_cpu_activate+0x8a/0xc0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.150010][ C0] timer_clear_idle+0x28/0x100 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.154754][ C0] tick_nohz_restart_sched_tick+0x22/0x110 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.160549][ C0] tick_nohz_idle_exit+0xfe/0x1d0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.165558][ C0] do_idle+0x1eb/0x230 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.169628][ C0] cpu_startup_entry+0x25/0x30 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.174375][ C0] start_secondary+0x96/0xa0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.178940][ C0] common_startup_64+0x12c/0x137 Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.183858][ C0] Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.186155][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.193668][ C0] tmigr_handle_remote+0x26e/0x940 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.198773][ C0] run_timer_softirq+0x5f/0x70 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.203513][ C0] handle_softirqs+0xbf/0x280 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.208173][ C0] __irq_exit_rcu+0x3a/0xc0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.212656][ C0] sysvec_apic_timer_interrupt+0x73/0x80 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.218265][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.224234][ C0] acpi_safe_halt+0x21/0x30 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.228722][ C0] acpi_idle_do_entry+0x1d/0x30 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.233547][ C0] acpi_idle_enter+0x96/0xb0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.238109][ C0] cpuidle_enter_state+0xc5/0x260 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.243127][ C0] cpuidle_enter+0x40/0x70 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.247521][ C0] do_idle+0x192/0x230 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.251574][ C0] cpu_startup_entry+0x25/0x30 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.256329][ C0] rest_init+0xef/0xf0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.260370][ C0] start_kernel+0x586/0x5e0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.264851][ C0] x86_64_start_reservations+0x2a/0x30 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.270291][ C0] x86_64_start_kernel+0x9a/0xa0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.275211][ C0] common_startup_64+0x12c/0x137 Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.280215][ C0] Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.282518][ C0] value changed: 0x00 -> 0x01 Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.287164][ C0] Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.289461][ C0] Reported by Kernel Concurrency Sanitizer on: Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.295596][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.305905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Dec 12 00:31:49 syzkaller kern.err kernel: [ 279.315943][ C0] ================================================================== Dec 12 00:31:49 syzkaller kern.warn kernel: [ 279.324508][ T29] kauditd_printk_skb: 3 callbacks suppressed