last executing test programs: 26m45.936065346s ago: executing program 4 (id=74): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f00000003c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x80, 0x0}}], 0x1, 0x20040814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a3", 0x5b}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x81ff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r0}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x15, 0x1, 0x2, 0x2, 0x2, 0x63}, 0x20) sendmmsg$inet(r6, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e", 0x35c}], 0x1}}], 0x1, 0x4044084) io_setup(0x1, &(0x7f0000000740)) 26m45.720670487s ago: executing program 4 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(r4, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) pause() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") 26m45.479998461s ago: executing program 0 (id=79): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@auto_da_alloc}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x13}, &(0x7f0000000240)) timer_settime(r4, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) pause() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c756e695f786c6174653d312c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c757466383d302c756e695f786c6174653d302c0500695f786c6174653d312c696f636861727365743d6370313235352c757466383d302c646566636f6e7465010000006e636f6e66696e65645f752c00"], 0x46, 0x2d1, &(0x7f0000000740)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0xc17a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 26m44.242787223s ago: executing program 4 (id=81): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3d, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x7d9d, &(0x7f00000000c0)={0x0, 0x1b3e, 0x1, 0x2, 0x208}, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x4f1f, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a", @ANYRES16, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x150e, &(0x7f0000001580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0) 26m41.711507112s ago: executing program 4 (id=83): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3d, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x4f1f, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x556, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0) 26m41.705503463s ago: executing program 0 (id=84): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3d, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x7d9d, &(0x7f00000000c0)={0x0, 0x1b3e, 0x1, 0x2, 0x208}, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x4f1f, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a", @ANYRES16=r4, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x150e, &(0x7f0000001580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0) 26m37.959293892s ago: executing program 4 (id=87): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f00000003c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x80, 0x0}}], 0x1, 0x20040814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x4, 0xba, 0x0, 0xe}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a3", 0x5b}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x81ff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r0}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x15, 0x1, 0x2, 0x2, 0x2, 0x63}, 0x20) sendmmsg$inet(r6, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x35c}], 0x1}}], 0x1, 0x4044084) io_setup(0x1, &(0x7f0000000740)) 26m36.885611688s ago: executing program 0 (id=88): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001b00), 0x0, 0x20040814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d", 0x24}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a3", 0x5b}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x81ff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r0}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x15, 0x1, 0x2, 0x2, 0x2, 0x63}, 0x20) sendmmsg$inet(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e", 0x35c}], 0x1}}], 0x1, 0x4044084) io_setup(0x1, &(0x7f0000000740)) 26m36.594125176s ago: executing program 4 (id=92): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xc1) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3d, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x7d9d, &(0x7f00000000c0)={0x0, 0x1b3e, 0x1, 0x2, 0x208}, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x4f1f, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x556, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0) 26m36.421759963s ago: executing program 0 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000b40)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f00000007c0)=""/148, 0x94}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000006c0)}, {&(0x7f0000000940)=""/106, 0x6a}, {&(0x7f00000009c0)=""/88, 0x58}, {&(0x7f0000000740)=""/45, 0x2d}], 0xa, &(0x7f0000000b00)=""/48, 0x30}, 0x570}], 0x1, 0x2001, &(0x7f0000000b80)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0x10}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x58}}, 0x8840) 26m34.206685621s ago: executing program 0 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") fcntl$addseals(r1, 0x409, 0x2) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0x0, 0x3a) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x6, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26m31.167171001s ago: executing program 0 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) pause() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fsync(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 26m16.402032645s ago: executing program 32 (id=92): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xc1) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3d, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x7d9d, &(0x7f00000000c0)={0x0, 0x1b3e, 0x1, 0x2, 0x208}, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x4f1f, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x556, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0) 26m15.828437222s ago: executing program 33 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) pause() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fsync(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 10m0.518380295s ago: executing program 6 (id=3041): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) 9m59.598309656s ago: executing program 6 (id=3046): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000900)={[], [{@euid_gt}, {@flag='ro'}, {@euid_eq}, {@euid_eq}, {@fsname}, {@fowner_lt}, {@euid_gt}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb}, 0x94) io_uring_setup(0x400071c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0xd, 0x154}) socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r2 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 9m58.000689334s ago: executing program 6 (id=3049): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1e, 0x0, 0x4000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 9m55.972241574s ago: executing program 6 (id=3053): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x44008, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@subsystem='io'}], [{@audit}, {@uid_gt}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20400) umount2(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x1}) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000240)=0x1f, 0x4) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7, 0x9) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb}, 0x11000) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'caif0\x00', @broadcast}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 9m54.841822416s ago: executing program 6 (id=3058): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYBLOB='\b\x00\r'], 0x70}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) socket(0x28, 0x80004, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYBLOB="2c756e695f786c6174653d302c757466383d302c73c30372746e616d653d6d697865642c756e695f786c6174653d302c73686f72746e616d698ef6136e6e742c00e8bef82b1522fef32811a829c3b4fe48c83b4e41f3e4235086316fe928479bc9aace125b89c8059e98dd9019926adf033e7fb0f29df0f2d23785a31ba714d01914201ec38aafa316af1b3e33e7db4e5b98716114961b38a5e7"], 0x96, 0x2a9, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000240), 0x12) 9m54.716017498s ago: executing program 6 (id=3060): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000900)={[], [{@euid_gt}, {@flag='ro'}, {@euid_eq}, {@euid_eq}, {@fsname}, {@fowner_lt}, {@euid_gt}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb}, 0x94) io_uring_setup(0x400071c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0xd, 0x154}) socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r2 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 9m54.543441335s ago: executing program 34 (id=3060): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000900)={[], [{@euid_gt}, {@flag='ro'}, {@euid_eq}, {@euid_eq}, {@fsname}, {@fowner_lt}, {@euid_gt}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb}, 0x94) io_uring_setup(0x400071c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0xd, 0x154}) socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r2 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 6.597076619s ago: executing program 3 (id=5863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.706145547s ago: executing program 7 (id=5872): r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4a, 0x6, 0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) inotify_init() r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x5, 0x4}) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbbb, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x2000) time(0x0) 5.407698906s ago: executing program 2 (id=5877): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@fat=@uid}, {@numtail}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x33, 0x62, 0x65, 0x31, 0x33, 0x66], 0x2d, [0x0, 0x39, 0x62, 0x61], 0x2d, [0x33, 0x38, 0x39, 0x33], 0x2d, [0x38, 0x34, 0x36, 0x37], 0x2d, [0x52, 0x62, 0x62, 0x32, 0x64, 0x63, 0x34, 0x38]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) (async) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1a, 0x1, @tid=r0}, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.176825069s ago: executing program 1 (id=5879): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000000)='setgroups\x00') ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x33, 0x10, 0x11, 0x2, 0x7, 0x0, 0x1, 0x45, 0xffffffffffffffff}}) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r6, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r8, &(0x7f0000000240)=ANY=[], 0x40000) r9 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r9, 0x0, 0x0, 0x20022, 0x0) getrlimit(0x4, &(0x7f00000003c0)) recvfrom$unix(r9, &(0x7f0000000280)=""/253, 0xfd, 0x5b5f0d7fb119a04, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) 5.176457799s ago: executing program 2 (id=5880): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$inet6(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4.720511274s ago: executing program 7 (id=5882): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$packet(r0, &(0x7f0000000340)={0x11, 0xef, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) memfd_create(0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.682256768s ago: executing program 5 (id=5883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.681894968s ago: executing program 5 (id=5884): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) 4.681266308s ago: executing program 5 (id=5885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.547083551s ago: executing program 5 (id=5886): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) connect$packet(r0, &(0x7f0000000340)={0x11, 0xef, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.399943566s ago: executing program 1 (id=5887): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private2}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) 4.25408985s ago: executing program 3 (id=5865): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 4.164184609s ago: executing program 2 (id=5888): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0x0, 0x1000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xeec8, 0x7, 0xe0, 0x7}, {0x4, 0x1, 0x5, 0x6}]}, 0x10) open(0x0, 0x60840, 0x0) readlink(0x0, 0x0, 0x0) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0)) 3.860316419s ago: executing program 7 (id=5889): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000000040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r6, r8, 0x1, 0x0, @void}, 0x10) (fail_nth: 1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000280)='v', 0x1}], 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 3.756161319s ago: executing program 5 (id=5890): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f0100000000000000000009fa81020002000000090503020002e40000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003200000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000440)='./file1\x00', 0x100010, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0xff, 0x14fe, &(0x7f0000002ac0)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.556841569s ago: executing program 7 (id=5891): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.556193969s ago: executing program 1 (id=5892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab000000000000000032000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.511401603s ago: executing program 1 (id=5893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.337699421s ago: executing program 3 (id=5894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.380983955s ago: executing program 3 (id=5895): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) shutdown(r7, 0x1) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x20b}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.974027065s ago: executing program 2 (id=5896): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0xffd, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.892629273s ago: executing program 1 (id=5897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.778359625s ago: executing program 3 (id=5898): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000000)='setgroups\x00') ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x33, 0x10, 0x11, 0x2, 0x7, 0x0, 0x1, 0x45, 0xffffffffffffffff}}) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r5, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r7, &(0x7f0000000240)=ANY=[], 0x40000) r8 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x20022, 0x0) getrlimit(0x4, &(0x7f00000003c0)) 1.767023015s ago: executing program 2 (id=5899): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000600)=ANY=[], 0x1, 0x151e, &(0x7f0000007640)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000040018110040", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020008f8ffffff00850000000100"/64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r9 = fsopen(&(0x7f0000000340)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r8, r10, 0x1, 0x0, @void}, 0x10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0x4}, 0x1c) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000280)='v', 0x1}], 0x1) 1.587385623s ago: executing program 7 (id=5900): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$packet(r0, &(0x7f0000000340)={0x11, 0xef, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) memfd_create(0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 973.209574ms ago: executing program 1 (id=5901): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) setitimer(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000300)=0xb3, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x13, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r8, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) 865.359684ms ago: executing program 2 (id=5902): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 1) 864.656395ms ago: executing program 3 (id=5903): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private2}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) 19.174678ms ago: executing program 5 (id=5904): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 0s ago: executing program 7 (id=5905): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): m 0 to 512 [ 1199.786339][T12290] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1199.799148][T12290] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.574868][T12299] device syz_tun entered promiscuous mode [ 1200.581927][T12299] device syz_tun left promiscuous mode [ 1200.829023][T10133] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1200.918270][T12311] overlayfs: failed to clone upperpath [ 1201.020961][T10133] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1201.031600][T10133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.062394][T12315] device syz_tun entered promiscuous mode [ 1201.071550][T12315] device syz_tun left promiscuous mode [ 1201.193575][T10133] usb 8-1: config 0 descriptor?? [ 1201.641535][T10133] usb 8-1: Cannot set MAC address [ 1201.663541][T10133] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 1201.694065][T12332] device syz_tun entered promiscuous mode [ 1201.700888][T12332] device syz_tun left promiscuous mode [ 1201.740523][T10133] usb 8-1: USB disconnect, device number 13 [ 1203.013228][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1203.033026][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1203.358093][ T758] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1203.699655][T12355] bridge0: port 3(vlan2) entered blocking state [ 1203.706557][T12355] bridge0: port 3(vlan2) entered disabled state [ 1203.871767][ T758] usb 8-1: no configurations [ 1203.876471][ T758] usb 8-1: can't read configurations, error -22 [ 1204.049015][ T758] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1204.259414][ T758] usb 8-1: no configurations [ 1204.264751][ T758] usb 8-1: can't read configurations, error -22 [ 1204.282845][ T758] usb usb8-port1: attempt power cycle [ 1204.719020][ T758] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1204.815668][T12378] device syz_tun entered promiscuous mode [ 1204.825119][T12378] device syz_tun left promiscuous mode [ 1205.062150][ T758] usb 8-1: no configurations [ 1205.079667][ T758] usb 8-1: can't read configurations, error -22 [ 1205.239027][ T758] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1205.279752][ T758] usb 8-1: no configurations [ 1205.284520][ T758] usb 8-1: can't read configurations, error -22 [ 1205.297289][ T758] usb usb8-port1: unable to enumerate USB device [ 1206.483056][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1206.508163][T12421] device syz_tun entered promiscuous mode [ 1206.522657][T12421] device syz_tun left promiscuous mode [ 1207.098344][T12427] bridge0: port 3(vlan2) entered blocking state [ 1207.118683][T12427] bridge0: port 3(vlan2) entered disabled state [ 1207.140704][T12424] bridge0: port 3(vlan2) entered blocking state [ 1207.147464][T12424] bridge0: port 3(vlan2) entered disabled state [ 1209.828429][T12470] bridge0: port 3(vlan2) entered blocking state [ 1209.858016][T12470] bridge0: port 3(vlan2) entered disabled state [ 1211.391242][T12496] bridge0: port 3(vlan2) entered blocking state [ 1211.397553][T12496] bridge0: port 3(vlan2) entered disabled state [ 1211.494830][T12510] overlayfs: unrecognized mount option "verity=on" or missing value [ 1211.706992][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3505'. [ 1211.726546][T12523] device syz_tun entered promiscuous mode [ 1211.734835][T12523] device syz_tun left promiscuous mode [ 1212.709440][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3506'. [ 1212.754104][T12530] device syz_tun entered promiscuous mode [ 1212.765885][T12530] device syz_tun left promiscuous mode [ 1214.233149][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1215.235162][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3519'. [ 1215.264857][T12569] device syz_tun entered promiscuous mode [ 1215.274028][T12569] device syz_tun left promiscuous mode [ 1216.208466][T12591] loop7: detected capacity change from 0 to 1024 [ 1216.216396][T12591] EXT4-fs: Ignoring removed i_version option [ 1216.230135][T12591] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1216.253301][T12591] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1216.416461][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1216.446690][T12600] device syz_tun entered promiscuous mode [ 1216.455905][T12600] device syz_tun left promiscuous mode [ 1216.721082][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1216.847477][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1216.911724][T12607] device syz_tun entered promiscuous mode [ 1216.927305][T12607] device syz_tun left promiscuous mode [ 1217.316696][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3533'. [ 1217.328454][T12618] device syz_tun entered promiscuous mode [ 1217.362798][T12618] device syz_tun left promiscuous mode [ 1218.936981][ T4685] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1219.119580][ T4685] usb 8-1: no configurations [ 1219.124544][ T4685] usb 8-1: can't read configurations, error -22 [ 1219.279124][ T4685] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1219.460053][ T4685] usb 8-1: no configurations [ 1219.481020][ T4685] usb 8-1: can't read configurations, error -22 [ 1219.507208][ T4685] usb usb8-port1: attempt power cycle [ 1219.522089][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1219.542790][T12656] device syz_tun entered promiscuous mode [ 1219.551853][T12656] device syz_tun left promiscuous mode [ 1220.029158][ T4685] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1220.070583][ T4685] usb 8-1: no configurations [ 1220.075817][ T4685] usb 8-1: can't read configurations, error -22 [ 1220.229117][ T4685] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1220.259806][ T4685] usb 8-1: no configurations [ 1220.264662][ T4685] usb 8-1: can't read configurations, error -22 [ 1220.271309][ T4685] usb usb8-port1: unable to enumerate USB device [ 1221.989901][T12698] loop7: detected capacity change from 0 to 512 [ 1222.016267][T12698] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1222.025891][T12698] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.161102][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3565'. [ 1222.188570][T12709] device syz_tun entered promiscuous mode [ 1222.199544][T12709] device syz_tun left promiscuous mode [ 1222.492508][T10133] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1222.757285][T10133] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1222.767677][T10133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.779147][T10133] usb 8-1: config 0 descriptor?? [ 1223.269689][T10133] usb 8-1: Cannot set MAC address [ 1223.275114][T10133] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 1223.294007][T10133] usb 8-1: USB disconnect, device number 22 [ 1223.939226][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1223.980298][T12752] loop7: detected capacity change from 0 to 256 [ 1224.007864][T12752] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1224.113824][T12752] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1236.014097][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3594'. [ 1236.027871][T12796] loop7: detected capacity change from 0 to 256 [ 1236.113369][T12796] FAT-fs (loop7): Unrecognized mount option "ÿ0x0000000000000005" or missing value [ 1238.613537][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1238.645142][T12819] device syz_tun entered promiscuous mode [ 1238.883125][T12819] device syz_tun left promiscuous mode [ 1239.213293][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3604'. [ 1239.238244][T12835] device syz_tun entered promiscuous mode [ 1239.247826][T12835] device syz_tun left promiscuous mode [ 1239.816562][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1239.896987][T12848] device syz_tun entered promiscuous mode [ 1240.041791][T12848] device syz_tun left promiscuous mode [ 1240.146439][T12850] loop7: detected capacity change from 0 to 512 [ 1240.180651][T12850] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1240.191883][T12850] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1241.095446][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3612'. [ 1241.122775][T12862] device syz_tun entered promiscuous mode [ 1241.179186][T12862] device syz_tun left promiscuous mode [ 1241.222769][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1241.592368][T12864] device syz_tun entered promiscuous mode [ 1241.598906][T12864] device syz_tun left promiscuous mode [ 1241.600067][T12866] capability: warning: `syz.3.3614' uses deprecated v2 capabilities in a way that may be insecure [ 1241.759047][ T4685] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1241.939638][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3620'. [ 1241.960475][T12884] device syz_tun entered promiscuous mode [ 1241.968978][T12884] device syz_tun left promiscuous mode [ 1242.431112][ T4685] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1242.466478][ T4685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.554075][ T4685] usb 8-1: config 0 descriptor?? [ 1243.501062][ T4685] usb 8-1: Cannot set MAC address [ 1243.712914][ T4685] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 1243.722939][ T4685] usb 8-1: USB disconnect, device number 23 [ 1243.726110][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1245.409301][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1245.433669][T12930] device syz_tun entered promiscuous mode [ 1245.442434][T12930] device syz_tun left promiscuous mode [ 1245.786823][ T28] audit: type=1400 audit(1761082337.579:530): avc: denied { create } for pid=12935 comm="syz.1.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1247.071370][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'. [ 1247.084276][T12951] device syz_tun entered promiscuous mode [ 1247.131677][T12951] device syz_tun left promiscuous mode [ 1250.603397][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3650'. [ 1250.615588][T12978] device syz_tun entered promiscuous mode [ 1250.622182][T12978] device syz_tun left promiscuous mode [ 1252.994963][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3664'. [ 1253.019510][T13024] device syz_tun entered promiscuous mode [ 1253.032357][T13024] device syz_tun left promiscuous mode [ 1253.867111][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3666'. [ 1253.893069][T13032] device syz_tun entered promiscuous mode [ 1253.904278][T13032] device syz_tun left promiscuous mode [ 1254.257534][T13040] FAULT_INJECTION: forcing a failure. [ 1254.257534][T13040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.289091][T13040] CPU: 0 PID: 13040 Comm: syz.7.3669 Not tainted syzkaller #0 [ 1254.297225][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1254.307830][T13040] Call Trace: [ 1254.311338][T13040] [ 1254.314285][T13040] __dump_stack+0x21/0x24 [ 1254.318638][T13040] dump_stack_lvl+0xee/0x150 [ 1254.323265][T13040] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1254.328411][T13040] dump_stack+0x15/0x24 [ 1254.332592][T13040] should_fail_ex+0x3d4/0x520 [ 1254.337372][T13040] should_fail+0xb/0x10 [ 1254.341549][T13040] should_fail_usercopy+0x1a/0x20 [ 1254.346602][T13040] _copy_to_user+0x1e/0x90 [ 1254.351497][T13040] simple_read_from_buffer+0xe9/0x160 [ 1254.357074][T13040] proc_fail_nth_read+0x19a/0x210 [ 1254.362193][T13040] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1254.368009][T13040] ? security_file_permission+0x94/0xb0 [ 1254.374213][T13040] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1254.380114][T13040] vfs_read+0x26e/0x8c0 [ 1254.384296][T13040] ? __cfi_vfs_read+0x10/0x10 [ 1254.389124][T13040] ? __kasan_check_write+0x14/0x20 [ 1254.394328][T13040] ? mutex_lock+0x8d/0x1a0 [ 1254.398769][T13040] ? __cfi_mutex_lock+0x10/0x10 [ 1254.403632][T13040] ? __fdget_pos+0x2cd/0x380 [ 1254.408232][T13040] ? ksys_read+0x71/0x240 [ 1254.412669][T13040] ksys_read+0x140/0x240 [ 1254.417053][T13040] ? __cfi_ksys_read+0x10/0x10 [ 1254.421946][T13040] ? debug_smp_processor_id+0x17/0x20 [ 1254.427420][T13040] __x64_sys_read+0x7b/0x90 [ 1254.432569][T13040] x64_sys_call+0x2f/0x9a0 [ 1254.437296][T13040] do_syscall_64+0x4c/0xa0 [ 1254.441827][T13040] ? clear_bhb_loop+0x30/0x80 [ 1254.446531][T13040] ? clear_bhb_loop+0x30/0x80 [ 1254.451276][T13040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1254.457270][T13040] RIP: 0033:0x7f44bd18d9dc [ 1254.461702][T13040] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1254.481930][T13040] RSP: 002b:00007f44bdf54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1254.490355][T13040] RAX: ffffffffffffffda RBX: 00007f44bd3e6090 RCX: 00007f44bd18d9dc [ 1254.498518][T13040] RDX: 000000000000000f RSI: 00007f44bdf540a0 RDI: 0000000000000005 [ 1254.506510][T13040] RBP: 00007f44bdf54090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.514531][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.522599][T13040] R13: 00007f44bd3e6128 R14: 00007f44bd3e6090 R15: 00007fffb2fd6f08 [ 1254.530639][T13040] [ 1254.899123][ T37] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1255.109871][ T37] usb 8-1: no configurations [ 1255.114768][ T37] usb 8-1: can't read configurations, error -22 [ 1255.291140][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1255.313751][T13066] device syz_tun entered promiscuous mode [ 1255.322909][T13066] device syz_tun left promiscuous mode [ 1255.340406][ T37] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1255.630017][ T37] usb 8-1: no configurations [ 1255.634926][ T37] usb 8-1: can't read configurations, error -22 [ 1255.683738][ T37] usb usb8-port1: attempt power cycle [ 1256.109352][ T37] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1256.150095][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3685'. [ 1256.173921][T13091] device syz_tun entered promiscuous mode [ 1256.182959][T13091] device syz_tun left promiscuous mode [ 1256.204193][ T37] usb 8-1: no configurations [ 1256.257897][ T37] usb 8-1: can't read configurations, error -22 [ 1256.449023][ T37] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1256.499715][ T37] usb 8-1: no configurations [ 1256.504446][ T37] usb 8-1: can't read configurations, error -22 [ 1256.517068][ T37] usb usb8-port1: unable to enumerate USB device [ 1256.798332][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1256.881120][T13100] device syz_tun entered promiscuous mode [ 1256.897899][T13100] device syz_tun left promiscuous mode [ 1257.343349][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1257.388155][T13119] device syz_tun entered promiscuous mode [ 1257.402086][T13119] device syz_tun left promiscuous mode [ 1257.867682][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1257.895465][T13130] device syz_tun entered promiscuous mode [ 1257.904569][T13130] device syz_tun left promiscuous mode [ 1258.993287][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1259.012398][T13142] device syz_tun entered promiscuous mode [ 1259.020910][T13142] device syz_tun left promiscuous mode [ 1259.495504][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'. [ 1259.531105][T13152] device syz_tun entered promiscuous mode [ 1259.541495][T13152] device syz_tun left promiscuous mode [ 1260.507449][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1260.796432][T13172] device syz_tun entered promiscuous mode [ 1260.804092][T13172] device syz_tun left promiscuous mode [ 1260.874915][T13177] loop7: detected capacity change from 0 to 256 [ 1260.899453][T13177] FAT-fs (loop7): Unrecognized mount option "ÿ0x0000000000000006" or missing value [ 1262.321012][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3717'. [ 1262.333301][T13196] device syz_tun entered promiscuous mode [ 1262.442542][T13196] device syz_tun left promiscuous mode [ 1263.937448][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1263.963532][T13218] device syz_tun entered promiscuous mode [ 1263.973848][T13218] device syz_tun left promiscuous mode [ 1265.198688][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3734'. [ 1265.230939][T13246] device syz_tun entered promiscuous mode [ 1265.243650][T13246] device syz_tun left promiscuous mode [ 1267.008523][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1267.032663][T13278] device syz_tun entered promiscuous mode [ 1267.041631][T13278] device syz_tun left promiscuous mode [ 1267.367939][T13286] loop7: detected capacity change from 0 to 1024 [ 1267.391556][T13286] EXT4-fs: Ignoring removed i_version option [ 1267.409142][T13286] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1267.446270][T13286] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1268.025291][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1268.053315][T13301] loop7: detected capacity change from 0 to 128 [ 1269.214226][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1269.246912][T13317] device syz_tun entered promiscuous mode [ 1269.256163][T13317] device syz_tun left promiscuous mode [ 1271.633752][T13354] loop7: detected capacity change from 0 to 128 [ 1272.260576][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1272.315513][T13356] device syz_tun entered promiscuous mode [ 1272.329775][T13356] device syz_tun left promiscuous mode [ 1272.418079][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1272.450107][T13358] device syz_tun entered promiscuous mode [ 1272.611217][T13358] device syz_tun left promiscuous mode [ 1274.390361][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3788'. [ 1275.307396][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1278.773144][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3804'. [ 1279.370981][T13453] device syz_tun entered promiscuous mode [ 1279.447573][T13453] device syz_tun left promiscuous mode [ 1279.838433][T13457] loop7: detected capacity change from 0 to 256 [ 1280.007893][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1280.031770][T13470] device syz_tun entered promiscuous mode [ 1280.040488][T13470] device syz_tun left promiscuous mode [ 1281.846031][T13488] loop7: detected capacity change from 0 to 1024 [ 1281.996954][T13488] EXT4-fs: Ignoring removed i_version option [ 1282.053104][T13488] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1282.163889][T13488] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1282.343440][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1282.730387][T13510] loop7: detected capacity change from 0 to 128 [ 1283.755146][T13527] loop7: detected capacity change from 0 to 1024 [ 1283.794897][T13527] EXT4-fs: Ignoring removed i_version option [ 1283.811347][T13527] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1283.835797][T13527] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1284.031668][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1285.180498][T13543] loop7: detected capacity change from 0 to 512 [ 1285.197960][T13543] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1285.282667][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3835'. [ 1285.309528][T13548] device syz_tun entered promiscuous mode [ 1285.317038][T13548] device syz_tun left promiscuous mode [ 1285.365626][T13543] EXT4-fs (loop7): 1 truncate cleaned up [ 1285.489048][T13543] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1285.618049][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1291.270037][ T353] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1291.770052][ T353] usb 8-1: no configurations [ 1291.776833][ T353] usb 8-1: can't read configurations, error -22 [ 1291.969035][ T353] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1292.269715][ T353] usb 8-1: no configurations [ 1294.039004][ T353] usb 8-1: can't read configurations, error -22 [ 1294.045646][ T353] usb usb8-port1: attempt power cycle [ 1295.740040][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1295.752378][T13629] device syz_tun entered promiscuous mode [ 1295.759449][T13629] device syz_tun left promiscuous mode [ 1297.802144][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1301.910999][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'. [ 1301.931676][T13690] device syz_tun entered promiscuous mode [ 1301.939173][T13690] device syz_tun left promiscuous mode [ 1302.419612][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3882'. [ 1302.464940][T13702] device syz_tun entered promiscuous mode [ 1302.478665][T13702] device syz_tun left promiscuous mode [ 1303.199048][ T290] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1305.196094][ T290] usb 8-1: device descriptor read/all, error -71 [ 1306.169227][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1306.199035][T13743] device syz_tun entered promiscuous mode [ 1306.207533][T13743] device syz_tun left promiscuous mode [ 1307.176541][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3902'. [ 1307.205100][T13766] device syz_tun entered promiscuous mode [ 1307.214513][T13766] device syz_tun left promiscuous mode [ 1307.712021][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3904'. [ 1307.905871][T13773] device syz_tun entered promiscuous mode [ 1307.912837][T13773] device syz_tun left promiscuous mode [ 1309.216541][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1309.246999][T13798] device syz_tun entered promiscuous mode [ 1309.258483][T13798] device syz_tun left promiscuous mode [ 1309.646614][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3914'. [ 1309.659621][T13807] device syz_tun entered promiscuous mode [ 1309.666915][T13807] device syz_tun left promiscuous mode [ 1311.357253][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3924'. [ 1311.389970][T13838] device syz_tun entered promiscuous mode [ 1311.926285][T13838] device syz_tun left promiscuous mode [ 1312.384646][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3926'. [ 1312.410520][T13853] device syz_tun entered promiscuous mode [ 1312.996385][T13853] device syz_tun left promiscuous mode [ 1313.972803][T13864] bridge0: port 3(vlan2) entered blocking state [ 1313.980062][T13864] bridge0: port 3(vlan2) entered disabled state [ 1316.930227][T13895] loop7: detected capacity change from 0 to 128 [ 1317.860032][T13917] bridge0: port 3(vlan2) entered blocking state [ 1317.885577][T13917] bridge0: port 3(vlan2) entered disabled state [ 1317.982731][T13925] loop7: detected capacity change from 0 to 256 [ 1318.034418][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1318.046428][T13928] device syz_tun entered promiscuous mode [ 1318.053530][T13928] device syz_tun left promiscuous mode [ 1318.068620][T13925] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1318.106629][T13925] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1323.041010][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3966'. [ 1323.052789][T13979] device syz_tun entered promiscuous mode [ 1323.059500][T13979] device syz_tun left promiscuous mode [ 1323.557546][T13994] netlink: 'syz.7.3971': attribute type 4 has an invalid length. [ 1323.565899][T13994] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3971'. [ 1323.612420][T13994] loop7: detected capacity change from 0 to 512 [ 1323.740428][T13994] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1323.749791][T13994] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.760943][T13994] EXT4-fs (loop7): unmounting filesystem. [ 1329.086099][T14075] loop7: detected capacity change from 0 to 512 [ 1329.308056][ T28] audit: type=1400 audit(1761082421.099:531): avc: denied { bind } for pid=14087 comm="syz.1.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1329.331257][T14075] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1329.356909][T14075] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.788962][ T9297] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1329.922727][T14098] bridge0: port 3(vlan2) entered blocking state [ 1329.929249][T14098] bridge0: port 3(vlan2) entered disabled state [ 1329.970621][ T9297] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1329.988945][ T9297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.009453][ T9297] usb 8-1: config 0 descriptor?? [ 1332.200948][ T9297] usb 8-1: Cannot read MAC address [ 1332.210813][ T9297] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 1332.222053][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1332.233879][ T9297] usb 8-1: USB disconnect, device number 33 [ 1332.421136][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1332.740770][T14151] device syz_tun entered promiscuous mode [ 1332.830107][T14151] device syz_tun left promiscuous mode [ 1334.512627][ T28] audit: type=1400 audit(1761082426.309:532): avc: denied { ioctl } for pid=14174 comm="syz.1.4031" path="socket:[48484]" dev="sockfs" ino=48484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1334.810694][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4034'. [ 1335.624453][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4041'. [ 1335.637107][T14203] device syz_tun entered promiscuous mode [ 1335.644704][T14203] device syz_tun left promiscuous mode [ 1340.353438][T14233] netlink: 'syz.3.4049': attribute type 4 has an invalid length. [ 1340.363097][T14233] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4049'. [ 1340.557272][T14243] loop7: detected capacity change from 0 to 1024 [ 1340.600324][T14243] EXT4-fs: Ignoring removed i_version option [ 1340.619149][T14243] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1341.524903][T14243] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1342.420318][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1342.690150][T14269] loop7: detected capacity change from 0 to 256 [ 1342.782618][T14269] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1342.842555][T14269] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1344.665232][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'. [ 1345.371490][T14291] tipc: Failed to remove unknown binding: 66,1,1/0:3484812281/3484812283 [ 1345.385414][T14291] tipc: Failed to remove unknown binding: 66,1,1/0:3484812281/3484812283 [ 1345.454580][T14301] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4074'. [ 1345.477753][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 1345.502200][T14304] device syz_tun entered promiscuous mode [ 1345.512391][T14304] device syz_tun left promiscuous mode [ 1345.797218][T14310] netlink: 'syz.5.4076': attribute type 4 has an invalid length. [ 1345.805356][T14310] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4076'. [ 1346.684465][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4079'. [ 1346.748289][T14322] device syz_tun entered promiscuous mode [ 1346.787481][T14322] device syz_tun left promiscuous mode [ 1347.124579][T14331] netlink: 4584 bytes leftover after parsing attributes in process `syz.2.4083'. [ 1351.956920][T14374] netlink: 'syz.7.4095': attribute type 4 has an invalid length. [ 1351.967599][T14374] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4095'. [ 1352.179343][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1352.322202][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1352.335506][T14381] device syz_tun entered promiscuous mode [ 1352.343695][T14381] device syz_tun left promiscuous mode [ 1353.255283][T14389] netlink: 'syz.7.4099': attribute type 4 has an invalid length. [ 1353.265680][T14389] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4099'. [ 1353.279675][T14389] loop7: detected capacity change from 0 to 512 [ 1353.647543][T14389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1353.657140][T14389] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.669110][T14389] EXT4-fs (loop7): unmounting filesystem. [ 1353.785525][T14403] netlink: 'syz.2.4103': attribute type 15 has an invalid length. [ 1353.802987][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1353.865164][T14402] netlink: 'syz.2.4103': attribute type 1 has an invalid length. [ 1353.874316][T14402] netlink: 'syz.2.4103': attribute type 2 has an invalid length. [ 1354.874706][T14428] netlink: 'syz.1.4110': attribute type 4 has an invalid length. [ 1354.883742][T14428] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1355.759214][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1355.772064][T14447] device syz_tun entered promiscuous mode [ 1355.778661][T14447] device syz_tun left promiscuous mode [ 1356.382411][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4118'. [ 1356.435035][T14457] device wireguard0 entered promiscuous mode [ 1357.772057][ T19] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1357.988922][ T19] usb 8-1: Using ep0 maxpacket: 32 [ 1357.996113][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1358.007375][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1358.024608][ T19] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1358.034548][ T19] usb 8-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1358.044060][ T19] usb 8-1: Manufacturer: syz [ 1358.049229][ T19] usb 8-1: SerialNumber: syz [ 1358.059731][ T19] usb 8-1: config 0 descriptor?? [ 1358.070911][ T19] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input4 [ 1358.082876][ T28] audit: type=1400 audit(1761082449.879:533): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1920 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.133473][ T28] audit: type=1400 audit(1761082449.879:534): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1920 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.304951][T10133] usb 8-1: USB disconnect, device number 34 [ 1359.041387][T14495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'. [ 1359.053158][T14495] device syz_tun entered promiscuous mode [ 1359.060132][T14495] device syz_tun left promiscuous mode [ 1360.422673][T14503] device veth4 entered promiscuous mode [ 1360.628194][T14517] netlink: 'syz.7.4135': attribute type 4 has an invalid length. [ 1360.636647][T14517] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4135'. [ 1363.052830][T14542] netlink: 'syz.7.4144': attribute type 4 has an invalid length. [ 1363.061363][T14542] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4144'. [ 1363.161098][T14542] loop7: detected capacity change from 0 to 512 [ 1364.233798][T14542] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1364.243107][T14542] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.254217][T14542] EXT4-fs (loop7): unmounting filesystem. [ 1364.935509][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1364.948216][T14551] device syz_tun entered promiscuous mode [ 1364.955368][T14551] device syz_tun left promiscuous mode [ 1366.721533][T14575] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4155'. [ 1367.275881][T14578] bridge0: port 3(vlan2) entered blocking state [ 1367.293622][T14578] bridge0: port 3(vlan2) entered disabled state [ 1367.622371][T14593] netlink: 'syz.1.4159': attribute type 4 has an invalid length. [ 1367.630683][T14593] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4159'. [ 1367.843428][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4164'. [ 1367.924566][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4166'. [ 1368.558764][T14608] netlink: 'syz.2.4165': attribute type 4 has an invalid length. [ 1368.571291][T14608] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1368.674305][T14601] netlink: 'syz.7.4162': attribute type 4 has an invalid length. [ 1368.683462][T14601] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4162'. [ 1368.702083][T14601] loop7: detected capacity change from 0 to 512 [ 1368.858034][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1368.907242][T14601] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1368.916988][T14601] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.929457][T14601] EXT4-fs (loop7): unmounting filesystem. [ 1368.940900][T14609] device syz_tun entered promiscuous mode [ 1368.965730][T14609] device syz_tun left promiscuous mode [ 1370.233995][T14621] bridge0: port 3(vlan2) entered blocking state [ 1370.242468][T14621] bridge0: port 3(vlan2) entered disabled state [ 1371.709339][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4174'. [ 1371.859112][T14644] device syz_tun entered promiscuous mode [ 1371.867860][T14644] device syz_tun left promiscuous mode [ 1372.065802][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1372.090564][T14653] device syz_tun entered promiscuous mode [ 1372.098325][T14653] device syz_tun left promiscuous mode [ 1372.486142][T14661] netlink: 'syz.1.4179': attribute type 4 has an invalid length. [ 1372.494601][T14661] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4179'. [ 1372.853037][T14669] netlink: 'syz.7.4181': attribute type 4 has an invalid length. [ 1372.861310][T14669] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4181'. [ 1372.944851][T14669] loop7: detected capacity change from 0 to 512 [ 1373.299499][T14669] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1373.309068][T14669] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.322812][T14669] EXT4-fs (loop7): unmounting filesystem. [ 1373.401719][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 1373.660549][T14680] bridge0: port 3(vlan2) entered blocking state [ 1373.667307][T14680] bridge0: port 3(vlan2) entered disabled state [ 1373.808069][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4188'. [ 1373.856191][T14690] loop7: detected capacity change from 0 to 256 [ 1373.875632][T14690] FAT-fs (loop7): Unrecognized mount option "ÿ0x0000000000000006" or missing value [ 1373.889032][T10459] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1374.071773][T10459] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1374.434676][T14702] netlink: 'syz.2.4192': attribute type 4 has an invalid length. [ 1374.443430][T14702] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4192'. [ 1374.767585][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4193'. [ 1374.825437][T14707] device syz_tun entered promiscuous mode [ 1374.846710][T14707] device syz_tun left promiscuous mode [ 1376.463428][T14717] netlink: 'syz.2.4196': attribute type 4 has an invalid length. [ 1376.471858][T14717] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1376.831569][T14733] SELinux: Context 9p is not valid (left unmapped). [ 1378.025440][ T28] audit: type=1400 audit(1761082468.629:535): avc: denied { relabelfrom } for pid=14724 comm="syz.5.4200" name="" dev="pipefs" ino=49627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1378.064832][ T28] audit: type=1400 audit(1761082468.639:536): avc: denied { relabelto } for pid=14724 comm="syz.5.4200" name="" dev="pipefs" ino=49627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="9p" [ 1378.519071][T14753] netlink: 'syz.1.4206': attribute type 4 has an invalid length. [ 1378.527288][T14753] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1378.949620][T14752] loop7: detected capacity change from 0 to 40427 [ 1378.964353][T14752] F2FS-fs (loop7): invalid crc value [ 1379.086416][T14752] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1379.161372][T14752] F2FS-fs (loop7): Start checkpoint disabled! [ 1379.178734][T14752] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1379.223006][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4211'. [ 1379.289806][T14763] device syz_tun entered promiscuous mode [ 1379.314019][T14763] device syz_tun left promiscuous mode [ 1379.817725][T11197] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1379.957516][T14773] netlink: 'syz.3.4214': attribute type 4 has an invalid length. [ 1379.965649][T14773] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1380.241211][T11197] usb 8-1: config index 0 descriptor too short (expected 9087, got 127) [ 1380.255481][T11197] usb 8-1: config 160 has too many interfaces: 181, using maximum allowed: 32 [ 1380.274765][T11197] usb 8-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.291252][T11197] usb 8-1: config 160 has 2 interfaces, different from the descriptor's value: 181 [ 1380.305840][T11197] usb 8-1: config 160 has no interface number 1 [ 1380.316330][T11197] usb 8-1: config 160 interface 2 altsetting 1 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1380.335435][T11197] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1380.349259][T11197] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.357842][T11197] usb 8-1: Product: syz [ 1380.362745][T11197] usb 8-1: Manufacturer: syz [ 1380.367621][T11197] usb 8-1: SerialNumber: syz [ 1380.623581][T14792] netlink: 'syz.1.4220': attribute type 4 has an invalid length. [ 1380.631541][T14792] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1380.903775][T11197] usb 8-1: unknown interface protocol 0xbc, assuming v1 [ 1380.911747][T11197] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1380.920120][T11197] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1380.944727][T11197] usb 8-1: USB disconnect, device number 35 [ 1381.170506][T14314] udevd[14314]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:160.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1381.257133][T14808] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4226'. [ 1381.378286][ T1482] kworker/u4:10: attempt to access beyond end of device [ 1381.378286][ T1482] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1381.665805][ T28] audit: type=1400 audit(1761082473.459:537): avc: denied { ioctl } for pid=14822 comm="syz.2.4232" path="socket:[50270]" dev="sockfs" ino=50270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1381.938128][T14829] netlink: 'syz.7.4228': attribute type 4 has an invalid length. [ 1381.946437][T14829] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4228'. [ 1382.040601][T14829] loop7: detected capacity change from 0 to 512 [ 1382.942352][T14829] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1382.952111][T14829] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.963568][T14829] EXT4-fs (loop7): unmounting filesystem. [ 1383.596977][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4238'. [ 1383.625222][T14843] device syz_tun entered promiscuous mode [ 1383.637598][T14843] device syz_tun left promiscuous mode [ 1384.169149][T14847] netlink: 'syz.3.4239': attribute type 4 has an invalid length. [ 1384.177123][T14847] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4239'. [ 1384.274941][ T28] audit: type=1400 audit(1761082476.069:538): avc: denied { ioctl } for pid=14856 comm="syz.7.4243" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1384.569776][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4244'. [ 1384.704822][T14862] device syz_tun entered promiscuous mode [ 1384.715026][T14862] device syz_tun left promiscuous mode [ 1384.813292][ T28] audit: type=1400 audit(1761082476.609:539): avc: denied { read } for pid=14867 comm="syz.2.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1384.838064][T14870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4245'. [ 1385.112215][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4250'. [ 1385.567660][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4253'. [ 1385.581319][T14895] device syz_tun entered promiscuous mode [ 1385.693584][T14895] device syz_tun left promiscuous mode [ 1385.822352][T14902] netlink: 'syz.1.4255': attribute type 4 has an invalid length. [ 1385.831308][T14902] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1387.237792][T14917] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1387.247420][T14917] FAT-fs (loop7): unable to read boot sector [ 1387.501802][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4260'. [ 1388.899082][ T345] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1389.174854][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1389.210763][ T345] usb 8-1: no configurations [ 1389.216559][ T345] usb 8-1: can't read configurations, error -22 [ 1389.299460][T14942] device syz_tun entered promiscuous mode [ 1389.409412][T14942] device syz_tun left promiscuous mode [ 1389.468942][ T345] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1389.597857][T14948] netlink: 'syz.2.4268': attribute type 4 has an invalid length. [ 1389.606379][T14948] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4268'. [ 1389.899512][ T345] usb 8-1: no configurations [ 1389.904242][ T345] usb 8-1: can't read configurations, error -22 [ 1389.910773][ T345] usb usb8-port1: attempt power cycle [ 1390.255347][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4272'. [ 1390.318962][ T345] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1390.349725][ T345] usb 8-1: no configurations [ 1390.354751][ T345] usb 8-1: can't read configurations, error -22 [ 1390.380285][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1390.522153][ T345] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1390.559840][ T345] usb 8-1: no configurations [ 1390.564572][ T345] usb 8-1: can't read configurations, error -22 [ 1390.571425][ T345] usb usb8-port1: unable to enumerate USB device [ 1391.130435][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'. [ 1391.910513][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1391.935490][T15013] device syz_tun entered promiscuous mode [ 1391.994031][T15013] device syz_tun left promiscuous mode [ 1392.289056][T15023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4298'. [ 1393.436906][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4302'. [ 1393.461932][T15036] device syz_tun entered promiscuous mode [ 1393.470535][T15036] device syz_tun left promiscuous mode [ 1395.090689][T15055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1395.190930][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1395.629042][T15070] netlink: 'syz.7.4310': attribute type 4 has an invalid length. [ 1395.636986][T15070] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4310'. [ 1395.745528][T15070] loop7: detected capacity change from 0 to 512 [ 1397.081751][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4315'. [ 1397.501392][T15070] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1397.510806][T15070] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.522654][T15070] EXT4-fs (loop7): unmounting filesystem. [ 1399.687485][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4316'. [ 1399.702935][T15090] device syz_tun entered promiscuous mode [ 1399.709936][T15090] device syz_tun left promiscuous mode [ 1399.879919][T15097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1400.120922][T15108] loop7: detected capacity change from 0 to 256 [ 1401.078910][T15108] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1401.164028][T15108] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1401.185965][T15112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4326'. [ 1401.321492][T15119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4329'. [ 1403.777116][T15138] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4333'. [ 1405.133861][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4335'. [ 1405.262486][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4337'. [ 1405.263476][T15153] device syz_tun entered promiscuous mode [ 1405.287628][T15153] device syz_tun left promiscuous mode [ 1405.432004][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1406.532066][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4344'. [ 1406.612623][T15174] device syz_tun entered promiscuous mode [ 1406.621536][T15174] device syz_tun left promiscuous mode [ 1407.012103][T15177] loop7: detected capacity change from 0 to 512 [ 1407.194388][T15177] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1407.196280][T15181] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4346'. [ 1407.205025][T15177] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1407.228343][T15177] EXT4-fs (loop7): unmounting filesystem. [ 1407.427194][T15190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1407.860913][T15202] netlink: 'syz.3.4351': attribute type 4 has an invalid length. [ 1407.869482][T15202] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1408.627326][T15214] loop7: detected capacity change from 0 to 512 [ 1408.641715][T15209] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1408.729504][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1408.741560][T15216] device syz_tun entered promiscuous mode [ 1408.749153][T15216] device syz_tun left promiscuous mode [ 1408.872525][T15214] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1408.884741][T15214] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.202523][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1409.214366][T15234] device syz_tun entered promiscuous mode [ 1409.221342][T15234] device syz_tun left promiscuous mode [ 1409.749183][T11646] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1409.766597][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4365'. [ 1409.787309][T15241] device syz_tun entered promiscuous mode [ 1409.806525][T15241] device syz_tun left promiscuous mode [ 1409.932645][T11646] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1409.942497][T11646] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.960969][T11646] usb 8-1: config 0 descriptor?? [ 1410.529549][T15244] netlink: 'syz.2.4366': attribute type 4 has an invalid length. [ 1410.537961][T15244] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1410.719211][T11646] usb 8-1: Cannot read MAC address [ 1410.724458][T11646] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 1410.736000][T11646] usb 8-1: USB disconnect, device number 40 [ 1411.472548][T15256] netlink: 'syz.5.4368': attribute type 4 has an invalid length. [ 1411.481043][T15256] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4368'. [ 1411.522085][T15257] netlink: 'syz.3.4370': attribute type 4 has an invalid length. [ 1412.445246][T15260] __nla_validate_parse: 1 callbacks suppressed [ 1412.445270][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1413.018811][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1413.204176][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4375'. [ 1413.217288][T15275] device syz_tun entered promiscuous mode [ 1413.224227][T15275] device syz_tun left promiscuous mode [ 1416.230164][T15296] netlink: 'syz.3.4382': attribute type 4 has an invalid length. [ 1416.240259][T15296] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4382'. [ 1416.606351][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4385'. [ 1418.607867][T15322] loop7: detected capacity change from 0 to 256 [ 1419.149926][T15329] loop7: detected capacity change from 0 to 1024 [ 1419.176139][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4390'. [ 1419.188639][T15335] device syz_tun entered promiscuous mode [ 1419.195412][T15335] device syz_tun left promiscuous mode [ 1419.308977][T15329] EXT4-fs: Ignoring removed i_version option [ 1419.318741][T15329] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1419.352988][T15329] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1419.460082][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1422.316535][T15383] netlink: 'syz.2.4410': attribute type 4 has an invalid length. [ 1422.325307][T15383] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4410'. [ 1422.685408][T15389] loop7: detected capacity change from 0 to 512 [ 1423.638185][T15389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1423.647417][T15389] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.947859][T10990] EXT4-fs (loop7): unmounting filesystem. [ 1424.892684][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1425.301655][T15425] netlink: 'syz.1.4423': attribute type 4 has an invalid length. [ 1425.309470][T15425] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1425.319000][ T290] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1425.510112][ T290] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1425.524103][ T290] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1425.533928][ T290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1425.542253][ T290] usb 8-1: SerialNumber: syz [ 1425.556422][ T290] cdc_ether 8-1:1.0: skipping garbage [ 1425.564129][ T290] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 1425.686002][ T28] audit: type=1400 audit(1761082517.479:540): avc: denied { write } for pid=15428 comm="syz.2.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1426.114313][T15438] loop7: detected capacity change from 0 to 256 [ 1426.129382][T15438] exfat: Unknown parameter '' [ 1427.898125][T15442] loop7: detected capacity change from 0 to 256 [ 1428.459427][T15437] bridge0: port 3(vlan2) entered blocking state [ 1428.692876][T15437] bridge0: port 3(vlan2) entered disabled state [ 1428.713443][ T28] audit: type=1400 audit(1761082520.509:541): avc: denied { create } for pid=15447 comm="syz.1.4430" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1428.941577][ T28] audit: type=1400 audit(1761082520.589:542): avc: denied { mounton } for pid=15447 comm="syz.1.4430" path="/275/file0" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1429.070835][ T28] audit: type=1400 audit(1761082520.619:543): avc: denied { read write } for pid=15447 comm="syz.1.4430" name="file0" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1429.256269][ T28] audit: type=1400 audit(1761082520.619:544): avc: denied { open } for pid=15447 comm="syz.1.4430" path="/275/file0" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1429.407208][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4435'. [ 1430.655395][ T290] usb 8-1: USB disconnect, device number 41 [ 1432.539336][T15505] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4450'. [ 1432.855317][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1432.905514][T15514] device syz_tun entered promiscuous mode [ 1432.917814][T15514] device syz_tun left promiscuous mode [ 1433.666045][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1433.676032][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1434.194218][T15539] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1434.316731][T15536] bridge0: port 3(vlan2) entered blocking state [ 1434.348744][T15536] bridge0: port 3(vlan2) entered disabled state [ 1434.393516][T15546] netlink: 'syz.7.4465': attribute type 4 has an invalid length. [ 1434.402061][T15546] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4465'. [ 1438.130567][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4489'. [ 1438.374995][T15622] device syz_tun entered promiscuous mode [ 1438.388739][T15622] device syz_tun left promiscuous mode [ 1439.019380][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1440.532679][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1441.194399][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4513'. [ 1442.311668][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1443.333539][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4528'. [ 1443.345930][T15720] device syz_tun entered promiscuous mode [ 1443.352950][T15720] device syz_tun left promiscuous mode [ 1443.416021][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1443.428064][T15711] device syz_tun entered promiscuous mode [ 1443.435005][T15711] device syz_tun left promiscuous mode [ 1445.745635][T15740] netlink: 'syz.1.4535': attribute type 8 has an invalid length. [ 1445.759087][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1448.516087][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1448.955139][T15774] netlink: 'syz.5.4545': attribute type 4 has an invalid length. [ 1448.963322][T15774] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1449.434456][T15782] IPv6: sit1: Disabled Multicast RS [ 1449.449544][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4547'. [ 1449.462154][T15783] device syz_tun entered promiscuous mode [ 1449.470306][T15783] device syz_tun left promiscuous mode [ 1450.230428][T15790] bridge0: port 3(vlan2) entered blocking state [ 1450.271721][T15790] bridge0: port 3(vlan2) entered disabled state [ 1450.856210][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4555'. [ 1450.926429][T15805] syz.1.4552[15805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1450.926507][T15805] syz.1.4552[15805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1450.982898][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4560'. [ 1451.014738][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4559'. [ 1452.409150][T15819] netlink: 'syz.1.4562': attribute type 8 has an invalid length. [ 1452.427385][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 1452.608909][T15826] netlink: 'syz.2.4561': attribute type 4 has an invalid length. [ 1452.617282][T15826] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1453.518538][ T28] audit: type=1400 audit(1761082545.309:545): avc: denied { getopt } for pid=15829 comm="syz.3.4566" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1453.624710][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4565'. [ 1453.986025][T15836] device syz_tun entered promiscuous mode [ 1453.993243][T15836] device syz_tun left promiscuous mode [ 1454.006993][T15847] netlink: 'syz.2.4572': attribute type 8 has an invalid length. [ 1454.015091][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 1454.068458][T15849] bridge0: port 3(vlan2) entered blocking state [ 1454.075079][T15849] bridge0: port 3(vlan2) entered disabled state [ 1454.507358][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4575'. [ 1454.519325][T15857] device syz_tun entered promiscuous mode [ 1454.525782][T15857] device syz_tun left promiscuous mode [ 1454.641219][T15858] syz.3.4573[15858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1454.641313][T15858] syz.3.4573[15858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1455.106863][ T28] audit: type=1400 audit(1761082546.889:546): avc: denied { setopt } for pid=15863 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1456.611067][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1456.884394][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4587'. [ 1456.954992][T15893] device syz_tun entered promiscuous mode [ 1456.965899][T15893] device syz_tun left promiscuous mode [ 1457.198464][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1458.130318][T15909] netlink: 'syz.7.4593': attribute type 8 has an invalid length. [ 1458.145306][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4593'. [ 1458.431402][T15914] netlink: 'syz.3.4594': attribute type 4 has an invalid length. [ 1458.439571][T15914] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1459.651539][T15930] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4600'. [ 1459.730336][T15932] netlink: 'syz.3.4599': attribute type 4 has an invalid length. [ 1459.738507][T15932] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1460.793443][ T28] audit: type=1400 audit(1761082552.589:547): avc: denied { watch watch_reads } for pid=15951 comm="syz.3.4607" path="/355/file0" dev="tmpfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1461.413955][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4614'. [ 1461.420423][T15969] netlink: 'syz.1.4606': attribute type 4 has an invalid length. [ 1461.465434][T15969] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4606'. [ 1461.507618][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'. [ 1461.779855][T15991] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1461.801010][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4621'. [ 1461.876100][T15995] _swap_info_get: Bad swap file entry 7800000000000001 [ 1461.883424][T15995] _swap_info_get: Bad swap file entry 7800000000000001 [ 1461.890753][T15995] _swap_info_get: Bad swap file entry 7800000000000001 [ 1461.898355][T15995] _swap_info_get: Bad swap file entry 7800000000000001 [ 1462.333255][T16011] netlink: 'syz.7.4626': attribute type 4 has an invalid length. [ 1462.341418][T16011] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4626'. [ 1462.834984][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1463.706024][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4645'. [ 1464.359406][T16085] tipc: MTU too low for tipc bearer [ 1464.365383][T16085] netlink: 'syz.5.4655': attribute type 1 has an invalid length. [ 1464.500049][T16087] fuse: Bad value for 'group_id' [ 1464.652980][T16089] overlayfs: failed to clone upperpath [ 1464.747492][T16092] __nla_validate_parse: 1 callbacks suppressed [ 1464.747515][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1464.816848][T16100] overlayfs: failed to clone upperpath [ 1464.910416][T16105] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 1465.191309][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4669'. [ 1465.718438][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1466.469095][T16165] netlink: 'syz.5.4680': attribute type 4 has an invalid length. [ 1466.476972][T16165] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4680'. [ 1467.219761][ T28] audit: type=1326 audit(1761082559.019:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.246098][ T28] audit: type=1326 audit(1761082559.039:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.270747][ T28] audit: type=1326 audit(1761082559.039:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.318474][ T28] audit: type=1326 audit(1761082559.039:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.397596][ T28] audit: type=1326 audit(1761082559.039:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.488260][ T28] audit: type=1326 audit(1761082559.069:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.517180][ T28] audit: type=1326 audit(1761082559.069:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 1467.559140][ T28] audit: type=1326 audit(1761082559.069:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1467.585203][T16208] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1467.597355][T16208] FAT-fs (loop15): unable to read boot sector [ 1469.089268][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1470.706583][T16290] netlink: 'syz.2.4730': attribute type 4 has an invalid length. [ 1470.715037][T16290] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1471.735043][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4740'. [ 1472.559804][T16347] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4752'. [ 1472.854821][T16352] netlink: 'syz.7.4753': attribute type 4 has an invalid length. [ 1472.862907][T16352] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4753'. [ 1473.520079][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1473.557333][T16355] device syz_tun entered promiscuous mode [ 1473.571807][T16355] device syz_tun left promiscuous mode [ 1477.950230][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4758'. [ 1478.184447][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1478.429812][T16390] netlink: 'syz.2.4767': attribute type 4 has an invalid length. [ 1478.437668][T16390] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1478.823331][T16394] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4769'. [ 1479.059308][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4774'. [ 1479.209914][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4777'. [ 1479.314610][T16411] netlink: 'syz.5.4775': attribute type 4 has an invalid length. [ 1479.324208][T16411] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4775'. [ 1479.649189][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1479.705223][T16429] device syz_tun entered promiscuous mode [ 1479.719980][T16429] device syz_tun left promiscuous mode [ 1481.894296][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1481.986055][T16461] netlink: 'syz.3.4791': attribute type 4 has an invalid length. [ 1481.994967][T16461] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4791'. [ 1484.243550][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1484.272212][T16478] device syz_tun entered promiscuous mode [ 1484.281616][T16478] device syz_tun left promiscuous mode [ 1485.561710][T16512] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4809'. [ 1485.701379][T16522] netlink: 'syz.1.4808': attribute type 4 has an invalid length. [ 1485.709389][T16522] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1485.861604][T16526] bridge0: port 3(vlan2) entered blocking state [ 1485.868481][T16526] bridge0: port 3(vlan2) entered disabled state [ 1486.547670][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4820'. [ 1486.559793][T16545] device syz_tun entered promiscuous mode [ 1486.566975][T16545] device syz_tun left promiscuous mode [ 1488.081373][T16562] bridge0: port 3(vlan2) entered blocking state [ 1488.096168][T16562] bridge0: port 3(vlan2) entered disabled state [ 1488.526361][T16596] netlink: 'syz.5.4832': attribute type 4 has an invalid length. [ 1488.534715][T16596] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4832'. [ 1490.961745][ T28] audit: type=1326 audit(1761082582.749:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.024872][ T28] audit: type=1326 audit(1761082582.749:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.050843][ T28] audit: type=1326 audit(1761082582.749:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.077966][ T28] audit: type=1326 audit(1761082582.749:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.128927][ T28] audit: type=1326 audit(1761082582.749:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.154858][ T28] audit: type=1326 audit(1761082582.749:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.324459][ T28] audit: type=1326 audit(1761082582.749:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.455700][ T28] audit: type=1326 audit(1761082582.749:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.470770][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4854'. [ 1491.480255][ T28] audit: type=1326 audit(1761082582.749:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.548951][ T28] audit: type=1326 audit(1761082582.749:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ddf8efc9 code=0x7ffc0000 [ 1491.575214][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4853'. [ 1491.591973][T16642] device syz_tun entered promiscuous mode [ 1491.601229][T16642] device syz_tun left promiscuous mode [ 1493.728148][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 1493.771365][T16678] device veth1_macvtap left promiscuous mode [ 1493.813195][T16678] device macsec0 entered promiscuous mode [ 1493.838008][T16680] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1493.962466][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4873'. [ 1493.974176][T16695] device syz_tun entered promiscuous mode [ 1493.981230][T16695] device syz_tun left promiscuous mode [ 1494.984825][T16713] bridge0: port 3(vlan2) entered blocking state [ 1494.991259][T16713] bridge0: port 3(vlan2) entered disabled state [ 1496.125026][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'. [ 1496.415482][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4887'. [ 1496.427903][T16737] device syz_tun entered promiscuous mode [ 1496.435045][T16737] device syz_tun left promiscuous mode [ 1497.340726][T16753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1498.130865][T16773] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4899'. [ 1499.129600][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1499.381015][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4903'. [ 1499.541811][T16795] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4906'. [ 1501.034662][T16799] bridge0: port 3(vlan2) entered blocking state [ 1501.049954][T16799] bridge0: port 3(vlan2) entered disabled state [ 1502.345440][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1502.674111][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1503.466322][T16841] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4920'. [ 1504.099841][T16849] incfs: Backing dir is not set, filesystem can't be mounted. [ 1504.111809][T16849] incfs: mount failed -2 [ 1504.278462][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1504.299399][T16856] device syz_tun entered promiscuous mode [ 1504.525291][T16856] device syz_tun left promiscuous mode [ 1504.652737][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1505.760842][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1505.786203][T16882] device syz_tun entered promiscuous mode [ 1505.795065][T16882] device syz_tun left promiscuous mode [ 1507.466208][T16895] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1508.012488][T16889] incfs: Backing dir is not set, filesystem can't be mounted. [ 1508.046918][T16889] incfs: mount failed -2 [ 1508.805612][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1508.827543][T16915] device syz_tun entered promiscuous mode [ 1508.836817][T16915] device syz_tun left promiscuous mode [ 1510.693546][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1510.715963][T16959] device syz_tun entered promiscuous mode [ 1510.725505][T16959] device syz_tun left promiscuous mode [ 1512.335351][T16990] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1515.575999][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1515.763901][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4983'. [ 1516.020480][T17032] netlink: 'syz.3.4987': attribute type 4 has an invalid length. [ 1516.028417][T17032] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4987'. [ 1516.718093][T17041] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4991'. [ 1518.351353][T17056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4996'. [ 1519.374211][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1519.397412][T17061] device syz_tun entered promiscuous mode [ 1519.406939][T17061] device syz_tun left promiscuous mode [ 1519.778708][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5001'. [ 1520.812778][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5010'. [ 1520.851183][T17104] netlink: 'syz.1.5007': attribute type 4 has an invalid length. [ 1521.100684][T17104] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5007'. [ 1523.213008][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5020'. [ 1523.224754][T17138] device syz_tun entered promiscuous mode [ 1523.231817][T17138] device syz_tun left promiscuous mode [ 1523.333488][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5023'. [ 1523.679981][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5024'. [ 1523.958387][T17155] netlink: 'syz.1.5027': attribute type 4 has an invalid length. [ 1523.972439][T17155] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5027'. [ 1524.071453][T17157] netlink: 'syz.3.5028': attribute type 4 has an invalid length. [ 1524.080017][T17157] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1524.571654][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5035'. [ 1524.978212][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1525.003402][T17188] device syz_tun entered promiscuous mode [ 1525.012605][T17188] device syz_tun left promiscuous mode [ 1525.483530][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5048'. [ 1527.038934][T17210] netlink: 'syz.2.5049': attribute type 4 has an invalid length. [ 1527.046723][T17210] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5049'. [ 1527.352266][T17229] netlink: 'syz.5.5050': attribute type 4 has an invalid length. [ 1527.370574][T17229] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5050'. [ 1529.354090][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5066'. [ 1529.376337][T17258] device syz_tun entered promiscuous mode [ 1529.384782][T17258] device syz_tun left promiscuous mode [ 1530.712231][T17263] netlink: 'syz.3.5067': attribute type 4 has an invalid length. [ 1530.721041][T17263] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5067'. [ 1533.415670][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5083'. [ 1533.438446][T17315] device syz_tun entered promiscuous mode [ 1533.446619][T17315] device syz_tun left promiscuous mode [ 1534.204503][T17332] netlink: 'syz.7.5087': attribute type 4 has an invalid length. [ 1534.213339][T17332] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5087'. [ 1536.058220][T17361] netlink: 'syz.7.5096': attribute type 4 has an invalid length. [ 1536.066770][T17361] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5096'. [ 1537.680424][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'. [ 1537.711173][T17373] device syz_tun entered promiscuous mode [ 1538.121150][T17373] device syz_tun left promiscuous mode [ 1538.166695][T17374] netlink: 'syz.7.5102': attribute type 4 has an invalid length. [ 1538.174775][T17374] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5102'. [ 1539.466960][T17391] netlink: 'syz.3.5107': attribute type 4 has an invalid length. [ 1539.475339][T17391] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1540.183221][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5110'. [ 1540.195430][T17399] device syz_tun entered promiscuous mode [ 1540.201946][T17399] device syz_tun left promiscuous mode [ 1540.352268][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5111'. [ 1541.687187][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1542.121475][T17436] netlink: 'syz.3.5116': attribute type 4 has an invalid length. [ 1542.144310][T17436] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1543.598979][T17450] netlink: 'syz.2.5122': attribute type 4 has an invalid length. [ 1543.606822][T17450] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5122'. [ 1543.900962][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5125'. [ 1543.912809][T17453] device syz_tun entered promiscuous mode [ 1543.919447][T17453] device syz_tun left promiscuous mode [ 1546.705088][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5133'. [ 1547.515413][T17500] netlink: 'syz.1.5139': attribute type 4 has an invalid length. [ 1547.523508][T17500] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5139'. [ 1547.616294][T17492] bridge0: port 3(vlan2) entered blocking state [ 1547.768848][T17492] bridge0: port 3(vlan2) entered disabled state [ 1547.798510][T17508] bridge0: port 3(vlan2) entered blocking state [ 1547.854659][T17508] bridge0: port 3(vlan2) entered disabled state [ 1547.972151][T17523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5146'. [ 1548.737357][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5151'. [ 1548.759287][T17542] device syz_tun entered promiscuous mode [ 1548.768199][T17542] device syz_tun left promiscuous mode [ 1553.028119][T17574] netlink: 'syz.7.5160': attribute type 4 has an invalid length. [ 1553.036327][T17574] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1553.612875][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5165'. [ 1553.640401][T17592] device syz_tun entered promiscuous mode [ 1553.650709][T17592] device syz_tun left promiscuous mode [ 1556.439702][T17620] netlink: 'syz.1.5176': attribute type 4 has an invalid length. [ 1556.448253][T17620] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5176'. [ 1556.937725][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5181'. [ 1556.977953][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5183'. [ 1557.102036][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5182'. [ 1557.114114][T17638] device syz_tun entered promiscuous mode [ 1557.151676][T17638] device syz_tun left promiscuous mode [ 1557.943247][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5187'. [ 1557.956265][T17649] device syz_tun entered promiscuous mode [ 1557.963940][T17649] device syz_tun left promiscuous mode [ 1559.298780][T17663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5192'. [ 1560.420797][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1560.440419][T17677] device syz_tun entered promiscuous mode [ 1560.449167][T17677] device syz_tun left promiscuous mode [ 1561.682892][T17696] netlink: 'syz.7.5200': attribute type 4 has an invalid length. [ 1561.777328][T17696] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5200'. [ 1562.394129][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5205'. [ 1562.620620][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5207'. [ 1562.632343][T17714] device syz_tun entered promiscuous mode [ 1562.639026][T17714] device syz_tun left promiscuous mode [ 1563.556802][T17729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5212'. [ 1563.583420][T17729] device syz_tun entered promiscuous mode [ 1563.593234][T17729] device syz_tun left promiscuous mode [ 1567.159205][T17764] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5225'. [ 1567.189529][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5222'. [ 1567.438616][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5227'. [ 1567.461329][T17778] device syz_tun entered promiscuous mode [ 1567.470160][T17778] device syz_tun left promiscuous mode [ 1569.174871][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5236'. [ 1569.187041][T17801] device syz_tun entered promiscuous mode [ 1569.193830][T17801] device syz_tun left promiscuous mode [ 1570.468949][T17806] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5237'. [ 1572.038470][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5240'. [ 1572.080346][T17818] device syz_tun entered promiscuous mode [ 1572.092216][T17818] device syz_tun left promiscuous mode [ 1573.017649][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1573.028924][T17832] device syz_tun entered promiscuous mode [ 1573.035624][T17832] device syz_tun left promiscuous mode [ 1573.400454][T17847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5249'. [ 1573.424653][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'. [ 1576.152277][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1576.167045][ T28] audit: type=1326 audit(1761082667.939:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.281793][ T28] audit: type=1326 audit(1761082667.939:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.353059][ T28] audit: type=1326 audit(1761082667.939:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.421171][ T28] audit: type=1326 audit(1761082667.939:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.447127][ T28] audit: type=1326 audit(1761082667.939:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.474794][ T28] audit: type=1326 audit(1761082667.939:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.621207][ T28] audit: type=1326 audit(1761082667.939:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.669053][ T28] audit: type=1326 audit(1761082667.939:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.701002][ T28] audit: type=1326 audit(1761082667.939:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.725111][ T28] audit: type=1326 audit(1761082667.939:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178098efc9 code=0x7ffc0000 [ 1576.751877][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5262'. [ 1579.404139][T17917] bridge0: port 3(vlan2) entered blocking state [ 1579.586136][T17917] bridge0: port 3(vlan2) entered disabled state [ 1580.283614][T17930] netlink: 'syz.2.5273': attribute type 4 has an invalid length. [ 1580.457374][T17930] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1580.763703][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5277'. [ 1580.776882][T17937] device syz_tun entered promiscuous mode [ 1580.784324][T17937] device syz_tun left promiscuous mode [ 1580.881913][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5279'. [ 1581.611540][T17956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5284'. [ 1582.628152][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5289'. [ 1582.643487][T17978] device syz_tun entered promiscuous mode [ 1582.656479][T17978] device syz_tun left promiscuous mode [ 1583.099312][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5293'. [ 1583.111924][T17986] device syz_tun entered promiscuous mode [ 1583.119639][T17986] device syz_tun left promiscuous mode [ 1583.430899][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5294'. [ 1583.442510][T17993] device syz_tun entered promiscuous mode [ 1583.449275][T17993] device syz_tun left promiscuous mode [ 1583.458429][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1585.672293][T18025] netlink: 'syz.1.5305': attribute type 4 has an invalid length. [ 1585.680109][T18025] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5305'. [ 1586.076755][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1586.089357][T18030] device syz_tun entered promiscuous mode [ 1586.096849][T18030] device syz_tun left promiscuous mode [ 1586.299853][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5311'. [ 1586.629930][T18043] device syz_tun entered promiscuous mode [ 1586.639288][T18043] device syz_tun left promiscuous mode [ 1586.721347][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'. [ 1587.556430][T18067] netlink: 'syz.1.5319': attribute type 4 has an invalid length. [ 1587.564905][T18067] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1589.082623][T18072] incfs: Backing dir is not set, filesystem can't be mounted. [ 1589.090428][T18072] incfs: mount failed -2 [ 1589.395517][T18070] bridge0: port 3(vlan2) entered blocking state [ 1589.418963][T18070] bridge0: port 3(vlan2) entered disabled state [ 1589.515719][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1589.641747][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1589.654737][T18093] device syz_tun entered promiscuous mode [ 1589.661677][T18093] device syz_tun left promiscuous mode [ 1589.963281][T18097] netlink: 'syz.5.5325': attribute type 4 has an invalid length. [ 1590.002984][T18097] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5325'. [ 1590.470773][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5330'. [ 1590.671920][T18110] netlink: 'syz.1.5331': attribute type 4 has an invalid length. [ 1590.680414][T18110] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5331'. [ 1591.615228][T18125] bridge0: port 3(vlan2) entered blocking state [ 1591.622604][T18125] bridge0: port 3(vlan2) entered disabled state [ 1592.953365][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5342'. [ 1592.965649][T18138] device syz_tun entered promiscuous mode [ 1592.988724][T18138] device syz_tun left promiscuous mode [ 1593.006167][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1593.035395][T18140] device syz_tun entered promiscuous mode [ 1593.374507][T18140] device syz_tun left promiscuous mode [ 1594.709941][T18147] bridge0: port 3(vlan2) entered blocking state [ 1594.731773][T18147] bridge0: port 3(vlan2) entered disabled state [ 1595.553642][T18180] bridge0: port 3(vlan2) entered blocking state [ 1595.712930][T18180] bridge0: port 3(vlan2) entered disabled state [ 1596.333165][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5361'. [ 1596.344447][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5360'. [ 1596.363560][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5362'. [ 1597.011710][T18211] netlink: 'syz.3.5367': attribute type 4 has an invalid length. [ 1597.020138][T18211] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1597.554032][T18219] netlink: 'syz.2.5369': attribute type 4 has an invalid length. [ 1597.562039][T18219] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5369'. [ 1597.867185][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5374'. [ 1597.964041][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5377'. [ 1598.121302][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1598.172582][T18245] device syz_tun entered promiscuous mode [ 1598.310407][T18245] device syz_tun left promiscuous mode [ 1599.878251][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5386'. [ 1600.136427][T18274] netlink: 'syz.1.5387': attribute type 4 has an invalid length. [ 1600.145085][T18274] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5387'. [ 1603.580374][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5392'. [ 1604.305433][T18302] netlink: 'syz.5.5394': attribute type 4 has an invalid length. [ 1604.313917][T18302] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5394'. [ 1604.865027][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5406'. [ 1604.912252][T18321] device syz_tun entered promiscuous mode [ 1604.923399][T18321] device syz_tun left promiscuous mode [ 1606.203391][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5411'. [ 1606.268124][T18339] netlink: 'syz.1.5405': attribute type 4 has an invalid length. [ 1606.282876][T18339] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5405'. [ 1606.409592][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5415'. [ 1606.956939][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5420'. [ 1606.972404][T18362] device syz_tun entered promiscuous mode [ 1606.980175][T18362] device syz_tun left promiscuous mode [ 1607.668817][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5422'. [ 1607.717608][T18375] device syz_tun entered promiscuous mode [ 1607.729982][T18375] device syz_tun left promiscuous mode [ 1608.901559][T18383] netlink: 'syz.1.5426': attribute type 4 has an invalid length. [ 1608.910116][T18383] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1614.016746][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1614.026833][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1614.065767][T18424] device syz_tun entered promiscuous mode [ 1614.078621][T18424] device syz_tun left promiscuous mode [ 1614.690567][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5445'. [ 1614.721217][T18440] device syz_tun entered promiscuous mode [ 1614.730673][T18440] device syz_tun left promiscuous mode [ 1614.990630][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5448'. [ 1615.290173][T18460] netlink: 'syz.3.5452': attribute type 4 has an invalid length. [ 1615.298554][T18460] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5452'. [ 1615.640243][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5455'. [ 1615.666868][T18468] device syz_tun entered promiscuous mode [ 1615.675475][T18468] device syz_tun left promiscuous mode [ 1616.238867][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'. [ 1616.261083][T18476] device syz_tun entered promiscuous mode [ 1616.269780][T18476] device syz_tun left promiscuous mode [ 1616.686282][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5466'. [ 1618.747751][T18530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1619.322941][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1619.347322][T18537] device syz_tun entered promiscuous mode [ 1619.356632][T18537] device syz_tun left promiscuous mode [ 1619.635450][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5484'. [ 1620.263385][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5495'. [ 1621.168697][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5496'. [ 1621.787029][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5500'. [ 1621.841407][T18591] device syz_tun entered promiscuous mode [ 1621.867838][T18591] device syz_tun left promiscuous mode [ 1621.887606][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5498'. [ 1621.912382][T18589] device syz_tun entered promiscuous mode [ 1621.922801][T18589] device syz_tun left promiscuous mode [ 1622.340266][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5506'. [ 1622.587160][T18612] netlink: 'syz.7.5507': attribute type 4 has an invalid length. [ 1622.595198][T18612] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5507'. [ 1623.391768][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1625.013982][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5520'. [ 1625.040099][T18645] device syz_tun entered promiscuous mode [ 1625.048541][T18645] device syz_tun left promiscuous mode [ 1625.086122][T18647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5518'. [ 1625.123349][T18647] device syz_tun entered promiscuous mode [ 1625.135810][T18647] device syz_tun left promiscuous mode [ 1626.014336][T18680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1627.420495][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1627.461434][T18699] device syz_tun entered promiscuous mode [ 1627.475144][T18699] device syz_tun left promiscuous mode [ 1628.278208][T18709] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1629.680133][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5552'. [ 1629.980813][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5557'. [ 1630.008956][T18746] device syz_tun entered promiscuous mode [ 1630.020297][T18746] device syz_tun left promiscuous mode [ 1630.975044][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5567'. [ 1631.362654][T18778] netlink: 'syz.3.5570': attribute type 4 has an invalid length. [ 1631.383132][T18778] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5570'. [ 1631.705955][T18789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5574'. [ 1633.758536][T18800] bridge0: port 3(vlan2) entered blocking state [ 1633.766502][T18800] bridge0: port 3(vlan2) entered disabled state [ 1634.358564][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1634.385096][T18826] device syz_tun entered promiscuous mode [ 1634.396352][T18826] device syz_tun left promiscuous mode [ 1634.489184][T18825] netlink: 'syz.7.5586': attribute type 4 has an invalid length. [ 1634.498072][T18825] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5586'. [ 1635.274785][T18840] bridge0: port 3(vlan2) entered blocking state [ 1635.281490][T18840] bridge0: port 3(vlan2) entered disabled state [ 1635.453330][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5596'. [ 1635.479509][T18852] device syz_tun entered promiscuous mode [ 1635.663929][T18852] device syz_tun left promiscuous mode [ 1635.965933][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5598'. [ 1636.136175][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5599'. [ 1636.212506][T18866] device syz_tun entered promiscuous mode [ 1636.295507][T18866] device syz_tun left promiscuous mode [ 1636.547436][T18873] netlink: 'syz.3.5603': attribute type 4 has an invalid length. [ 1636.555373][T18873] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1636.642065][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1636.727396][T18889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5608'. [ 1636.740226][T18889] device syz_tun entered promiscuous mode [ 1636.746969][T18889] device syz_tun left promiscuous mode [ 1637.080184][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5609'. [ 1637.649331][T18904] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5613'. [ 1637.677737][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5612'. [ 1638.483283][T18916] netlink: 'syz.2.5617': attribute type 4 has an invalid length. [ 1638.491683][T18916] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5617'. [ 1638.592543][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1638.621556][T18924] device syz_tun entered promiscuous mode [ 1638.632707][T18924] device syz_tun left promiscuous mode [ 1638.950385][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1639.260675][T18938] device syz_tun entered promiscuous mode [ 1639.273976][T18938] device syz_tun left promiscuous mode [ 1639.479152][T18949] device syz_tun entered promiscuous mode [ 1639.486610][T18949] device syz_tun left promiscuous mode [ 1641.328871][T18982] __nla_validate_parse: 6 callbacks suppressed [ 1641.328894][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5637'. [ 1641.344466][T18983] netlink: 'syz.2.5638': attribute type 4 has an invalid length. [ 1641.352773][T18983] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5638'. [ 1641.364652][T18985] device syz_tun entered promiscuous mode [ 1641.446258][T18985] device syz_tun left promiscuous mode [ 1641.830573][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5651'. [ 1642.648478][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1642.682108][T19024] device syz_tun entered promiscuous mode [ 1642.689441][T19024] device syz_tun left promiscuous mode [ 1642.719639][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1643.365689][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5655'. [ 1643.424440][T19032] device syz_tun entered promiscuous mode [ 1643.994280][T19032] device syz_tun left promiscuous mode [ 1644.110127][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5662'. [ 1644.344302][T19067] tipc: Started in network mode [ 1644.349736][T19067] tipc: Node identity ac14141b, cluster identity 4711 [ 1644.357788][T19067] tipc: New replicast peer: 255.255.255.255 [ 1644.364795][T19067] tipc: Enabled bearer , priority 10 [ 1646.517613][ T9297] tipc: Node number set to 2886997019 [ 1646.574884][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5670'. [ 1646.689699][T19072] bridge0: port 3(vlan2) entered blocking state [ 1646.696711][T19072] bridge0: port 3(vlan2) entered disabled state [ 1646.716604][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5674'. [ 1646.730134][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5671'. [ 1646.742112][T19082] device syz_tun entered promiscuous mode [ 1646.755166][T19082] device syz_tun left promiscuous mode [ 1646.989302][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5677'. [ 1647.031648][T19096] device syz_tun entered promiscuous mode [ 1647.048200][T19096] device syz_tun left promiscuous mode [ 1647.517791][T19079] syz.2.5669 (19079) used greatest stack depth: 19392 bytes left [ 1647.601356][T19107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45182 sclass=netlink_route_socket pid=19107 comm=syz.5.5681 [ 1648.286822][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5688'. [ 1648.344690][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1648.416671][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5691'. [ 1648.428863][T19133] device syz_tun entered promiscuous mode [ 1648.435494][T19133] device syz_tun left promiscuous mode [ 1648.834721][T19139] bridge0: port 3(vlan2) entered blocking state [ 1648.841482][T19139] bridge0: port 3(vlan2) entered disabled state [ 1648.893581][T19146] overlayfs: './file1' not a directory [ 1649.077807][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5693'. [ 1649.120432][T19149] device syz_tun entered promiscuous mode [ 1649.133267][T19149] device syz_tun left promiscuous mode [ 1649.855639][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5699'. [ 1650.407711][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1652.392450][T19214] __nla_validate_parse: 3 callbacks suppressed [ 1652.392475][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5716'. [ 1652.413838][T19211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5719'. [ 1652.542209][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5718'. [ 1652.664758][T19226] bridge0: port 3(vlan2) entered blocking state [ 1652.687036][T19226] bridge0: port 3(vlan2) entered disabled state [ 1653.040577][T19235] netlink: 'syz.5.5724': attribute type 4 has an invalid length. [ 1653.048703][T19235] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5724'. [ 1653.361910][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5725'. [ 1653.374096][T19239] device syz_tun entered promiscuous mode [ 1653.380883][T19239] device syz_tun left promiscuous mode [ 1653.562358][T19241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5726'. [ 1653.589690][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5727'. [ 1654.645463][T19293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5746'. [ 1654.657200][T19293] device syz_tun entered promiscuous mode [ 1654.663982][T19293] device syz_tun left promiscuous mode [ 1655.267661][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1655.308727][T19299] device syz_tun entered promiscuous mode [ 1655.323347][T19299] device syz_tun left promiscuous mode [ 1656.277035][T19331] netlink: 'syz.1.5759': attribute type 4 has an invalid length. [ 1656.284923][T19331] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5759'. [ 1657.577271][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1657.642939][T19349] tipc: Started in network mode [ 1657.648956][T19349] tipc: Node identity ac14140f, cluster identity 4711 [ 1657.656971][T19349] tipc: New replicast peer: 255.255.255.255 [ 1657.664975][T19349] tipc: Enabled bearer , priority 10 [ 1658.033354][T19347] device syz_tun entered promiscuous mode [ 1658.062488][T19347] device syz_tun left promiscuous mode [ 1658.557760][T19368] bridge0: port 3(vlan2) entered blocking state [ 1658.568899][T19368] bridge0: port 3(vlan2) entered disabled state [ 1658.627183][T19370] netlink: 'syz.5.5772': attribute type 4 has an invalid length. [ 1658.635886][T19370] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5772'. [ 1659.061335][T13169] tipc: Node number set to 2886997007 [ 1659.401917][T19385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36624 sclass=netlink_route_socket pid=19385 comm=syz.7.5779 [ 1659.655914][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1659.655930][ T28] audit: type=1400 audit(1761082751.449:598): avc: denied { map } for pid=19382 comm="syz.3.5778" path="socket:[61309]" dev="sockfs" ino=61309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1659.749832][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5783'. [ 1660.807248][T19423] netlink: 'syz.2.5789': attribute type 4 has an invalid length. [ 1660.815747][T19423] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5789'. [ 1661.307810][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5792'. [ 1661.340898][T19433] device syz_tun entered promiscuous mode [ 1661.350589][T19433] device syz_tun left promiscuous mode [ 1661.648475][T19435] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1662.811122][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1662.840534][T19452] device syz_tun entered promiscuous mode [ 1662.849840][T19452] device syz_tun left promiscuous mode [ 1663.713705][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5804'. [ 1663.726335][T19470] device syz_tun entered promiscuous mode [ 1663.733290][T19470] device syz_tun left promiscuous mode [ 1664.324185][T19471] netlink: 'syz.5.5801': attribute type 4 has an invalid length. [ 1664.332629][T19471] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5801'. [ 1664.892269][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5808'. [ 1665.001138][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1665.907411][ T28] audit: type=1400 audit(1761082757.699:599): avc: denied { bind } for pid=19501 comm="syz.7.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1665.935177][ T28] audit: type=1326 audit(1761082757.729:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19501 comm="syz.7.5817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bd18efc9 code=0x0 [ 1666.165308][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5816'. [ 1666.481991][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5818'. [ 1666.533246][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5817'. [ 1667.137429][T19529] netlink: 'syz.1.5819': attribute type 4 has an invalid length. [ 1667.145954][T19529] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1667.613745][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5825'. [ 1668.705447][ T28] audit: type=1400 audit(1761082760.079:601): avc: denied { accept } for pid=19549 comm="syz.5.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1669.386950][T19567] __nla_validate_parse: 1 callbacks suppressed [ 1669.386972][T19567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1669.533996][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5833'. [ 1669.546886][T19566] device syz_tun entered promiscuous mode [ 1669.554632][T19566] device syz_tun left promiscuous mode [ 1670.084885][T19569] netlink: 'syz.7.5830': attribute type 4 has an invalid length. [ 1670.093242][T19569] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5830'. [ 1670.103588][T19577] netlink: 'syz.2.5832': attribute type 4 has an invalid length. [ 1670.111822][T19577] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1670.195161][T19581] netlink: 'syz.1.5829': attribute type 32 has an invalid length. [ 1670.831239][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1670.858253][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5843'. [ 1670.916940][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5841'. [ 1670.929953][T19597] device syz_tun entered promiscuous mode [ 1670.937136][T19597] device syz_tun left promiscuous mode [ 1671.121276][T19604] tipc: Enabling of bearer rejected, already enabled [ 1672.173630][T19606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.180947][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.189440][T19606] device bridge_slave_0 entered promiscuous mode [ 1672.196980][T19606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.231721][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.239360][T19606] device bridge_slave_1 entered promiscuous mode [ 1672.658263][T19629] netlink: 'syz.5.5848': attribute type 4 has an invalid length. [ 1672.666103][T19629] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5848'. [ 1672.675310][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5850'. [ 1672.699148][T19630] device syz_tun entered promiscuous mode [ 1672.711269][T19630] device syz_tun left promiscuous mode [ 1673.060558][T19606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.067697][T19606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.075255][T19606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.082554][T19606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.124217][T15392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.132726][T15392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.142515][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1673.152789][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1673.246138][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1673.257896][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1673.268397][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1673.279782][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1673.368372][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1673.552523][T15392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.559840][T15392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.567540][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1673.586919][T15392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.594170][T15392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.619920][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1673.628200][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1673.639926][T19606] device veth0_vlan entered promiscuous mode [ 1673.647605][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5858'. [ 1673.659061][T19651] tipc: Started in network mode [ 1673.664406][T19651] tipc: Node identity ac14140f, cluster identity 4711 [ 1673.671330][T19651] tipc: New replicast peer: 255.255.255.255 [ 1673.677772][T19651] tipc: Enabled bearer , priority 10 [ 1673.692364][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1673.701764][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1673.759545][T19606] device veth1_macvtap entered promiscuous mode [ 1673.771972][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1673.780431][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1673.790227][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1673.810531][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1673.819578][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1673.851487][T19658] netlink: 'syz.1.5857': attribute type 4 has an invalid length. [ 1674.041112][ T28] audit: type=1400 audit(1761082765.839:602): avc: denied { ioctl } for pid=19667 comm="syz.2.5861" path="socket:[62925]" dev="sockfs" ino=62925 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1674.073178][T19668] FAULT_INJECTION: forcing a failure. [ 1674.073178][T19668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.087594][T19505] tipc: Disabling bearer [ 1674.094806][T19505] tipc: Left network mode [ 1674.128846][T19668] CPU: 0 PID: 19668 Comm: syz.2.5861 Not tainted syzkaller #0 [ 1674.136804][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1674.147361][T19668] Call Trace: [ 1674.150841][T19668] [ 1674.153982][T19668] __dump_stack+0x21/0x24 [ 1674.158700][T19668] dump_stack_lvl+0xee/0x150 [ 1674.163512][T19668] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1674.169193][T19668] ? _parse_integer+0x2a/0x40 [ 1674.174015][T19668] dump_stack+0x15/0x24 [ 1674.178349][T19668] should_fail_ex+0x3d4/0x520 [ 1674.183426][T19668] should_fail+0xb/0x10 [ 1674.188185][T19668] should_fail_usercopy+0x1a/0x20 [ 1674.193605][T19668] _copy_from_user+0x1e/0xc0 [ 1674.198691][T19668] ___sys_sendmsg+0x155/0x290 [ 1674.203512][T19668] ? __sys_sendmsg+0x270/0x270 [ 1674.209027][T19668] ? __kasan_check_write+0x14/0x20 [ 1674.214523][T19668] ? proc_fail_nth_write+0x17a/0x1f0 [ 1674.219947][T19668] ? vfs_write+0x9d6/0xca0 [ 1674.224558][T19668] ? __fdget+0x19c/0x220 [ 1674.228960][T19668] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1674.234355][T19668] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1674.240423][T19668] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1674.246632][T19668] x64_sys_call+0x171/0x9a0 [ 1674.251283][T19668] do_syscall_64+0x4c/0xa0 [ 1674.255783][T19668] ? clear_bhb_loop+0x30/0x80 [ 1674.260603][T19668] ? clear_bhb_loop+0x30/0x80 [ 1674.264369][T19670] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1674.265854][T19668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1674.281118][T19668] RIP: 0033:0x7fb9b7b8efc9 [ 1674.285732][T19668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.305738][T19668] RSP: 002b:00007fb9b65f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.314447][T19668] RAX: ffffffffffffffda RBX: 00007fb9b7de5fa0 RCX: 00007fb9b7b8efc9 [ 1674.322798][T19668] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1674.331400][T19668] RBP: 00007fb9b65f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.340045][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.348491][T19668] R13: 00007fb9b7de6038 R14: 00007fb9b7de5fa0 R15: 00007fff03526a38 [ 1674.357218][T19668] [ 1674.708835][ T9235] tipc: Node number set to 2886997007 [ 1674.735663][T19680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.743722][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.751831][T19680] device bridge_slave_0 entered promiscuous mode [ 1674.779361][T19680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.799137][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.837546][T19680] device bridge_slave_1 entered promiscuous mode [ 1675.057831][T19505] device bridge_slave_1 left promiscuous mode [ 1675.064938][T19505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.073406][T19505] device bridge_slave_0 left promiscuous mode [ 1675.079948][T19505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.089897][T19505] device veth1_macvtap left promiscuous mode [ 1675.096324][T19505] device veth0_vlan left promiscuous mode [ 1675.387533][T19709] loop2: detected capacity change from 0 to 256 [ 1675.394901][T19709] FAT-fs (loop2): Unrecognized mount option "fsuui" or missing value [ 1676.148329][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1676.167352][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1676.177470][T19740] loop2: detected capacity change from 0 to 512 [ 1676.211711][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1676.222712][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1676.231987][T15392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.232246][T19740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1676.239213][T15392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.240550][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1676.265230][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1676.274211][T15392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.276879][T19740] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1676.281531][T15392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.300379][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1676.325631][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1676.334540][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1676.345065][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1676.354254][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1676.393587][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1676.402398][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1676.413635][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1676.421863][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1676.431055][T19680] device veth0_vlan entered promiscuous mode [ 1676.437725][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1676.445627][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1676.460549][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1676.470770][T19680] device veth1_macvtap entered promiscuous mode [ 1676.482592][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1676.491460][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1676.502051][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1676.511450][T15392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1676.620713][T19606] EXT4-fs (loop2): unmounting filesystem. [ 1676.642822][ T28] audit: type=1400 audit(1761082768.439:603): avc: denied { ioctl } for pid=19752 comm="syz.2.5888" path="socket:[63189]" dev="sockfs" ino=63189 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1676.642876][T15392] Bluetooth: hci0: Frame reassembly failed (-84) [ 1676.744735][T19755] netlink: 'syz.3.5865': attribute type 4 has an invalid length. [ 1676.752942][T19755] __nla_validate_parse: 1 callbacks suppressed [ 1676.752976][T19755] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1677.237888][T19765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1678.542253][T19776] device syz_tun entered promiscuous mode [ 1678.549685][T19776] device syz_tun left promiscuous mode [ 1678.718798][ T585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1678.725206][T19754] Bluetooth: hci0: command 0x1003 tx timeout [ 1678.759857][T19753] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1678.777633][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1678.900026][T19505] device bridge_slave_1 left promiscuous mode [ 1678.908582][T19505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.011630][T19505] device bridge_slave_0 left promiscuous mode [ 1679.028163][T19505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.028205][T19786] loop2: detected capacity change from 0 to 256 [ 1679.057026][T19505] device veth1_macvtap left promiscuous mode [ 1679.336502][T19505] device veth0_vlan left promiscuous mode [ 1679.382197][T19786] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1679.786060][ T28] audit: type=1400 audit(1761082771.549:604): avc: denied { write } for pid=19785 comm="syz.2.5899" path="socket:[63217]" dev="sockfs" ino=63217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1679.935592][T19802] FAULT_INJECTION: forcing a failure. [ 1679.935592][T19802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.950220][T19802] CPU: 0 PID: 19802 Comm: syz.2.5902 Not tainted syzkaller #0 [ 1679.957792][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1679.968030][T19802] Call Trace: [ 1679.971346][T19802] [ 1679.974403][T19802] __dump_stack+0x21/0x24 [ 1679.978752][T19802] dump_stack_lvl+0xee/0x150 [ 1679.983456][T19802] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1679.989068][T19802] dump_stack+0x15/0x24 [ 1679.993444][T19802] should_fail_ex+0x3d4/0x520 [ 1679.998345][T19802] should_fail+0xb/0x10 [ 1680.002526][T19802] should_fail_usercopy+0x1a/0x20 [ 1680.007588][T19802] _copy_from_user+0x1e/0xc0 [ 1680.012415][T19802] __sys_bpf+0x277/0x780 [ 1680.016726][T19802] ? bpf_link_show_fdinfo+0x320/0x320 [ 1680.022591][T19802] ? __cfi_ksys_write+0x10/0x10 [ 1680.027556][T19802] ? debug_smp_processor_id+0x17/0x20 [ 1680.032952][T19802] __x64_sys_bpf+0x7c/0x90 [ 1680.037600][T19802] x64_sys_call+0x488/0x9a0 [ 1680.042229][T19802] do_syscall_64+0x4c/0xa0 [ 1680.046834][T19802] ? clear_bhb_loop+0x30/0x80 [ 1680.052207][T19802] ? clear_bhb_loop+0x30/0x80 [ 1680.057129][T19802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.063314][T19802] RIP: 0033:0x7fb9b7b8efc9 [ 1680.067760][T19802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.089411][T19802] RSP: 002b:00007fb9b65f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1680.098192][T19802] RAX: ffffffffffffffda RBX: 00007fb9b7de5fa0 RCX: 00007fb9b7b8efc9 [ 1680.106544][T19802] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1680.114752][T19802] RBP: 00007fb9b65f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.123664][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.132869][T19802] R13: 00007fb9b7de6038 R14: 00007fb9b7de5fa0 R15: 00007fff03526a38 [ 1680.141127][T19802] [ 1680.798786][ C1] ================================================================== [ 1680.807256][ C1] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 1680.814445][ C1] Write of size 8 at addr ffff888144700a00 by task syz-executor/10990 [ 1680.822620][ C1] [ 1680.824964][ C1] CPU: 1 PID: 10990 Comm: syz-executor Not tainted syzkaller #0 [ 1680.832811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1680.843325][ C1] Call Trace: [ 1680.846791][ C1] [ 1680.849767][ C1] __dump_stack+0x21/0x24 [ 1680.854208][ C1] dump_stack_lvl+0xee/0x150 [ 1680.858918][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1680.864061][ C1] ? update_rq_clock+0x536/0x5c0 [ 1680.869158][ C1] ? __run_timers+0x32b/0x9a0 [ 1680.873899][ C1] print_address_description+0x71/0x200 [ 1680.879582][ C1] print_report+0x4a/0x60 [ 1680.884217][ C1] kasan_report+0x122/0x150 [ 1680.888828][ C1] ? __run_timers+0x32b/0x9a0 [ 1680.893692][ C1] __asan_report_store8_noabort+0x17/0x20 [ 1680.899453][ C1] __run_timers+0x32b/0x9a0 [ 1680.904219][ C1] ? sched_clock+0x9/0x10 [ 1680.908571][ C1] ? sched_clock_cpu+0x6e/0x250 [ 1680.913511][ C1] ? calc_index+0x200/0x200 [ 1680.918285][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1680.923582][ C1] run_timer_softirq+0x6a/0xf0 [ 1680.928527][ C1] handle_softirqs+0x1d7/0x600 [ 1680.933429][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1680.938657][ C1] __irq_exit_rcu+0x52/0xf0 [ 1680.943353][ C1] irq_exit_rcu+0x9/0x10 [ 1680.947633][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1680.953292][ C1] [ 1680.956259][ C1] [ 1680.959195][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1680.965212][ C1] RIP: 0010:__kasan_check_write+0x0/0x20 [ 1680.971187][ C1] Code: 48 8b 4d 08 31 d2 e8 df e7 ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef <55> 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 ac e7 ff ff 5d c3 [ 1680.991998][ C1] RSP: 0018:ffffc9000581f698 EFLAGS: 00000293 [ 1680.998096][ C1] RAX: ffffffff81a8c0a7 RBX: ffffea0004a51008 RCX: ffff88811839a880 [ 1681.006505][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0004a51034 [ 1681.014749][ C1] RBP: ffffc9000581f950 R08: dffffc0000000000 R09: fffff94000936b86 [ 1681.022727][ C1] R10: fffff94000936b86 R11: 1ffffd4000936b85 R12: dffffc0000000000 [ 1681.030703][ C1] R13: 8000000129440007 R14: ffffea0004a51000 R15: ffffea0004a51000 [ 1681.038852][ C1] ? copy_page_range+0x10f7/0x2850 [ 1681.043999][ C1] ? copy_page_range+0x1117/0x2850 [ 1681.049172][ C1] ? __cfi_copy_page_range+0x10/0x10 [ 1681.054687][ C1] copy_mm+0xf06/0x1a10 [ 1681.058951][ C1] ? copy_signal+0x630/0x630 [ 1681.063577][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 1681.068269][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 1681.073552][ C1] ? __init_rwsem+0x12c/0x240 [ 1681.078267][ C1] ? copy_signal+0x4ea/0x630 [ 1681.082892][ C1] copy_process+0x12b4/0x3480 [ 1681.087623][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 1681.093060][ C1] ? idle_dummy+0x10/0x10 [ 1681.097517][ C1] ? __count_memcg_events+0x8f/0xe0 [ 1681.102780][ C1] kernel_clone+0x23a/0x810 [ 1681.107311][ C1] ? __cfi_kernel_clone+0x10/0x10 [ 1681.112444][ C1] __x64_sys_clone+0x168/0x1b0 [ 1681.117520][ C1] ? __cfi___x64_sys_clone+0x10/0x10 [ 1681.123015][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1681.129442][ C1] x64_sys_call+0x990/0x9a0 [ 1681.134004][ C1] do_syscall_64+0x4c/0xa0 [ 1681.138687][ C1] ? clear_bhb_loop+0x30/0x80 [ 1681.143403][ C1] ? clear_bhb_loop+0x30/0x80 [ 1681.148487][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1681.154852][ C1] RIP: 0033:0x7f44bd185713 [ 1681.159543][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1681.179884][ C1] RSP: 002b:00007fffb2fd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1681.189221][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44bd185713 [ 1681.197320][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1681.205415][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1681.213490][ C1] R10: 000055559452f7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1681.222179][ C1] R13: 00000000000927c0 R14: 000000000019a57b R15: 00007fffb2fd7320 [ 1681.230464][ C1] [ 1681.233587][ C1] [ 1681.235934][ C1] Allocated by task 19753: [ 1681.240364][ C1] kasan_set_track+0x4b/0x70 [ 1681.245047][ C1] kasan_save_alloc_info+0x25/0x30 [ 1681.250167][ C1] __kasan_kmalloc+0x95/0xb0 [ 1681.254803][ C1] __kmalloc+0xb1/0x1e0 [ 1681.259003][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 1681.264052][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 1681.269217][ C1] tty_ioctl+0x8ef/0xc60 [ 1681.273718][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 1681.278508][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1681.283174][ C1] x64_sys_call+0x58b/0x9a0 [ 1681.287795][ C1] do_syscall_64+0x4c/0xa0 [ 1681.292210][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1681.298286][ C1] [ 1681.300620][ C1] Freed by task 19753: [ 1681.305210][ C1] kasan_set_track+0x4b/0x70 [ 1681.309949][ C1] kasan_save_free_info+0x31/0x50 [ 1681.315187][ C1] ____kasan_slab_free+0x132/0x180 [ 1681.320405][ C1] __kasan_slab_free+0x11/0x20 [ 1681.325281][ C1] slab_free_freelist_hook+0xc2/0x190 [ 1681.330669][ C1] __kmem_cache_free+0xb7/0x1b0 [ 1681.335568][ C1] kfree+0x6f/0xf0 [ 1681.339332][ C1] hci_release_dev+0x12a3/0x13b0 [ 1681.344368][ C1] bt_host_release+0x82/0x90 [ 1681.349065][ C1] device_release+0xa4/0x1d0 [ 1681.353749][ C1] kobject_put+0x19d/0x280 [ 1681.358262][ C1] put_device+0x1f/0x30 [ 1681.362443][ C1] hci_dev_cmd+0x265/0x720 [ 1681.367151][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 1681.372109][ C1] sock_do_ioctl+0x101/0x310 [ 1681.376892][ C1] sock_ioctl+0x4d8/0x6e0 [ 1681.381389][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 1681.386077][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1681.390862][ C1] x64_sys_call+0x58b/0x9a0 [ 1681.395528][ C1] do_syscall_64+0x4c/0xa0 [ 1681.400049][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1681.406234][ C1] [ 1681.408581][ C1] Last potentially related work creation: [ 1681.414505][ C1] kasan_save_stack+0x3a/0x60 [ 1681.419303][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 1681.424868][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1681.430938][ C1] insert_work+0x51/0x300 [ 1681.435555][ C1] __queue_work+0x9b1/0xd30 [ 1681.440147][ C1] queue_work_on+0xd2/0x140 [ 1681.444668][ C1] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 1681.449887][ C1] hci_cmd_sync_status+0x53/0x120 [ 1681.455201][ C1] hci_dev_cmd+0x628/0x720 [ 1681.460018][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 1681.464906][ C1] sock_do_ioctl+0x101/0x310 [ 1681.469701][ C1] sock_ioctl+0x4d8/0x6e0 [ 1681.474392][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 1681.479079][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1681.483707][ C1] x64_sys_call+0x58b/0x9a0 [ 1681.488936][ C1] do_syscall_64+0x4c/0xa0 [ 1681.493434][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1681.499732][ C1] [ 1681.502280][ C1] Second to last potentially related work creation: [ 1681.509177][ C1] kasan_save_stack+0x3a/0x60 [ 1681.514055][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 1681.519444][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1681.525382][ C1] insert_work+0x51/0x300 [ 1681.529725][ C1] __queue_work+0x9b1/0xd30 [ 1681.534502][ C1] queue_work_on+0xd2/0x140 [ 1681.539021][ C1] hci_cmd_timeout+0x191/0x200 [ 1681.543898][ C1] process_one_work+0x71f/0xc40 [ 1681.548879][ C1] worker_thread+0xa29/0x11f0 [ 1681.553678][ C1] kthread+0x281/0x320 [ 1681.557923][ C1] ret_from_fork+0x1f/0x30 [ 1681.562339][ C1] [ 1681.564679][ C1] The buggy address belongs to the object at ffff888144700000 [ 1681.564679][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 1681.579515][ C1] The buggy address is located 2560 bytes inside of [ 1681.579515][ C1] 8192-byte region [ffff888144700000, ffff888144702000) [ 1681.593025][ C1] [ 1681.595477][ C1] The buggy address belongs to the physical page: [ 1681.601970][ C1] page:ffffea000511c000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144700 [ 1681.612235][ C1] head:ffffea000511c000 order:3 compound_mapcount:0 compound_pincount:0 [ 1681.620747][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 1681.626928][ C1] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 1681.635692][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1681.644819][ C1] page dumped because: kasan: bad access detected [ 1681.651370][ C1] page_owner tracks the page as allocated [ 1681.657090][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 19680, tgid 19680 (syz-executor), ts 1676114573031, free_ts 1676041533150 [ 1681.680727][ C1] post_alloc_hook+0x1f5/0x210 [ 1681.685614][ C1] prep_new_page+0x1c/0x110 [ 1681.690405][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 1681.695974][ C1] __alloc_pages+0x1c3/0x450 [ 1681.700575][ C1] alloc_slab_page+0x6e/0xf0 [ 1681.705260][ C1] new_slab+0x98/0x3d0 [ 1681.709399][ C1] ___slab_alloc+0x6bd/0xb20 [ 1681.714093][ C1] __slab_alloc+0x5e/0xa0 [ 1681.718432][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 1681.724011][ C1] __kmalloc_node+0xa1/0x1e0 [ 1681.729471][ C1] kvmalloc_node+0x294/0x480 [ 1681.734101][ C1] pfifo_fast_init+0x3af/0x7a0 [ 1681.739759][ C1] qdisc_create_dflt+0x150/0x3b0 [ 1681.745194][ C1] dev_activate+0x2cf/0x1040 [ 1681.749917][ C1] __dev_open+0x3ce/0x4f0 [ 1681.755000][ C1] __dev_change_flags+0x21b/0x6b0 [ 1681.760225][ C1] page last free stack trace: [ 1681.765100][ C1] free_unref_page_prepare+0x742/0x750 [ 1681.771099][ C1] free_unref_page+0x8f/0x530 [ 1681.775902][ C1] __free_pages+0x67/0x100 [ 1681.780792][ C1] __free_slab+0xca/0x1a0 [ 1681.785236][ C1] __unfreeze_partials+0x160/0x190 [ 1681.790570][ C1] put_cpu_partial+0xa9/0x100 [ 1681.795621][ C1] __slab_free+0x1c4/0x280 [ 1681.800064][ C1] ___cache_free+0xbf/0xd0 [ 1681.804531][ C1] qlist_free_all+0xc6/0x140 [ 1681.809219][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 1681.814773][ C1] __kasan_slab_alloc+0x24/0x80 [ 1681.819633][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 1681.825049][ C1] kmem_cache_alloc_node+0x181/0x340 [ 1681.830676][ C1] __alloc_skb+0xea/0x4b0 [ 1681.835472][ C1] mld_newpack+0x13a/0xa10 [ 1681.839941][ C1] add_grhead+0x67/0x300 [ 1681.844244][ C1] [ 1681.846596][ C1] Memory state around the buggy address: [ 1681.852431][ C1] ffff888144700900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1681.860817][ C1] ffff888144700980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1681.869513][ C1] >ffff888144700a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1681.877651][ C1] ^ [ 1681.882141][ C1] ffff888144700a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1681.891278][ C1] ffff888144700b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1681.899609][ C1] ================================================================== [ 1681.907873][ C1] Disabling lock debugging due to kernel taint [ 1681.914463][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1681.926651][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1681.935351][ C1] CPU: 1 PID: 10990 Comm: syz-executor Tainted: G B syzkaller #0 [ 1681.944848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1681.955295][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 1681.961159][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4b 6d 00 49 8b 7d 00 e8 53 d7 [ 1681.981712][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 1681.988266][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811839a880 [ 1681.996525][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1682.004792][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 1682.012961][ C1] R10: ffffed10288e0139 R11: 1ffff110288e0139 R12: dffffc0000000000 [ 1682.021161][ C1] R13: 0000000000000000 R14: ffff8881447009c8 R15: 0000000000000008 [ 1682.029159][ C1] FS: 000055559452f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1682.038274][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1682.044884][ C1] CR2: 00007f44bdf156c0 CR3: 0000000127926000 CR4: 00000000003506a0 [ 1682.052895][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1682.060905][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1682.069306][ C1] Call Trace: [ 1682.072595][ C1] [ 1682.075639][ C1] delayed_work_timer_fn+0x61/0x80 [ 1682.080774][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1682.087169][ C1] call_timer_fn+0x46/0x2a0 [ 1682.092220][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1682.098401][ C1] __run_timers+0x667/0x9a0 [ 1682.103126][ C1] ? calc_index+0x200/0x200 [ 1682.107759][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1682.113173][ C1] run_timer_softirq+0x6a/0xf0 [ 1682.117958][ C1] handle_softirqs+0x1d7/0x600 [ 1682.122836][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1682.128230][ C1] __irq_exit_rcu+0x52/0xf0 [ 1682.132932][ C1] irq_exit_rcu+0x9/0x10 [ 1682.137458][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1682.143207][ C1] [ 1682.146228][ C1] [ 1682.149164][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1682.155168][ C1] RIP: 0010:__kasan_check_write+0x0/0x20 [ 1682.160964][ C1] Code: 48 8b 4d 08 31 d2 e8 df e7 ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef <55> 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 ac e7 ff ff 5d c3 [ 1682.181577][ C1] RSP: 0018:ffffc9000581f698 EFLAGS: 00000293 [ 1682.188221][ C1] RAX: ffffffff81a8c0a7 RBX: ffffea0004a51008 RCX: ffff88811839a880 [ 1682.196517][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0004a51034 [ 1682.204804][ C1] RBP: ffffc9000581f950 R08: dffffc0000000000 R09: fffff94000936b86 [ 1682.213493][ C1] R10: fffff94000936b86 R11: 1ffffd4000936b85 R12: dffffc0000000000 [ 1682.221562][ C1] R13: 8000000129440007 R14: ffffea0004a51000 R15: ffffea0004a51000 [ 1682.229662][ C1] ? copy_page_range+0x10f7/0x2850 [ 1682.235007][ C1] ? copy_page_range+0x1117/0x2850 [ 1682.240163][ C1] ? __cfi_copy_page_range+0x10/0x10 [ 1682.246103][ C1] copy_mm+0xf06/0x1a10 [ 1682.250676][ C1] ? copy_signal+0x630/0x630 [ 1682.255480][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 1682.260276][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 1682.265568][ C1] ? __init_rwsem+0x12c/0x240 [ 1682.270344][ C1] ? copy_signal+0x4ea/0x630 [ 1682.274949][ C1] copy_process+0x12b4/0x3480 [ 1682.279652][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 1682.284957][ C1] ? idle_dummy+0x10/0x10 [ 1682.289327][ C1] ? __count_memcg_events+0x8f/0xe0 [ 1682.294658][ C1] kernel_clone+0x23a/0x810 [ 1682.299198][ C1] ? __cfi_kernel_clone+0x10/0x10 [ 1682.304440][ C1] __x64_sys_clone+0x168/0x1b0 [ 1682.309519][ C1] ? __cfi___x64_sys_clone+0x10/0x10 [ 1682.315127][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1682.321308][ C1] x64_sys_call+0x990/0x9a0 [ 1682.325995][ C1] do_syscall_64+0x4c/0xa0 [ 1682.330502][ C1] ? clear_bhb_loop+0x30/0x80 [ 1682.335380][ C1] ? clear_bhb_loop+0x30/0x80 [ 1682.340077][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.346192][ C1] RIP: 0033:0x7f44bd185713 [ 1682.350702][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1682.371192][ C1] RSP: 002b:00007fffb2fd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1682.379805][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44bd185713 [ 1682.387879][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1682.395953][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1682.404469][ C1] R10: 000055559452f7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1682.412624][ C1] R13: 00000000000927c0 R14: 000000000019a57b R15: 00007fffb2fd7320 [ 1682.420801][ C1] [ 1682.424024][ C1] Modules linked in: [ 1682.428071][ C1] ---[ end trace 0000000000000000 ]--- [ 1682.433552][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 1682.438871][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4b 6d 00 49 8b 7d 00 e8 53 d7 [ 1682.458751][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 1682.465113][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811839a880 [ 1682.473289][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1682.481360][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 1682.489690][ C1] R10: ffffed10288e0139 R11: 1ffff110288e0139 R12: dffffc0000000000 [ 1682.497960][ C1] R13: 0000000000000000 R14: ffff8881447009c8 R15: 0000000000000008 [ 1682.506128][ C1] FS: 000055559452f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1682.515256][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1682.521959][ C1] CR2: 00007f44bdf156c0 CR3: 0000000127926000 CR4: 00000000003506a0 [ 1682.530132][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1682.538208][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1682.546451][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1682.554464][ C1] Kernel Offset: disabled [ 1682.558905][ C1] Rebooting in 86400 seconds..