last executing test programs: 16m54.334403328s ago: executing program 32 (id=100): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write$selinux_context(r0, 0x0, 0x0) 16m42.232505108s ago: executing program 33 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 16m27.450278491s ago: executing program 34 (id=476): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x42, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 16m2.440725244s ago: executing program 35 (id=841): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x103f81af530ab711, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x4fed0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 15m18.592026845s ago: executing program 36 (id=1560): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') r2 = socket(0x26, 0x1, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1ac) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r8) 15m4.138752282s ago: executing program 37 (id=1779): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 14m38.054622973s ago: executing program 38 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000900)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 14m3.446421427s ago: executing program 39 (id=2723): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pwritev2(0xffffffffffffffff, &(0x7f0000006580)=[{&(0x7f00000063c0)="b2bc0a09961982608b3bc6", 0xb}], 0x1, 0x4, 0x80000001, 0x0) 12m14.920128445s ago: executing program 40 (id=4267): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 12m11.010978776s ago: executing program 41 (id=4310): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xb4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) epoll_create1(0x0) 9m9.818531728s ago: executing program 42 (id=7200): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000dc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9m1.001153647s ago: executing program 43 (id=7272): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x1fd, {0x0, 0xa}, {0x1}, @const={0xffff, {0x1, 0x8, 0x4, 0x881}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000a00)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001800010000d10000be000000346a0000000069b31570497f0800000004000000", @ANYRES32=r10, @ANYBLOB], 0x28}}, 0x0) statx(r1, 0x0, 0x2000, 0x10, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40094}}, {{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000003461df452a37189ee26bb01a90199815", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES8, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c0000000000000001000000010000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x4}}, {{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e40)="dbacb45d7aa2950f98df09a21873ab45672d341eff9be418ce085eac77f4873a09d4c38fee09c1b13f7c218b43ed777870351e1c21e2efdbb12c484620b4d210d1b5e291e4", 0x45}, {&(0x7f0000000f00)="abba8194376fb0be", 0x8}, {0x0}, {&(0x7f0000000f80)="9dfc805fb8611d8204c05fd4f5727c7b1f6bcc8a4b38ed052f71ef027a", 0x1d}], 0x4, 0x0, 0x0, 0x4008011}}], 0x4, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r12, &(0x7f00000002c0)={0x27}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 8m58.294471319s ago: executing program 44 (id=7297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 8m53.540752154s ago: executing program 45 (id=7332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) clock_settime(0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket(0x2, 0x80805, 0x0) unshare(0x22020400) sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(r8, &(0x7f0000000100), &(0x7f0000000340)=@v2={0x3, 0x3, 0x0, 0x4, 0x91, "40b85917e48dba2da544ca4b8f25f6a109b6a9b1d8cc846a9ee19f6e2099dac6046c984180a0884274c5f6d6ed5e594c40069eed05c8ddb6fb1ed30f6d59cbca019440f18286997ced80a021983508e3387485170a4aeeee38f89609a0fd6b91ab0361144a5a7ea88700212443a414013309e14b33d861153c941dfaef3a02c73e16398681c4977e814f53d3d0125eb77e"}, 0x9a, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m52.350647413s ago: executing program 46 (id=7343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf79}, {}, {}, [@tail_call, @call={0x85, 0x0, 0x0, 0x27}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x9b, &(0x7f0000000300)=""/155, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x1, 0x3}, {0x3, 0x1, 0xc, 0x6}, {0x5, 0x4, 0x1, 0x8}, {0x3, 0x5, 0x10}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) msgsnd(0x0, 0x0, 0x8, 0x0) 8m43.260323036s ago: executing program 47 (id=7433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) (fail_nth: 9) 8m40.737398515s ago: executing program 0 (id=7464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x7e7b, 0x7}, 0x0, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 8m39.745765381s ago: executing program 0 (id=7479): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 8m38.919331254s ago: executing program 0 (id=7486): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) r3 = dup(r1) r4 = open(0x0, 0x40542, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x19) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x418) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x4db1, 0x2, 0x2, 0xcd, 0x0, r6}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r9 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 8m38.477861221s ago: executing program 0 (id=7491): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x110000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nobarrier}, {@errors_remount}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@mblk_io_submit}, {@quota}, {@inlinecrypt}], [{@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0x64, 0x62, 0x62, 0x65, 0x35, 0x37], 0x2d, [0x0, 0x31, 0x36, 0x30], 0x2d, [0x61, 0x32, 0x63, 0x6e], 0x2d, [0x65, 0x30, 0x30], 0x2d, [0x66, 0x61, 0x32, 0x66, 0x50, 0x32, 0x64, 0x37]}}}, {@seclabel}, {@euid_lt}, {@fsname={'fsname', 0x3d, '-\xce'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, '!\\['}}, {@subj_user={'subj_user', 0x3d, '\x1a'}}, {@subj_user={'subj_user', 0x3d, '*!\x12,'}}]}, 0xf8, 0x57f, &(0x7f0000002340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f00000002c0)='./file0\x00', 0x500082c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) rename(0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 8m37.193286091s ago: executing program 0 (id=7503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r3) 8m36.348644325s ago: executing program 0 (id=7514): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a03000000000000000000070000040900010073797a300000000080000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000f8ff070005400000000d3c001280f8ffffff0e000100636f6e6e6c696d69740000000c0002800800014000000008180001800e000100636f6e6e6c696d6974000000040002800800034000000120140000001000010000000000000000000084000a000000000000"], 0xc8}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 8m36.348139574s ago: executing program 48 (id=7514): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a03000000000000000000070000040900010073797a300000000080000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000f8ff070005400000000d3c001280f8ffffff0e000100636f6e6e6c696d69740000000c0002800800014000000008180001800e000100636f6e6e6c696d6974000000040002800800034000000120140000001000010000000000000000000084000a000000000000"], 0xc8}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 8m22.735163379s ago: executing program 3 (id=7697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = dup3(r2, r3, 0x0) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 8m22.63853423s ago: executing program 3 (id=7700): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 8m22.550608972s ago: executing program 3 (id=7702): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 8m22.487915182s ago: executing program 3 (id=7706): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x110000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nobarrier}, {@errors_remount}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@mblk_io_submit}, {@quota}, {@inlinecrypt}], [{@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0x64, 0x62, 0x62, 0x65, 0x35, 0x37], 0x2d, [0x0, 0x31, 0x36, 0x30], 0x2d, [0x61, 0x32, 0x63, 0x6e], 0x2d, [0x65, 0x30, 0x30], 0x2d, [0x66, 0x61, 0x32, 0x66, 0x50, 0x32, 0x64, 0x37]}}}, {@seclabel}, {@euid_lt}, {@fsname={'fsname', 0x3d, '-\xce'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, '!\\['}}, {@subj_user={'subj_user', 0x3d, '\x1a'}}, {@subj_user={'subj_user', 0x3d, '*!\x12,'}}]}, 0xf8, 0x57f, &(0x7f0000002340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f00000002c0)='./file0\x00', 0x500082c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) rename(0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 8m22.193264718s ago: executing program 3 (id=7709): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 8m21.906734432s ago: executing program 3 (id=7710): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001440)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000004b40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e27, 0x80, @loopback, 0x4003c16}, {0xa, 0x4e1d, 0xfff, @local, 0x2}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) sigaltstack(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_clone(0x24308000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 8m21.906319242s ago: executing program 49 (id=7710): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001440)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000004b40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e27, 0x80, @loopback, 0x4003c16}, {0xa, 0x4e1d, 0xfff, @local, 0x2}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) sigaltstack(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_clone(0x24308000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 8m16.866882351s ago: executing program 9 (id=7761): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x4000, 0xa0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x1b, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xd1d}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa3b}}, @map_idx={0x18, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x1, 0x2, 0x4, 0x6, 0x8, 0x4, 0x8}, @exit, @alu={0x4, 0x1, 0xb, 0x1, 0x7, 0x18, 0xc}, @generic={0x2, 0x6, 0x5, 0x6, 0x38f}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x400}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000240000e0000311907800000000109078a20c000100"/50], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) timerfd_create(0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000c80)=""/4105, 0x1009}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) r6 = syz_io_uring_setup(0x6b88, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) io_setup(0x2004, &(0x7f0000000680)) io_setup(0xf447, &(0x7f0000000280)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x86) 8m16.768534093s ago: executing program 9 (id=7766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1f, 0x8, 0xfffffff8, 0x7, 0x400, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040600) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x4) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) 8m16.741814063s ago: executing program 6 (id=7767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r3) 8m16.678463504s ago: executing program 6 (id=7768): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 8m15.866173847s ago: executing program 9 (id=7774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1f, 0x8, 0xfffffff8, 0x7, 0x400, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040600) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x4) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) 8m15.805685018s ago: executing program 6 (id=7788): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r3) 8m15.742495069s ago: executing program 6 (id=7777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0100253d7000fbdbdf2504000000080002000a00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)={0x21c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x170de7a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ef342e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18f2c088}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cc65ca7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd06d9e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eaabff1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51c4f82d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7895292b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2432ecec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x309091be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5316ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x485de4f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf6e3bde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ae19aac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ca0dbae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f7557aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ed88b26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b557daf}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x781a1d6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b34cb93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b2efab9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x130e0d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, &(0x7f0000000000)) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7ffff000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) 8m15.393127954s ago: executing program 6 (id=7778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 8m15.333181755s ago: executing program 6 (id=7780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1f, 0x8, 0xfffffff8, 0x7, 0x400, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040600) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x4) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) 8m15.285091736s ago: executing program 50 (id=7780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1f, 0x8, 0xfffffff8, 0x7, 0x400, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040600) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x4) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) 8m14.959148031s ago: executing program 9 (id=7792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0100253d7000fbdbdf2504000000080002000a00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)={0x21c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x170de7a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ef342e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18f2c088}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cc65ca7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd06d9e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eaabff1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51c4f82d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7895292b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2432ecec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x309091be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5316ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x485de4f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf6e3bde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ae19aac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ca0dbae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f7557aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ed88b26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b557daf}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x781a1d6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b34cb93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b2efab9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x130e0d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, &(0x7f0000000000)) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7ffff000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) 8m14.897425562s ago: executing program 9 (id=7793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x7e7b, 0x7}, 0x0, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x118}, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 8m14.478643109s ago: executing program 9 (id=7794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x50, 0xff, 0x0, 0x7}, {0x6, 0x60, 0xfe, 0xfffffffe}]}) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 8m14.476884329s ago: executing program 51 (id=7794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x50, 0xff, 0x0, 0x7}, {0x6, 0x60, 0xfe, 0xfffffffe}]}) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 8m11.155007361s ago: executing program 2 (id=7846): bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000006c0)={[{@grpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}]}, 0xfd, 0x50f, &(0x7f0000000140)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) (fail_nth: 9) 8m10.783699717s ago: executing program 2 (id=7847): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 1) 8m10.426075753s ago: executing program 2 (id=7854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = dup3(r1, r2, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 8m10.325940554s ago: executing program 2 (id=7858): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x110000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nobarrier}, {@errors_remount}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@mblk_io_submit}, {@quota}, {@inlinecrypt}], [{@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0x64, 0x62, 0x62, 0x65, 0x35, 0x37], 0x2d, [0x0, 0x31, 0x36, 0x30], 0x2d, [0x61, 0x32, 0x63, 0x6e], 0x2d, [0x65, 0x30, 0x30], 0x2d, [0x66, 0x61, 0x32, 0x66, 0x50, 0x32, 0x64, 0x37]}}}, {@seclabel}, {@euid_lt}, {@fsname={'fsname', 0x3d, '-\xce'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, '!\\['}}, {@subj_user={'subj_user', 0x3d, '\x1a'}}, {@subj_user={'subj_user', 0x3d, '*!\x12,'}}]}, 0xf8, 0x57f, &(0x7f0000002340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f00000002c0)='./file0\x00', 0x500082c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) rename(0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 8m7.276359762s ago: executing program 2 (id=7899): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) (fail_nth: 5) 8m6.032826362s ago: executing program 2 (id=7919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 8m6.032540691s ago: executing program 52 (id=7919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 2.236617875s ago: executing program 5 (id=17951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 2.215847625s ago: executing program 5 (id=17952): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x24c, &(0x7f0000000840)={0x0, 0xaee7, 0x400, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.185577195s ago: executing program 5 (id=17953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000019000109000000001ffffffd021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000080000150004000000"], 0x44}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x10804, &(0x7f00000005c0)={[{@data_err_abort}, {@journal_async_commit}, {@grpjquota}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'i_version'}}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000a80), 0x0, 0x4000801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) semop(r3, &(0x7f0000000200)=[{0x4}, {0x2}], 0x2) 1.789720032s ago: executing program 1 (id=17956): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) link(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r7, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.727338263s ago: executing program 8 (id=17958): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0xfe14, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYRESDEC=r2], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000806601955e6bc2284500fc030000000098ce8941a737331902b97124e4668b29d2fa2ff50e1f71026ed3f6055f66dc0f164857f6f5ba7a3fae73ef67c4c664b379d5d801d5bdce3388dff21b1805341f5ae97d41e234a1c2abeaf9b47e7745025e4ed7f6f479951a29f578371a1aa0ecddfccd0d68e103533ba1fc25d9055ca2ce52c1207b0d2fa544590230fc46a93da873ea01da538bff34e42370fc70b5f1c991b0af9718fe72c87c01541ce1488be648", @ANYRESOCT=r1, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000280)={r7, 0x2, 0x6, @local}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r11 = dup(r9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3, 0xfffc, 0x3, 0xd, 0x0, 0x8, 0xff}, 0x9c) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000001500)={0x23, 0x3, 0x3, 0x9}, 0x10) 1.669922674s ago: executing program 8 (id=17959): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) syz_io_uring_setup(0x6002, &(0x7f00000000c0)={0x0, 0xcd25, 0x400, 0x802, 0x340, 0x0, r2}, &(0x7f0000000040), 0x0) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 1.650692434s ago: executing program 4 (id=17960): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0000067b8af8ff00000000bf1000000000000007020000f8ffffffb7030000fbffffffb7040000000000008500000071a99e3af5e624a6f7590a90"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, 0x0, 0x0, 0x80000000, 0x0, 0x0) shutdown(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='afs_cb_miss\x00', r6}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180), 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7076, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000001c0)=""/42) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x49, 0x4, 0x81, 0x7ffbbffd}]}) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000000)=0x9) close(r0) 1.440905507s ago: executing program 7 (id=17961): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.416712978s ago: executing program 7 (id=17962): lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f00000000c0)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x0) 1.399812278s ago: executing program 7 (id=17963): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 1.379834229s ago: executing program 7 (id=17964): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syslog(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) sendmmsg$inet6(r5, &(0x7f0000001600), 0x0, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xb28, 0x2c, 0xd27, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r9, {0x10, 0xb}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xaf8, 0x2, [@TCA_CGROUP_ACT={0x20c, 0x1, [@m_skbedit={0x100, 0xe, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0xc9, 0x6, "827bbee6b5f348d7d9d817756564317e5482c26f29fdd4138197f8e4d4230a3a70a0df24319af280b125ba3f538fb97ac0a35d10dbde1c186a8bb22713e6be1d0c6d5b4e16eae838c58ee5d9886999a2a05d10604a408126916c53d1fc500f885987de96a400c5a64bd5b36144067ffb330b170cb09cc0c1f3a3ce95e51ff6e5db0f10aa2481db8d133022aaeb0e2baf594dc7dc8acd14443921c3a658a071089e78a566dd3c23f400b8a76b3474e47011e95cb62fa56eef50867a3e1d4af15761afe65250"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x108, 0x20, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x52a, 0x4, 0x9, 0x8423}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x7c, 0x6, "ed3ba15be588fe0a935d84de9fbfe7143cf30abf2f3216ae2c79721c28110216910a5d61481b26252e4ea7f79b5623db2bf45d4963a02c463c2dfecb7960f0221cb5c0cdeece2eccc7b0181942c37ee4e3d35fefbb3c0cea0048a2243a86597f38161947d968c91fcd736361f0bfa7548d3ca48f9ac5b882"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_POLICE={0x8a8, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x0, 0x6, 0x4, 0x10000, 0xffffffff, 0x4, 0xc, 0x2644, 0x6, 0xfa9, 0x7, 0xf, 0x8, 0x5, 0x10000, 0x7fff, 0x2, 0x8, 0x1764, 0x9, 0xfffffffd, 0x9, 0x81, 0x200, 0x101, 0x800, 0x1, 0x2, 0x4, 0x0, 0x3, 0x5, 0xb83, 0x7fffffff, 0x9, 0x8000, 0x4, 0x9, 0x275, 0x2, 0x5, 0xf3, 0x0, 0x8, 0xd8000000, 0xb5, 0xfff, 0x68, 0x7fff, 0x6df1, 0x9, 0x27, 0x7, 0xf, 0x1, 0x6, 0x400, 0xcdec, 0x6, 0x8, 0x7, 0xb8310, 0xa8a, 0x3, 0x80000000, 0x1, 0x0, 0xcb, 0xfff, 0x7, 0x893c, 0x8000, 0x6, 0x1, 0x7, 0x10000, 0x4, 0x4, 0xffffffff, 0x80000001, 0x1, 0x0, 0x4, 0x5, 0xdc, 0x5, 0x9, 0x7, 0x3, 0xfb, 0x0, 0x5, 0x7fff, 0x2, 0x7ff, 0x3, 0x3, 0x5, 0xd2, 0x800, 0x0, 0x2, 0x0, 0xf8, 0x6, 0x21e, 0x1f34ea35, 0x8, 0x2, 0x7, 0xa1, 0x10, 0x14, 0x8, 0x800, 0x37, 0x1e40, 0x7ff, 0x7, 0x4, 0xf, 0x0, 0x4, 0x7, 0x4, 0x8, 0x5, 0x8, 0x52, 0x401, 0x176, 0x245, 0x1, 0x2, 0x6, 0x0, 0x7, 0x9, 0xffffff92, 0x1, 0x8, 0xfffffffb, 0x40, 0x68, 0x400, 0x4, 0x8, 0x9, 0x0, 0xe6, 0x1, 0x10000, 0x9, 0xfffffffe, 0x101, 0xb, 0xf, 0x1, 0xdee, 0x5, 0x5b1800, 0x7fffffff, 0x400, 0x5, 0xfff, 0x7, 0x5, 0x8, 0xdb, 0xffffffff, 0x1, 0xffffffff, 0x4, 0x4, 0x6, 0x1000, 0xfffffffc, 0xff, 0x6, 0x7ff, 0x6, 0x3, 0x56, 0x3, 0x6, 0x9, 0x2, 0x7, 0x1ff, 0x8, 0xfffffffc, 0x1ff, 0x4d, 0x7, 0x6, 0x6, 0x3, 0x745d, 0x7f, 0x8f7f, 0x400, 0x3, 0x8, 0x1, 0x40, 0x9, 0x8, 0x9, 0x8001, 0x7, 0xa, 0x1ff, 0x2d2, 0x9, 0x6, 0x7, 0xffffff80, 0xfff, 0x429c, 0x7, 0x0, 0x200, 0x7, 0x1, 0x4575, 0x6, 0x0, 0x9, 0x9, 0x8, 0x9, 0x7, 0x9, 0x7, 0x9, 0x0, 0x6, 0x84, 0x4, 0x0, 0x0, 0x3, 0x187, 0x0, 0xc, 0x3, 0x5, 0x1, 0x7, 0x41b, 0x7fffffff, 0x8, 0x80000000, 0x5, 0x6b4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x18b1, 0x731, 0xfc5, 0x1713c15a, 0xfffffff6, 0x8, 0x0, 0x0, 0x1ea, 0x9, 0x0, 0x7166, 0x800, 0x8, 0x3, 0x5, 0x7, 0x5, 0x0, 0x5, 0x5, 0x1, 0x2f9, 0x3, 0x200, 0x6, 0x8, 0x0, 0x8, 0x9, 0x4, 0x1d, 0x2, 0xfffffeff, 0xf76, 0x0, 0x5, 0xb245, 0x31031f96, 0xfffff8ce, 0x7, 0x3, 0x2, 0x7, 0xa3, 0x5, 0x0, 0x1, 0x4, 0x8, 0xb, 0x3, 0x8, 0xf, 0x5, 0x1, 0x81, 0xffffffff, 0x1, 0x3c, 0xf6, 0x2, 0x9, 0x385, 0x6, 0x1, 0x1d6, 0x7, 0x101, 0x7ff, 0x8001, 0x8, 0x3ff, 0x6f9fc276, 0x0, 0x13, 0xfff, 0xfffffff7, 0x1f, 0xd, 0x5, 0x7b1, 0x1, 0x0, 0xa000000, 0x7, 0x200, 0x82, 0xb53f, 0xa4000, 0xe0, 0xdb5d, 0xfffffffe, 0x6, 0xfffffffe, 0x80000000, 0x6, 0x0, 0x3ff, 0x10, 0x1ff, 0x80000001, 0xadde, 0x0, 0xffff, 0x8001, 0x4, 0x3, 0x8, 0x7, 0x200, 0x8, 0x2, 0x2, 0x5, 0x7, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x1, 0x7, 0x9, 0x200, 0xe, 0x8, 0x1, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x1, 0x80000000, 0x7c6, 0x1, 0x5, 0x4, 0xfffffff7, 0xfc, 0x4, 0xa34a, 0xff, 0xc0000000, 0x0, 0x3, 0x6, 0xe80b, 0xc12, 0x0, 0x1ff, 0x4, 0x101, 0x3, 0x4500, 0x5, 0x1, 0x7, 0x8, 0x1, 0xffff8001, 0x6, 0x9, 0xf1, 0xfff, 0xa, 0x6, 0x1, 0xfe0f, 0x9, 0x5f, 0x8001, 0x5, 0x3, 0x8, 0xfffffffc, 0x8, 0x3d84, 0x27900, 0x9, 0x1, 0xe0, 0x8, 0x2, 0x4, 0x80000001, 0xffff6f6e, 0x6, 0xa6, 0x76e87b99, 0x4, 0x6, 0x400, 0xf, 0x8, 0x5, 0x0, 0x8, 0x4, 0xfff, 0x1, 0x5, 0x2, 0x3, 0x7, 0x7, 0x7fff, 0x80000001, 0x9, 0x10001, 0x40, 0x6, 0x8, 0x8, 0xe, 0x7, 0x400, 0x6d, 0x4, 0x8, 0x9, 0x7ff, 0x7fffffff, 0x6c80689c, 0x8, 0x7, 0x7, 0x1, 0x6a2, 0x7fffffff, 0x2, 0xf516, 0x1, 0x0, 0xf024, 0x3ff, 0x200000, 0x77, 0x6, 0x401, 0x0, 0x5, 0xac, 0xfffffffd, 0x3, 0x7ff, 0x5, 0x244, 0x101, 0xb7, 0x2, 0xcd, 0x2, 0x59e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x6, 0x81, 0x8001, 0xf3, {0x5, 0x1, 0xfff, 0x8, 0xc, 0x9}, {0x2, 0x0, 0x9, 0x4, 0x4, 0x8001}, 0x1, 0x7, 0xa9ad}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x8, 0x7, 0x0, {0x2, 0x3, 0x3ff, 0xe, 0x9, 0x7}, {0xfd, 0x2, 0x4, 0xe, 0x2877, 0x4}, 0x4, 0xffffffa5, 0x7f}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x75}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x8, 0xfffffffb, 0x7, {0x2, 0x0, 0x9, 0x3, 0xd5, 0x400}, {0xc, 0x2, 0x9, 0xc, 0x8, 0xfffffff9}, 0xb, 0x101, 0x9}}]}]}}]}, 0xb28}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 1.374524759s ago: executing program 5 (id=17965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='sched_switch\x00', r1, 0x0, 0x2000000000010000}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xffffff80, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 966.423245ms ago: executing program 1 (id=17967): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0000067b8af8ff00000000bf1000000000000007020000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='afs_cb_miss\x00', r6}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7076, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000001c0)=""/42) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x49, 0x4, 0x81, 0x7ffbbffd}]}) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000000)=0x9) close(r0) 784.584188ms ago: executing program 4 (id=17968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r1, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") getpid() r2 = open(&(0x7f0000000240)='./file1\x00', 0x1c5542, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x2, 0xced4, 0xc) 543.969522ms ago: executing program 4 (id=17969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x4, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 543.527212ms ago: executing program 4 (id=17970): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0xfe14, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYRESDEC=r2], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000806601955e6bc2284500fc030000000098ce8941a737331902b97124e4668b29d2fa2ff50e1f71026ed3f6055f66dc0f164857f6f5ba7a3fae73ef67c4c664b379d5d801d5bdce3388dff21b1805341f5ae97d41e234a1c2abeaf9b47e7745025e4ed7f6f479951a29f578371a1aa0ecddfccd0d68e103533ba1fc25d9055ca2ce52c1207b0d2fa544590230fc46a93da873ea01da538bff34e42370fc70b5f1c991b0af9718fe72c87c01541ce1488be648", @ANYRESOCT=r1, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000280)={r7, 0x2, 0x6, @local}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r11 = dup(r9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3, 0xfffc, 0x3, 0xd, 0x0, 0x8, 0xff}, 0x9c) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000001500)={0x23, 0x3, 0x3, 0x9}, 0x10) 543.034432ms ago: executing program 8 (id=17971): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b3329bd7000000000000500"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r5, 0x101) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9, 0x0, 0x20000000}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0xc4) 542.713142ms ago: executing program 5 (id=17972): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 542.175482ms ago: executing program 5 (id=17973): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r4}, 0x20) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/46, 0x2e}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) 541.981002ms ago: executing program 4 (id=17974): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 541.639262ms ago: executing program 8 (id=17975): lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f00000000c0)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x0) 518.903252ms ago: executing program 7 (id=17976): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 500.093363ms ago: executing program 8 (id=17977): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa2"], &(0x7f0000000700)='GPL\x00', 0xffffcb69, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x8}, 0x18) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x42, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 499.030373ms ago: executing program 7 (id=17978): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0000067b8af8ff00000000bf1000000000000007020000f8ffffffb7030000fbffffffb7040000000000008500000071a99e3af5e624a6f7590a90"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, 0x0, 0x0, 0x80000000, 0x0, 0x0) shutdown(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='afs_cb_miss\x00', r6}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180), 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7076, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000001c0)=""/42) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x49, 0x4, 0x81, 0x7ffbbffd}]}) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000000)=0x9) close(r0) 478.613933ms ago: executing program 4 (id=17979): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000019000109000000001ffffffd021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000080000150004000000"], 0x44}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x10804, &(0x7f00000005c0)={[{@data_err_abort}, {@journal_async_commit}, {@grpjquota}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'i_version'}}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000a80), 0x0, 0x4000801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) semop(r3, &(0x7f0000000200)=[{0x4}, {0x2}], 0x2) 383.296684ms ago: executing program 8 (id=17980): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) syz_io_uring_setup(0x6002, &(0x7f00000000c0)={0x0, 0xcd25, 0x400, 0x802, 0x340, 0x0, r0}, &(0x7f0000000040), 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 91.679989ms ago: executing program 1 (id=17981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4088, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000f7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/144]}, 0x108) 55.46658ms ago: executing program 1 (id=17982): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB="00000000000068ef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='cachefiles_ondemand_fd_write\x00', r4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f00000000c0)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESDEC], 0x48) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x20000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e", 0x23}], 0x1}, 0x0) 18.66523ms ago: executing program 1 (id=17983): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 0s ago: executing program 1 (id=17984): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa0882e94edcab000a40000000020900020073797a3100000000050001"], 0x4c}}, 0x4000080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): scuous mode [ 984.429460][T18345] veth1_vlan: entered promiscuous mode [ 984.460402][T18345] veth0_macvtap: entered promiscuous mode [ 984.478455][T18345] veth1_macvtap: entered promiscuous mode [ 984.501567][T18345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.520188][T18345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.531149][T18345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.540167][T18345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.549050][T18345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.557813][T18345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.785993][T18489] can0: slcan on ttyS3. [ 984.829378][T18489] can0 (unregistered): slcan off ttyS3. [ 985.030214][T18510] __nla_validate_parse: 27 callbacks suppressed [ 985.030230][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16687'. [ 985.075971][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16689'. [ 985.106949][T18514] netlink: 'syz.7.16688': attribute type 1 has an invalid length. [ 985.114922][T18514] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.16688'. [ 985.225137][T18518] : renamed from vlan0 [ 985.235032][T18518] loop9: detected capacity change from 0 to 7 [ 985.243110][T18518] buffer_io_error: 2 callbacks suppressed [ 985.243150][T18518] Buffer I/O error on dev loop9, logical block 0, async page read [ 985.257168][T18518] Buffer I/O error on dev loop9, logical block 0, async page read [ 985.265151][T18518] loop9: unable to read partition table [ 985.272749][T18518] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 985.272749][T18518] ) failed (rc=-5) [ 985.317599][T18520] netlink: 128 bytes leftover after parsing attributes in process `syz.7.16692'. [ 985.328835][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16692'. [ 985.733273][T18543] netlink: 'syz.1.16701': attribute type 1 has an invalid length. [ 985.741311][T18543] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.16701'. [ 985.771505][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16704'. [ 985.792730][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16697'. [ 985.819022][T18551] netlink: 'syz.4.16705': attribute type 1 has an invalid length. [ 985.827007][T18551] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.16705'. [ 985.976663][T18575] loop9: detected capacity change from 0 to 7 [ 985.986263][T18575] Buffer I/O error on dev loop9, logical block 0, async page read [ 985.996087][T18575] Buffer I/O error on dev loop9, logical block 0, async page read [ 985.996681][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16718'. [ 986.003992][T18575] loop9: unable to read partition table [ 986.029793][T18575] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 986.029793][T18575] ) failed (rc=-5) [ 986.105996][T18593] loop9: detected capacity change from 0 to 7 [ 986.112536][T18593] Buffer I/O error on dev loop9, logical block 0, async page read [ 986.120645][T18593] Buffer I/O error on dev loop9, logical block 0, async page read [ 986.128784][T18593] loop9: unable to read partition table [ 986.134784][T18593] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 986.134784][T18593] ) failed (rc=-5) [ 986.154736][T18597] tipc: Started in network mode [ 986.159671][T18597] tipc: Node identity ac141413, cluster identity 4711 [ 986.168875][T18597] tipc: New replicast peer: 10.1.1.2 [ 986.174300][T18597] tipc: Enabled bearer , priority 10 [ 986.292245][T18609] loop9: detected capacity change from 0 to 7 [ 986.305363][T18609] Buffer I/O error on dev loop9, logical block 0, async page read [ 986.327956][T18609] Buffer I/O error on dev loop9, logical block 0, async page read [ 986.335923][T18609] loop9: unable to read partition table [ 986.353215][T18609] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 986.353215][T18609] ) failed (rc=-5) [ 986.501873][T18626] netlink: 'syz.5.16740': attribute type 1 has an invalid length. [ 986.618659][T18636] netlink: 'syz.1.16743': attribute type 10 has an invalid length. [ 986.633349][T18636] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 986.713265][T18637] lo speed is unknown, defaulting to 1000 [ 986.721879][T18637] lo speed is unknown, defaulting to 1000 [ 986.779049][T18637] chnl_net:caif_netlink_parms(): no params data found [ 986.819420][T18637] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.826700][T18637] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.834037][T18637] bridge_slave_0: entered allmulticast mode [ 986.840731][T18637] bridge_slave_0: entered promiscuous mode [ 986.847497][T18637] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.854765][T18637] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.862202][T18637] bridge_slave_1: entered allmulticast mode [ 986.868917][T18637] bridge_slave_1: entered promiscuous mode [ 986.898345][T18637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.920890][T18662] : renamed from vlan0 (while UP) [ 986.930064][T18637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.950535][T18662] team_slave_0: entered promiscuous mode [ 986.956493][T18662] team_slave_1: entered promiscuous mode [ 986.982053][T14653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.991032][T14653] bond_slave_0: left promiscuous mode [ 986.996618][T14653] bond_slave_0: left allmulticast mode [ 987.012891][T14653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.022578][T18671] loop9: detected capacity change from 0 to 7 [ 987.029351][T18671] Buffer I/O error on dev loop9, logical block 0, async page read [ 987.037505][T18671] Buffer I/O error on dev loop9, logical block 0, async page read [ 987.045521][T18671] loop9: unable to read partition table [ 987.051510][T18671] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 987.051510][T18671] ) failed (rc=-5) [ 987.065935][T14653] bond_slave_1: left promiscuous mode [ 987.071511][T14653] bond_slave_1: left allmulticast mode [ 987.080998][T14653] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 987.089828][T14653] dummy0: left promiscuous mode [ 987.095031][T14653] dummy0: left allmulticast mode [ 987.102530][T14653] bond0 (unregistering): Released all slaves [ 987.119089][T18637] team0: Port device team_slave_0 added [ 987.125114][T18662] team_slave_0: left promiscuous mode [ 987.130584][T18662] team_slave_1: left promiscuous mode [ 987.137307][T18637] team0: Port device team_slave_1 added [ 987.159718][T14653] tipc: Disabling bearer [ 987.165056][T14653] tipc: Left network mode [ 987.171827][T18637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.178915][T18637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.205320][T18637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.217379][T18637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.224528][T18637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.250971][T18637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.258110][ T9] tipc: Node number set to 2886997011 [ 987.343589][T18637] hsr_slave_0: entered promiscuous mode [ 987.359199][T18637] hsr_slave_1: entered promiscuous mode [ 987.366389][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 987.366403][ T29] audit: type=1400 audit(1752668137.963:88012): avc: denied { create } for pid=18669 comm="syz.4.16749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 987.382664][T18637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.414815][T18680] netlink: 'syz.8.16753': attribute type 10 has an invalid length. [ 987.422967][T18637] Cannot create hsr debugfs directory [ 987.431323][T14653] hsr_slave_0: left promiscuous mode [ 987.437327][T14653] hsr_slave_1: left promiscuous mode [ 987.443248][T14653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.451264][T14653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.473498][ T29] audit: type=1326 audit(1752668138.121:88013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.497454][ T29] audit: type=1326 audit(1752668138.121:88014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.521580][ T29] audit: type=1326 audit(1752668138.121:88015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.545521][ T29] audit: type=1326 audit(1752668138.121:88016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.569330][ T29] audit: type=1326 audit(1752668138.121:88017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.593564][ T29] audit: type=1326 audit(1752668138.121:88018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.617339][ T29] audit: type=1326 audit(1752668138.121:88019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.641265][ T29] audit: type=1326 audit(1752668138.121:88020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.665103][ T29] audit: type=1326 audit(1752668138.121:88021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.16754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 987.689770][T14653] team0 (unregistering): Port device team_slave_1 removed [ 987.700863][T14653] team0 (unregistering): Port device team_slave_0 removed [ 987.785172][T18692] FAULT_INJECTION: forcing a failure. [ 987.785172][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 987.797968][T18692] CPU: 0 UID: 0 PID: 18692 Comm: syz.8.16756 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 987.798044][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.798061][T18692] Call Trace: [ 987.798070][T18692] [ 987.798089][T18692] __dump_stack+0x1d/0x30 [ 987.798127][T18692] dump_stack_lvl+0xe8/0x140 [ 987.798213][T18692] dump_stack+0x15/0x1b [ 987.798285][T18692] should_fail_ex+0x265/0x280 [ 987.798313][T18692] should_failslab+0x8c/0xb0 [ 987.798333][T18692] kmem_cache_alloc_noprof+0x50/0x310 [ 987.798378][T18692] ? alloc_empty_file+0x76/0x200 [ 987.798401][T18692] alloc_empty_file+0x76/0x200 [ 987.798423][T18692] path_openat+0x68/0x2170 [ 987.798534][T18692] ? try_charge_memcg+0x200/0x9e0 [ 987.798563][T18692] ? css_rstat_updated+0xcd/0x5b0 [ 987.798590][T18692] ? css_rstat_updated+0xcd/0x5b0 [ 987.798652][T18692] ? css_rstat_updated+0xcd/0x5b0 [ 987.798678][T18692] ? __rcu_read_unlock+0x34/0x70 [ 987.798748][T18692] do_filp_open+0x109/0x230 [ 987.798792][T18692] do_sys_openat2+0xa6/0x110 [ 987.798871][T18692] __x64_sys_openat+0xf2/0x120 [ 987.798904][T18692] x64_sys_call+0x1af/0x2fb0 [ 987.798924][T18692] do_syscall_64+0xd2/0x200 [ 987.798940][T18692] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 987.798963][T18692] ? clear_bhb_loop+0x40/0x90 [ 987.798981][T18692] ? clear_bhb_loop+0x40/0x90 [ 987.799039][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.799057][T18692] RIP: 0033:0x7f1d86c6d290 [ 987.799071][T18692] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 987.799088][T18692] RSP: 002b:00007f1d852d4ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 987.799104][T18692] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1d86c6d290 [ 987.799151][T18692] RDX: 0000000000000002 RSI: 00007f1d86cf0814 RDI: 00000000ffffff9c [ 987.799205][T18692] RBP: 00007f1d86cf0814 R08: 0000000000000000 R09: 0000000000000000 [ 987.799216][T18692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 987.799226][T18692] R13: 0000000000000036 R14: 0000200000000000 R15: 00007ffd4962a038 [ 987.799245][T18692] [ 988.198119][T18701] loop9: detected capacity change from 0 to 7 [ 988.205050][T18701] loop9: unable to read partition table [ 988.212552][T18701] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 988.212552][T18701] ) failed (rc=-5) [ 988.271671][T18707] random: crng reseeded on system resumption [ 988.323032][T18637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 988.341094][T18637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 988.351084][T18637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 988.360611][T18637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 988.380657][T18711] netlink: 'syz.8.16764': attribute type 1 has an invalid length. [ 988.469667][T18637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.472822][T18730] netlink: 'syz.1.16769': attribute type 1 has an invalid length. [ 988.494635][T18637] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.504974][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.512140][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.527389][T18726] lo speed is unknown, defaulting to 1000 [ 988.533363][T18726] lo speed is unknown, defaulting to 1000 [ 988.547177][T18730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.555952][T18726] lo speed is unknown, defaulting to 1000 [ 988.564429][T18726] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 988.573023][T18730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.580344][T18730] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 988.592390][T18730] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 988.605150][T18726] lo speed is unknown, defaulting to 1000 [ 988.612497][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.619603][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.632478][T18737] ip6erspan0: entered promiscuous mode [ 988.640710][T18737] bond1: (slave ip6erspan0): making interface the new active one [ 988.648818][T18737] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 988.657958][T18726] lo speed is unknown, defaulting to 1000 [ 988.672420][T18726] lo speed is unknown, defaulting to 1000 [ 988.682676][T18726] lo speed is unknown, defaulting to 1000 [ 988.700397][T18726] lo speed is unknown, defaulting to 1000 [ 988.708289][T18726] lo speed is unknown, defaulting to 1000 [ 988.714833][T18726] lo speed is unknown, defaulting to 1000 [ 988.721128][T18726] lo speed is unknown, defaulting to 1000 [ 988.773537][T18637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.818732][T18747] loop9: detected capacity change from 0 to 7 [ 988.825841][T18747] loop9: unable to read partition table [ 988.839157][T18747] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 988.839157][T18747] ) failed (rc=-5) [ 988.897554][T18765] netlink: 'syz.8.16776': attribute type 1 has an invalid length. [ 988.967888][T18637] veth0_vlan: entered promiscuous mode [ 988.996769][T18637] veth1_vlan: entered promiscuous mode [ 989.024930][T18637] veth0_macvtap: entered promiscuous mode [ 989.032872][T18637] veth1_macvtap: entered promiscuous mode [ 989.047439][T18637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.062944][T18637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.084036][T18637] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.093077][T18637] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.101915][T18637] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.110724][T18637] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.636149][T18800] tipc: Enabling of bearer rejected, already enabled [ 990.143644][T18821] __nla_validate_parse: 15 callbacks suppressed [ 990.143665][T18821] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16792'. [ 990.169500][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16792'. [ 990.245439][T18828] netlink: 'syz.8.16793': attribute type 13 has an invalid length. [ 990.294881][T18832] netlink: 'syz.4.16797': attribute type 1 has an invalid length. [ 990.302787][T18832] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.16797'. [ 990.370463][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16800'. [ 990.522326][T18850] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16805'. [ 990.553572][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16805'. [ 990.563974][T18852] random: crng reseeded on system resumption [ 990.641429][T18810] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 990.674883][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16809'. [ 990.685645][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16809'. [ 990.716936][T18860] bridge_slave_1: left allmulticast mode [ 990.722684][T18860] bridge_slave_1: left promiscuous mode [ 990.728627][T18860] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.758665][T18864] siw: device registration error -23 [ 990.772636][T18860] bridge_slave_0: left allmulticast mode [ 990.778393][T18860] bridge_slave_0: left promiscuous mode [ 990.784282][T18860] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.814965][T18865] loop9: detected capacity change from 0 to 7 [ 990.821430][T18865] buffer_io_error: 4 callbacks suppressed [ 990.821518][T18865] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.835419][T18865] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.843490][T18865] loop9: unable to read partition table [ 990.851001][T18865] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 990.851001][T18865] ) failed (rc=-5) [ 990.867999][T18862] : renamed from vlan0 [ 990.900967][T18867] netlink: 'syz.4.16811': attribute type 1 has an invalid length. [ 990.909125][T18867] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.16811'. [ 991.160491][T18880] FAULT_INJECTION: forcing a failure. [ 991.160491][T18880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.173799][T18880] CPU: 0 UID: 0 PID: 18880 Comm: syz.7.16817 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 991.173871][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 991.173919][T18880] Call Trace: [ 991.173929][T18880] [ 991.173937][T18880] __dump_stack+0x1d/0x30 [ 991.173958][T18880] dump_stack_lvl+0xe8/0x140 [ 991.173976][T18880] dump_stack+0x15/0x1b [ 991.173994][T18880] should_fail_ex+0x265/0x280 [ 991.174102][T18880] should_fail+0xb/0x20 [ 991.174136][T18880] should_fail_usercopy+0x1a/0x20 [ 991.174176][T18880] _copy_to_iter+0xcf/0xe30 [ 991.174245][T18880] copy_page_to_iter+0x18f/0x2d0 [ 991.174282][T18880] shmem_file_read_iter+0x37d/0x540 [ 991.174308][T18880] aio_read+0x1dd/0x2e0 [ 991.174344][T18880] io_submit_one+0xab2/0x11d0 [ 991.174378][T18880] __se_sys_io_submit+0xfb/0x280 [ 991.174523][T18880] __x64_sys_io_submit+0x43/0x50 [ 991.174560][T18880] x64_sys_call+0xfc4/0x2fb0 [ 991.174586][T18880] do_syscall_64+0xd2/0x200 [ 991.174642][T18880] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 991.174667][T18880] ? clear_bhb_loop+0x40/0x90 [ 991.174691][T18880] ? clear_bhb_loop+0x40/0x90 [ 991.174719][T18880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.174754][T18880] RIP: 0033:0x7fc811dde929 [ 991.174769][T18880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.174789][T18880] RSP: 002b:00007fc810447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 991.174813][T18880] RAX: ffffffffffffffda RBX: 00007fc812005fa0 RCX: 00007fc811dde929 [ 991.174829][T18880] RDX: 0000200000001d00 RSI: 000000001ffffff0 RDI: 00007fc81040e000 [ 991.174845][T18880] RBP: 00007fc810447090 R08: 0000000000000000 R09: 0000000000000000 [ 991.174907][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.174928][T18880] R13: 0000000000000000 R14: 00007fc812005fa0 R15: 00007ffe4cbb8fb8 [ 991.174949][T18880] [ 991.548481][T18898] netlink: 'syz.4.16824': attribute type 13 has an invalid length. [ 992.367636][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16828'. [ 992.696771][T18919] netlink: 'syz.4.16831': attribute type 1 has an invalid length. [ 992.814993][T18927] bridge_slave_1: left allmulticast mode [ 992.820824][T18927] bridge_slave_1: left promiscuous mode [ 992.826604][T18927] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.848848][T18927] bridge_slave_0: left allmulticast mode [ 992.854938][T18927] bridge_slave_0: left promiscuous mode [ 992.860853][T18927] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.871261][T18936] siw: device registration error -23 [ 992.927855][T18933] tipc: Enabling of bearer rejected, already enabled [ 992.967377][T18935] netlink: 'syz.4.16839': attribute type 13 has an invalid length. [ 993.002745][T18943] audit_log_lost: 248 callbacks suppressed [ 993.002764][T18943] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 993.016492][T18943] audit: out of memory in audit_log_start [ 993.064952][ T29] audit: type=1326 audit(1752668143.990:88270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.143257][ T29] audit: type=1326 audit(1752668144.021:88271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.167212][ T29] audit: type=1326 audit(1752668144.021:88272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.191104][ T29] audit: type=1326 audit(1752668144.021:88273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.215068][ T29] audit: type=1326 audit(1752668144.021:88274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.239247][ T29] audit: type=1326 audit(1752668144.021:88275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.263104][ T29] audit: type=1326 audit(1752668144.021:88276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.287049][ T29] audit: type=1326 audit(1752668144.021:88277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18944 comm="syz.1.16843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 993.473454][T18962] xt_hashlimit: max too large, truncated to 1048576 [ 993.484187][T18962] xt_limit: Overflow, try lower: 0/0 [ 993.546088][T18961] netlink: 'syz.8.16850': attribute type 1 has an invalid length. [ 993.708591][T18969] random: crng reseeded on system resumption [ 994.177335][T18986] 9pnet_fd: Insufficient options for proto=fd [ 994.208821][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 994.216901][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 994.227378][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.235322][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.243372][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.251195][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.259013][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.266721][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.274675][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.282471][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.290175][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.297932][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.305673][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.313647][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.321376][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.329543][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 994.338045][ T9] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 994.376987][T19003] tipc: Enabling of bearer rejected, already enabled [ 994.599410][T19027] netlink: 'syz.7.16875': attribute type 10 has an invalid length. [ 994.609469][T19027] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 994.677317][T19038] tipc: Enabling of bearer rejected, already enabled [ 994.749088][T19040] netlink: 'syz.5.16881': attribute type 1 has an invalid length. [ 994.857246][T19049] serio: Serial port ptm0 [ 994.944301][T19057] __nla_validate_parse: 13 callbacks suppressed [ 994.944403][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16888'. [ 995.009828][T19061] netlink: 'syz.7.16890': attribute type 10 has an invalid length. [ 995.072991][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16893'. [ 995.085574][T19070] tipc: Enabling of bearer rejected, already enabled [ 995.109789][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16894'. [ 995.159658][T19072] netlink: 'syz.1.16895': attribute type 1 has an invalid length. [ 995.167604][T19072] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.16895'. [ 995.407209][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16900'. [ 995.443109][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16901'. [ 995.636392][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16904'. [ 995.812894][T19097] tipc: Started in network mode [ 995.817866][T19097] tipc: Node identity ac141413, cluster identity 4711 [ 995.824877][T19097] tipc: New replicast peer: 10.1.1.2 [ 995.830684][T19097] tipc: Enabled bearer , priority 10 [ 995.852770][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16906'. [ 995.892572][T19100] netlink: 'syz.7.16907': attribute type 1 has an invalid length. [ 995.900569][T19100] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.16907'. [ 996.085635][T19112] 9pnet_fd: Insufficient options for proto=fd [ 996.357363][T19090] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 996.400791][T19117] netlink: 'syz.8.16912': attribute type 1 has an invalid length. [ 996.409549][T19117] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.16912'. [ 996.496532][T19123] random: crng reseeded on system resumption [ 996.615089][T19130] veth3: left allmulticast mode [ 996.620239][T19130] bridge0: port 1(veth3) entered disabled state [ 996.664604][T19131] siw: device registration error -23 [ 996.730546][T19133] veth1_to_bond: entered allmulticast mode [ 996.737736][T19133] veth1_to_bond: left allmulticast mode [ 996.743426][T19135] tipc: Enabling of bearer rejected, already enabled [ 996.832792][T19142] program syz.5.16922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.837156][T19139] siw: device registration error -23 [ 996.915960][T26118] tipc: Node number set to 2886997011 [ 996.959597][T19151] netlink: 'syz.4.16926': attribute type 1 has an invalid length. [ 996.982172][T19152] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 997.056025][T19156] FAULT_INJECTION: forcing a failure. [ 997.056025][T19156] name failslab, interval 1, probability 0, space 0, times 0 [ 997.068841][T19156] CPU: 0 UID: 0 PID: 19156 Comm: syz.4.16928 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 997.068878][T19156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 997.068894][T19156] Call Trace: [ 997.068903][T19156] [ 997.068913][T19156] __dump_stack+0x1d/0x30 [ 997.069001][T19156] dump_stack_lvl+0xe8/0x140 [ 997.069027][T19156] dump_stack+0x15/0x1b [ 997.069045][T19156] should_fail_ex+0x265/0x280 [ 997.069080][T19156] ? rtnl_newlink+0x5c/0x12d0 [ 997.069108][T19156] should_failslab+0x8c/0xb0 [ 997.069156][T19156] __kmalloc_cache_noprof+0x4c/0x320 [ 997.069187][T19156] rtnl_newlink+0x5c/0x12d0 [ 997.069271][T19156] ? bpf_trace_printk+0xd6/0x1c0 [ 997.069313][T19156] ? bpf_trace_run2+0xf5/0x1c0 [ 997.069342][T19156] ? bpf_trace_printk+0xd6/0x1c0 [ 997.069382][T19156] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 997.069447][T19156] ? bpf_trace_run2+0xf5/0x1c0 [ 997.069476][T19156] ? bpf_prog_0b8ba32ffc13aceb_F+0x43/0x49 [ 997.069497][T19156] ? try_charge_memcg+0x200/0x9e0 [ 997.069541][T19156] ? css_rstat_updated+0xcd/0x5b0 [ 997.069601][T19156] ? __rcu_read_unlock+0x4f/0x70 [ 997.069656][T19156] ? __account_obj_stock+0x211/0x350 [ 997.069684][T19156] ? __rcu_read_unlock+0x4f/0x70 [ 997.069724][T19156] ? avc_has_perm_noaudit+0x1b1/0x200 [ 997.069760][T19156] ? selinux_capable+0x1f9/0x270 [ 997.069799][T19156] ? security_capable+0x83/0x90 [ 997.069833][T19156] ? ns_capable+0x7d/0xb0 [ 997.069856][T19156] ? __pfx_rtnl_newlink+0x10/0x10 [ 997.069944][T19156] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 997.069972][T19156] ? avc_has_perm_noaudit+0x1b1/0x200 [ 997.070001][T19156] netlink_rcv_skb+0x120/0x220 [ 997.070056][T19156] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 997.070090][T19156] rtnetlink_rcv+0x1c/0x30 [ 997.070112][T19156] netlink_unicast+0x5a5/0x680 [ 997.070214][T19156] netlink_sendmsg+0x58b/0x6b0 [ 997.070240][T19156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.070332][T19156] __sock_sendmsg+0x145/0x180 [ 997.070363][T19156] ____sys_sendmsg+0x31e/0x4e0 [ 997.070408][T19156] ___sys_sendmsg+0x17b/0x1d0 [ 997.070501][T19156] __x64_sys_sendmsg+0xd4/0x160 [ 997.070535][T19156] x64_sys_call+0x2999/0x2fb0 [ 997.070602][T19156] do_syscall_64+0xd2/0x200 [ 997.070618][T19156] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 997.070642][T19156] ? clear_bhb_loop+0x40/0x90 [ 997.070704][T19156] ? clear_bhb_loop+0x40/0x90 [ 997.070724][T19156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.070818][T19156] RIP: 0033:0x7f1ad410e929 [ 997.070832][T19156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.070849][T19156] RSP: 002b:00007f1ad2777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 997.070866][T19156] RAX: ffffffffffffffda RBX: 00007f1ad4335fa0 RCX: 00007f1ad410e929 [ 997.070877][T19156] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 997.070888][T19156] RBP: 00007f1ad2777090 R08: 0000000000000000 R09: 0000000000000000 [ 997.070921][T19156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.070932][T19156] R13: 0000000000000000 R14: 00007f1ad4335fa0 R15: 00007fff4c3e4af8 [ 997.070994][T19156] [ 997.441101][T19159] siw: device registration error -23 [ 997.595563][T19170] tipc: Enabling of bearer rejected, already enabled [ 997.857921][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 997.857937][ T29] audit: type=1326 audit(1752668149.029:88768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 997.896441][ T29] audit: type=1326 audit(1752668149.061:88769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 997.920421][ T29] audit: type=1326 audit(1752668149.061:88770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 997.944163][ T29] audit: type=1326 audit(1752668149.061:88771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 997.967987][ T29] audit: type=1326 audit(1752668149.061:88772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 997.991768][ T29] audit: type=1326 audit(1752668149.061:88773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 998.016488][ T29] audit: type=1326 audit(1752668149.061:88774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.7.16934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 998.258115][T19188] siw: device registration error -23 [ 998.283549][T19189] netlink: 'syz.8.16941': attribute type 1 has an invalid length. [ 998.466133][T19212] FAULT_INJECTION: forcing a failure. [ 998.466133][T19212] name failslab, interval 1, probability 0, space 0, times 0 [ 998.478893][T19212] CPU: 0 UID: 0 PID: 19212 Comm: syz.1.16950 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 998.479092][T19212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.479107][T19212] Call Trace: [ 998.479115][T19212] [ 998.479124][T19212] __dump_stack+0x1d/0x30 [ 998.479150][T19212] dump_stack_lvl+0xe8/0x140 [ 998.479251][T19212] dump_stack+0x15/0x1b [ 998.479274][T19212] should_fail_ex+0x265/0x280 [ 998.479306][T19212] should_failslab+0x8c/0xb0 [ 998.479390][T19212] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 998.479415][T19212] ? shmem_alloc_inode+0x34/0x50 [ 998.479457][T19212] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 998.479498][T19212] shmem_alloc_inode+0x34/0x50 [ 998.479592][T19212] alloc_inode+0x3d/0x170 [ 998.479688][T19212] new_inode+0x1d/0xe0 [ 998.479709][T19212] shmem_get_inode+0x244/0x750 [ 998.479771][T19212] __shmem_file_setup+0x113/0x210 [ 998.479849][T19212] shmem_file_setup+0x3b/0x50 [ 998.479885][T19212] __se_sys_memfd_create+0x2c3/0x590 [ 998.479924][T19212] __x64_sys_memfd_create+0x31/0x40 [ 998.480025][T19212] x64_sys_call+0x122f/0x2fb0 [ 998.480047][T19212] do_syscall_64+0xd2/0x200 [ 998.480065][T19212] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 998.480125][T19212] ? clear_bhb_loop+0x40/0x90 [ 998.480152][T19212] ? clear_bhb_loop+0x40/0x90 [ 998.480178][T19212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.480201][T19212] RIP: 0033:0x7f049ff0e929 [ 998.480236][T19212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.480260][T19212] RSP: 002b:00007f049e576e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 998.480285][T19212] RAX: ffffffffffffffda RBX: 00000000000007f4 RCX: 00007f049ff0e929 [ 998.480301][T19212] RDX: 00007f049e576ef0 RSI: 0000000000000000 RDI: 00007f049ff914cc [ 998.480317][T19212] RBP: 0000200000001580 R08: 00007f049e576bb7 R09: 00007f049e576e40 [ 998.480333][T19212] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000a00 [ 998.480346][T19212] R13: 00007f049e576ef0 R14: 00007f049e576eb0 R15: 0000200000002240 [ 998.480438][T19212] [ 998.832244][T19221] random: crng reseeded on system resumption [ 999.114276][ T29] audit: type=1326 audit(1752668150.342:88775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.4.16955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 999.141430][ T29] audit: type=1326 audit(1752668150.342:88776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.4.16955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 999.165494][ T29] audit: type=1326 audit(1752668150.342:88777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.4.16955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 999.277103][T19233] tipc: Enabling of bearer rejected, already enabled [ 999.363316][T19237] netlink: 'syz.7.16959': attribute type 1 has an invalid length. [ 999.587950][T19247] siw: device registration error -23 [ 999.604850][T19244] siw: device registration error -23 [ 999.805703][T19252] __nla_validate_parse: 20 callbacks suppressed [ 999.805720][T19252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16964'. [ 1000.244531][T19268] FAULT_INJECTION: forcing a failure. [ 1000.244531][T19268] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.257240][T19268] CPU: 0 UID: 0 PID: 19268 Comm: syz.7.16969 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1000.257271][T19268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1000.257283][T19268] Call Trace: [ 1000.257290][T19268] [ 1000.257298][T19268] __dump_stack+0x1d/0x30 [ 1000.257362][T19268] dump_stack_lvl+0xe8/0x140 [ 1000.257380][T19268] dump_stack+0x15/0x1b [ 1000.257394][T19268] should_fail_ex+0x265/0x280 [ 1000.257422][T19268] should_failslab+0x8c/0xb0 [ 1000.257443][T19268] kmem_cache_alloc_noprof+0x50/0x310 [ 1000.257482][T19268] ? skb_clone+0x151/0x1f0 [ 1000.257500][T19268] skb_clone+0x151/0x1f0 [ 1000.257515][T19268] nfnetlink_rcv+0x305/0x1690 [ 1000.257608][T19268] ? __account_obj_stock+0x2d6/0x350 [ 1000.257626][T19268] ? do_user_addr_fault+0xdaf/0x1090 [ 1000.257657][T19268] ? xas_load+0x413/0x430 [ 1000.257683][T19268] ? xas_load+0x413/0x430 [ 1000.257806][T19268] ? __rcu_read_unlock+0x4f/0x70 [ 1000.257825][T19268] ? xa_load+0xb1/0xe0 [ 1000.257841][T19268] ? __account_obj_stock+0x211/0x350 [ 1000.257862][T19268] ? obj_cgroup_charge_account+0x122/0x1a0 [ 1000.257967][T19268] ? should_fail_ex+0x30/0x280 [ 1000.258063][T19268] ? __rcu_read_unlock+0x4f/0x70 [ 1000.258081][T19268] ? should_fail_ex+0xdb/0x280 [ 1000.258125][T19268] netlink_unicast+0x5a5/0x680 [ 1000.258231][T19268] netlink_sendmsg+0x58b/0x6b0 [ 1000.258283][T19268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.258323][T19268] __sock_sendmsg+0x145/0x180 [ 1000.258345][T19268] ____sys_sendmsg+0x31e/0x4e0 [ 1000.258378][T19268] ___sys_sendmsg+0x17b/0x1d0 [ 1000.258422][T19268] __x64_sys_sendmsg+0xd4/0x160 [ 1000.258504][T19268] x64_sys_call+0x2999/0x2fb0 [ 1000.258524][T19268] do_syscall_64+0xd2/0x200 [ 1000.258539][T19268] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1000.258563][T19268] ? clear_bhb_loop+0x40/0x90 [ 1000.258582][T19268] ? clear_bhb_loop+0x40/0x90 [ 1000.258659][T19268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.258678][T19268] RIP: 0033:0x7fc811dde929 [ 1000.258693][T19268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.258723][T19268] RSP: 002b:00007fc810447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.258740][T19268] RAX: ffffffffffffffda RBX: 00007fc812005fa0 RCX: 00007fc811dde929 [ 1000.258752][T19268] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1000.258762][T19268] RBP: 00007fc810447090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.258773][T19268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.258784][T19268] R13: 0000000000000000 R14: 00007fc812005fa0 R15: 00007ffe4cbb8fb8 [ 1000.258838][T19268] [ 1000.603070][T19270] netlink: 'syz.1.16970': attribute type 1 has an invalid length. [ 1000.610976][T19270] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.16970'. [ 1000.627722][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16975'. [ 1000.679055][T19285] random: crng reseeded on system resumption [ 1000.961968][T19312] netlink: 'syz.1.16988': attribute type 1 has an invalid length. [ 1000.969889][T19312] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.16988'. [ 1001.003689][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16989'. [ 1001.057908][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16994'. [ 1001.119635][T19331] FAULT_INJECTION: forcing a failure. [ 1001.119635][T19331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.132919][T19331] CPU: 1 UID: 0 PID: 19331 Comm: syz.8.16996 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1001.133021][T19331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.133047][T19331] Call Trace: [ 1001.133054][T19331] [ 1001.133061][T19331] __dump_stack+0x1d/0x30 [ 1001.133084][T19331] dump_stack_lvl+0xe8/0x140 [ 1001.133110][T19331] dump_stack+0x15/0x1b [ 1001.133132][T19331] should_fail_ex+0x265/0x280 [ 1001.133227][T19331] should_fail+0xb/0x20 [ 1001.133261][T19331] should_fail_usercopy+0x1a/0x20 [ 1001.133301][T19331] _copy_to_user+0x20/0xa0 [ 1001.133325][T19331] simple_read_from_buffer+0xb5/0x130 [ 1001.133413][T19331] proc_fail_nth_read+0x100/0x140 [ 1001.133448][T19331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.133490][T19331] vfs_read+0x19d/0x6f0 [ 1001.133598][T19331] ? __rcu_read_unlock+0x4f/0x70 [ 1001.133702][T19331] ? __fget_files+0x184/0x1c0 [ 1001.133805][T19331] ksys_read+0xda/0x1a0 [ 1001.133842][T19331] __x64_sys_read+0x40/0x50 [ 1001.133871][T19331] x64_sys_call+0x2d77/0x2fb0 [ 1001.133892][T19331] do_syscall_64+0xd2/0x200 [ 1001.133913][T19331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1001.133961][T19331] ? clear_bhb_loop+0x40/0x90 [ 1001.133988][T19331] ? clear_bhb_loop+0x40/0x90 [ 1001.134010][T19331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.134035][T19331] RIP: 0033:0x7f1d86c6d33c [ 1001.134051][T19331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1001.134103][T19331] RSP: 002b:00007f1d852d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1001.134129][T19331] RAX: ffffffffffffffda RBX: 00007f1d86e95fa0 RCX: 00007f1d86c6d33c [ 1001.134146][T19331] RDX: 000000000000000f RSI: 00007f1d852d70a0 RDI: 0000000000000007 [ 1001.134161][T19331] RBP: 00007f1d852d7090 R08: 0000000000000000 R09: 0000000000000014 [ 1001.134208][T19331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.134224][T19331] R13: 0000000000000000 R14: 00007f1d86e95fa0 R15: 00007ffd4962a038 [ 1001.134255][T19331] [ 1001.385196][T19338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16999'. [ 1001.589932][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17003'. [ 1001.664429][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17006'. [ 1001.676741][T19357] netlink: 'syz.8.17005': attribute type 1 has an invalid length. [ 1001.684687][T19357] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17005'. [ 1001.729045][T19363] tipc: Enabling of bearer rejected, already enabled [ 1001.816976][T19369] random: crng reseeded on system resumption [ 1001.937542][T19375] FAULT_INJECTION: forcing a failure. [ 1001.937542][T19375] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.950379][T19375] CPU: 1 UID: 0 PID: 19375 Comm: syz.8.17013 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1001.950417][T19375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.950429][T19375] Call Trace: [ 1001.950436][T19375] [ 1001.950445][T19375] __dump_stack+0x1d/0x30 [ 1001.950467][T19375] dump_stack_lvl+0xe8/0x140 [ 1001.950491][T19375] dump_stack+0x15/0x1b [ 1001.950511][T19375] should_fail_ex+0x265/0x280 [ 1001.950593][T19375] should_failslab+0x8c/0xb0 [ 1001.950615][T19375] __kmalloc_noprof+0xa5/0x3e0 [ 1001.950697][T19375] ? alloc_pipe_info+0x1c9/0x350 [ 1001.950731][T19375] alloc_pipe_info+0x1c9/0x350 [ 1001.950810][T19375] splice_direct_to_actor+0x592/0x680 [ 1001.950862][T19375] ? kstrtouint_from_user+0x9f/0xf0 [ 1001.950976][T19375] ? __pfx_direct_splice_actor+0x10/0x10 [ 1001.951012][T19375] ? __rcu_read_unlock+0x4f/0x70 [ 1001.951042][T19375] ? get_pid_task+0x96/0xd0 [ 1001.951130][T19375] ? avc_policy_seqno+0x15/0x30 [ 1001.951162][T19375] ? selinux_file_permission+0x1e4/0x320 [ 1001.951188][T19375] do_splice_direct+0xda/0x150 [ 1001.951257][T19375] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1001.951290][T19375] do_sendfile+0x380/0x650 [ 1001.951318][T19375] __x64_sys_sendfile64+0x105/0x150 [ 1001.951430][T19375] x64_sys_call+0xb39/0x2fb0 [ 1001.951458][T19375] do_syscall_64+0xd2/0x200 [ 1001.951481][T19375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1001.951515][T19375] ? clear_bhb_loop+0x40/0x90 [ 1001.951550][T19375] ? clear_bhb_loop+0x40/0x90 [ 1001.951571][T19375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.951593][T19375] RIP: 0033:0x7f1d86c6e929 [ 1001.951612][T19375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.951638][T19375] RSP: 002b:00007f1d852d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1001.951661][T19375] RAX: ffffffffffffffda RBX: 00007f1d86e95fa0 RCX: 00007f1d86c6e929 [ 1001.951673][T19375] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1001.951685][T19375] RBP: 00007f1d852d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.951696][T19375] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 1001.951708][T19375] R13: 0000000000000000 R14: 00007f1d86e95fa0 R15: 00007ffd4962a038 [ 1001.951784][T19375] [ 1002.711954][T19411] netlink: 'syz.7.17024': attribute type 13 has an invalid length. [ 1003.172391][T19416] netlink: 'syz.8.17026': attribute type 1 has an invalid length. [ 1003.302507][T19433] random: crng reseeded on system resumption [ 1003.588682][T19452] netlink: 'syz.8.17040': attribute type 1 has an invalid length. [ 1003.631602][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 1003.631668][ T29] audit: type=1326 audit(1752668155.098:89024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.665986][T19458] loop9: detected capacity change from 0 to 7 [ 1003.672682][T19458] Buffer I/O error on dev loop9, logical block 0, async page read [ 1003.681068][T19458] Buffer I/O error on dev loop9, logical block 0, async page read [ 1003.683847][ T29] audit: type=1326 audit(1752668155.129:89025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.689051][T19458] loop9: unable to read partition table [ 1003.712740][ T29] audit: type=1326 audit(1752668155.129:89026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.718798][T19458] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1003.718798][T19458] ) failed (rc=-5) [ 1003.742063][ T29] audit: type=1326 audit(1752668155.129:89027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.742116][ T29] audit: type=1326 audit(1752668155.129:89028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.803246][ T29] audit: type=1326 audit(1752668155.129:89029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.827387][ T29] audit: type=1326 audit(1752668155.129:89030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.851563][ T29] audit: type=1326 audit(1752668155.129:89031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.875331][ T29] audit: type=1326 audit(1752668155.129:89032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1003.899110][ T29] audit: type=1326 audit(1752668155.129:89033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.8.17043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86c6e929 code=0x7ffc0000 [ 1004.112656][T19469] netlink: 'syz.5.17046': attribute type 1 has an invalid length. [ 1004.275017][T19482] netlink: 'syz.5.17052': attribute type 13 has an invalid length. [ 1004.362578][T19482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.374278][T19482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.413789][T19482] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.423103][T19482] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.432095][T19482] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.441063][T19482] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.476739][T19490] netlink: 'syz.8.17055': attribute type 1 has an invalid length. [ 1004.542761][T19496] random: crng reseeded on system resumption [ 1004.755796][T19500] netlink: 'syz.4.17059': attribute type 1 has an invalid length. [ 1004.763687][T19500] __nla_validate_parse: 9 callbacks suppressed [ 1004.763705][T19500] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.17059'. [ 1004.941430][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17061'. [ 1005.305310][T19524] netlink: 'syz.7.17068': attribute type 1 has an invalid length. [ 1005.313330][T19524] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17068'. [ 1005.320069][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17067'. [ 1005.357329][T19521] siw: device registration error -23 [ 1005.454295][T19529] netlink: 'syz.7.17070': attribute type 1 has an invalid length. [ 1005.462354][T19529] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17070'. [ 1005.492178][T19535] netlink: 'syz.8.17072': attribute type 13 has an invalid length. [ 1005.578595][T19553] random: crng reseeded on system resumption [ 1005.742183][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17081'. [ 1005.761050][T19560] siw: device registration error -23 [ 1005.789001][T19564] netlink: 'syz.7.17082': attribute type 1 has an invalid length. [ 1005.796939][T19564] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17082'. [ 1005.890165][T19571] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17085'. [ 1006.002897][T19573] netlink: 'syz.7.17086': attribute type 1 has an invalid length. [ 1006.010965][T19573] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17086'. [ 1006.190305][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17093'. [ 1006.200698][T19588] siw: device registration error -23 [ 1006.230338][T19592] netlink: 'syz.7.17094': attribute type 1 has an invalid length. [ 1006.472162][T19614] loop9: detected capacity change from 0 to 7 [ 1006.478746][T19614] Buffer I/O error on dev loop9, logical block 0, async page read [ 1006.486730][T19614] Buffer I/O error on dev loop9, logical block 0, async page read [ 1006.494716][T19614] loop9: unable to read partition table [ 1006.502140][T19614] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1006.502140][T19614] ) failed (rc=-5) [ 1006.558609][T19618] siw: device registration error -23 [ 1006.569981][T19616] SELinux: ebitmap: truncated map [ 1006.577314][T19616] SELinux: failed to load policy [ 1006.636921][T19627] netlink: 'syz.5.17108': attribute type 1 has an invalid length. [ 1006.830696][T19633] random: crng reseeded on system resumption [ 1007.161331][T19604] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1007.172876][T19647] loop9: detected capacity change from 0 to 7 [ 1007.180338][T19647] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.188462][T19647] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.196620][T19647] loop9: unable to read partition table [ 1007.202964][T19647] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1007.202964][T19647] ) failed (rc=-5) [ 1007.227386][T19649] siw: device registration error -23 [ 1007.917581][T19691] loop9: detected capacity change from 0 to 7 [ 1007.923880][T19691] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.931963][T19691] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.939880][T19691] loop9: unable to read partition table [ 1007.945636][T19691] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1007.945636][T19691] ) failed (rc=-5) [ 1007.998380][T19693] siw: device registration error -23 [ 1008.257371][T19708] random: crng reseeded on system resumption [ 1008.614060][T19732] FAULT_INJECTION: forcing a failure. [ 1008.614060][T19732] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.627045][T19732] CPU: 1 UID: 0 PID: 19732 Comm: syz.1.17145 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1008.627097][T19732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1008.627109][T19732] Call Trace: [ 1008.627116][T19732] [ 1008.627124][T19732] __dump_stack+0x1d/0x30 [ 1008.627144][T19732] dump_stack_lvl+0xe8/0x140 [ 1008.627166][T19732] dump_stack+0x15/0x1b [ 1008.627186][T19732] should_fail_ex+0x265/0x280 [ 1008.627230][T19732] ? p9_client_stat+0x5a/0x200 [ 1008.627297][T19732] should_failslab+0x8c/0xb0 [ 1008.627325][T19732] __kmalloc_cache_noprof+0x4c/0x320 [ 1008.627424][T19732] p9_client_stat+0x5a/0x200 [ 1008.627475][T19732] v9fs_vfs_getattr+0x143/0x260 [ 1008.627512][T19732] vfs_getattr_nosec+0x146/0x1e0 [ 1008.627536][T19732] vfs_statx+0x113/0x390 [ 1008.627560][T19732] __se_sys_newstat+0x69/0x280 [ 1008.627676][T19732] ? __bpf_trace_sys_enter+0x10/0x30 [ 1008.627699][T19732] ? trace_sys_enter+0xd0/0x110 [ 1008.627724][T19732] __x64_sys_newstat+0x31/0x40 [ 1008.627746][T19732] x64_sys_call+0x781/0x2fb0 [ 1008.627859][T19732] do_syscall_64+0xd2/0x200 [ 1008.627877][T19732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1008.627961][T19732] ? clear_bhb_loop+0x40/0x90 [ 1008.627983][T19732] ? clear_bhb_loop+0x40/0x90 [ 1008.628005][T19732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.628027][T19732] RIP: 0033:0x7f049ff0e929 [ 1008.628085][T19732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.628104][T19732] RSP: 002b:00007f049e577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1008.628162][T19732] RAX: ffffffffffffffda RBX: 00007f04a0135fa0 RCX: 00007f049ff0e929 [ 1008.628175][T19732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001c40 [ 1008.628210][T19732] RBP: 00007f049e577090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.628223][T19732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.628236][T19732] R13: 0000000000000000 R14: 00007f04a0135fa0 R15: 00007fff9a1642b8 [ 1008.628257][T19732] [ 1008.628685][T19689] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1008.890734][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 1008.890753][ T29] audit: type=1326 audit(1752668160.610:89251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1008.937033][ T29] audit: type=1326 audit(1752668160.610:89252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1008.960895][ T29] audit: type=1326 audit(1752668160.641:89253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1008.984817][ T29] audit: type=1326 audit(1752668160.641:89254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.008831][ T29] audit: type=1326 audit(1752668160.641:89255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.032864][ T29] audit: type=1326 audit(1752668160.641:89256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.056965][ T29] audit: type=1326 audit(1752668160.641:89257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.080807][ T29] audit: type=1326 audit(1752668160.641:89258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.104716][ T29] audit: type=1326 audit(1752668160.641:89259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.128542][ T29] audit: type=1326 audit(1752668160.641:89260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.1.17146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1009.220518][T19751] loop9: detected capacity change from 0 to 7 [ 1009.231551][T19751] Buffer I/O error on dev loop9, logical block 0, async page read [ 1009.260385][T19751] Buffer I/O error on dev loop9, logical block 0, async page read [ 1009.268396][T19751] loop9: unable to read partition table [ 1009.275755][T19751] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1009.275755][T19751] ) failed (rc=-5) [ 1009.442556][T19772] validate_nla: 3 callbacks suppressed [ 1009.442575][T19772] netlink: 'syz.5.17158': attribute type 13 has an invalid length. [ 1009.487021][T19764] lo speed is unknown, defaulting to 1000 [ 1009.493652][T19764] lo speed is unknown, defaulting to 1000 [ 1009.551393][T19764] chnl_net:caif_netlink_parms(): no params data found [ 1009.591665][T19764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.598920][T19764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.606178][T19764] bridge_slave_0: entered allmulticast mode [ 1009.612777][T19764] bridge_slave_0: entered promiscuous mode [ 1009.619733][T19764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.627172][T19764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.634686][T19764] bridge_slave_1: entered allmulticast mode [ 1009.641502][T19764] bridge_slave_1: entered promiscuous mode [ 1009.660389][T19764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.671026][T19764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.701541][T19764] team0: Port device team_slave_0 added [ 1009.709848][T19764] team0: Port device team_slave_1 added [ 1009.735196][T19764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.742449][T19764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.768554][T19764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.785624][T19764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.792733][T19764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.818860][T19764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.832930][T19789] __nla_validate_parse: 11 callbacks suppressed [ 1009.832950][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17161'. [ 1009.856528][T14604] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1009.865689][T14604] bond0 (unregistering): Released all slaves [ 1009.876920][T19789] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1009.886829][T19789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17161'. [ 1009.906215][T14604] tipc: Disabling bearer [ 1009.911731][T14604] tipc: Left network mode [ 1009.925007][T19764] hsr_slave_0: entered promiscuous mode [ 1009.932254][T19764] hsr_slave_1: entered promiscuous mode [ 1009.938820][T19764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.946857][T19764] Cannot create hsr debugfs directory [ 1009.955612][T14604] hsr_slave_0: left promiscuous mode [ 1009.961669][T14604] hsr_slave_1: left promiscuous mode [ 1010.030648][T19792] random: crng reseeded on system resumption [ 1010.051721][T19789] vlan0: entered allmulticast mode [ 1010.056908][T19789] bridge_slave_0: entered allmulticast mode [ 1010.082051][T19794] netlink: 'syz.4.17163': attribute type 1 has an invalid length. [ 1010.090120][T19794] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.17163'. [ 1010.265564][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17168'. [ 1010.383476][T19764] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1010.392644][T19764] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1010.401916][T19764] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1010.411134][T19764] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1010.451903][T19764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.465219][T19764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.474814][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.482026][T14604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.492548][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.499665][T14604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.570907][T19764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.708840][T19764] veth0_vlan: entered promiscuous mode [ 1010.716837][T19764] veth1_vlan: entered promiscuous mode [ 1010.732971][T19764] veth0_macvtap: entered promiscuous mode [ 1010.742022][T19764] veth1_macvtap: entered promiscuous mode [ 1010.753000][T19764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.764366][T19764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.773082][T19764] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.782029][T19764] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.790874][T19764] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.799713][T19764] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.877339][T19845] SELinux: ebitmap: truncated map [ 1010.884306][T19845] SELinux: failed to load policy [ 1010.959061][T19850] netlink: 'syz.8.17174': attribute type 1 has an invalid length. [ 1010.967175][T19850] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17174'. [ 1011.028553][T19859] netlink: 'syz.8.17178': attribute type 1 has an invalid length. [ 1011.036591][T19859] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17178'. [ 1011.118800][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17184'. [ 1011.131783][T19870] SELinux: ebitmap: truncated map [ 1011.138242][T19870] SELinux: failed to load policy [ 1011.223009][T19876] lo speed is unknown, defaulting to 1000 [ 1011.284632][T19889] netlink: 'syz.8.17189': attribute type 1 has an invalid length. [ 1011.292660][T19889] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17189'. [ 1011.354767][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17192'. [ 1011.540446][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17197'. [ 1011.576659][T19910] SELinux: ebitmap: truncated map [ 1011.582331][T19910] SELinux: failed to load policy [ 1011.602128][T19914] random: crng reseeded on system resumption [ 1011.652356][T19920] netlink: 'syz.4.17203': attribute type 1 has an invalid length. [ 1011.694156][T19922] loop9: detected capacity change from 0 to 7 [ 1011.701016][T19922] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.711103][T19922] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.719136][T19922] loop9: unable to read partition table [ 1011.751016][T19922] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1011.751016][T19922] ) failed (rc=-5) [ 1011.806675][T19930] netlink: 'syz.5.17207': attribute type 1 has an invalid length. [ 1011.911209][T19934] lo speed is unknown, defaulting to 1000 [ 1011.919195][T19934] lo speed is unknown, defaulting to 1000 [ 1011.925484][T19934] lo speed is unknown, defaulting to 1000 [ 1011.933199][T19934] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1011.948333][T19934] lo speed is unknown, defaulting to 1000 [ 1011.954926][T19934] lo speed is unknown, defaulting to 1000 [ 1011.963429][T19934] lo speed is unknown, defaulting to 1000 [ 1011.969955][T19934] lo speed is unknown, defaulting to 1000 [ 1011.977867][T19934] lo speed is unknown, defaulting to 1000 [ 1011.984341][T19934] lo speed is unknown, defaulting to 1000 [ 1011.990608][T19934] lo speed is unknown, defaulting to 1000 [ 1011.997006][T19934] lo speed is unknown, defaulting to 1000 [ 1012.117136][T19959] netlink: 'syz.5.17217': attribute type 1 has an invalid length. [ 1012.178356][T19961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.186912][T19961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.195876][T19961] netlink: 'syz.8.17218': attribute type 27 has an invalid length. [ 1012.224884][T19961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.232327][T19961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.271636][T19961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.282334][T19961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.310194][T19961] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.319378][T19961] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.328681][T19961] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.337858][T19961] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.347695][T19968] netlink: 'syz.5.17219': attribute type 1 has an invalid length. [ 1012.373458][T19967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.381631][T19967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.391722][T19967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1012.433096][T19968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1012.444037][T19964] bond1 (unregistering): Released all slaves [ 1012.467525][T19966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19966 comm=syz.5.17219 [ 1012.563315][T19979] FAULT_INJECTION: forcing a failure. [ 1012.563315][T19979] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.576250][T19979] CPU: 0 UID: 0 PID: 19979 Comm: syz.7.17223 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1012.576288][T19979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1012.576301][T19979] Call Trace: [ 1012.576308][T19979] [ 1012.576316][T19979] __dump_stack+0x1d/0x30 [ 1012.576413][T19979] dump_stack_lvl+0xe8/0x140 [ 1012.576437][T19979] dump_stack+0x15/0x1b [ 1012.576506][T19979] should_fail_ex+0x265/0x280 [ 1012.576540][T19979] ? audit_log_d_path+0x8d/0x150 [ 1012.576644][T19979] should_failslab+0x8c/0xb0 [ 1012.576672][T19979] __kmalloc_cache_noprof+0x4c/0x320 [ 1012.576704][T19979] audit_log_d_path+0x8d/0x150 [ 1012.576739][T19979] audit_log_d_path_exe+0x42/0x70 [ 1012.576796][T19979] audit_log_task+0x1e9/0x250 [ 1012.576832][T19979] audit_seccomp+0x61/0x100 [ 1012.576857][T19979] ? __seccomp_filter+0x68c/0x10d0 [ 1012.576947][T19979] __seccomp_filter+0x69d/0x10d0 [ 1012.576970][T19979] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1012.577033][T19979] ? vfs_write+0x75e/0x8e0 [ 1012.577125][T19979] __secure_computing+0x82/0x150 [ 1012.577147][T19979] syscall_trace_enter+0xcf/0x1e0 [ 1012.577178][T19979] do_syscall_64+0xac/0x200 [ 1012.577204][T19979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1012.577230][T19979] ? clear_bhb_loop+0x40/0x90 [ 1012.577251][T19979] ? clear_bhb_loop+0x40/0x90 [ 1012.577278][T19979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.577347][T19979] RIP: 0033:0x7fc811dde929 [ 1012.577363][T19979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.577385][T19979] RSP: 002b:00007fc810447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 1012.577408][T19979] RAX: ffffffffffffffda RBX: 00007fc812005fa0 RCX: 00007fc811dde929 [ 1012.577489][T19979] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 1012.577503][T19979] RBP: 00007fc810447090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.577518][T19979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.577533][T19979] R13: 0000000000000000 R14: 00007fc812005fa0 R15: 00007ffe4cbb8fb8 [ 1012.577605][T19979] [ 1012.983242][T19997] random: crng reseeded on system resumption [ 1013.695689][T19991] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1013.964849][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 1013.964891][ T29] audit: type=1326 audit(1752668165.944:89941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1013.998815][ T29] audit: type=1326 audit(1752668165.944:89942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.022740][ T29] audit: type=1326 audit(1752668165.944:89943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.046675][ T29] audit: type=1326 audit(1752668165.944:89944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.070554][ T29] audit: type=1326 audit(1752668165.944:89945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.094442][ T29] audit: type=1326 audit(1752668165.944:89946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.118415][ T29] audit: type=1326 audit(1752668165.944:89947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.142289][ T29] audit: type=1326 audit(1752668165.944:89948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.166263][ T29] audit: type=1326 audit(1752668165.944:89949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.189973][ T29] audit: type=1326 audit(1752668165.944:89950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.4.17257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1014.268376][T20065] validate_nla: 1 callbacks suppressed [ 1014.268393][T20065] netlink: 'syz.5.17261': attribute type 13 has an invalid length. [ 1014.269918][T20063] netlink: 'syz.8.17260': attribute type 1 has an invalid length. [ 1014.456133][T20075] random: crng reseeded on system resumption [ 1014.830820][T20085] __nla_validate_parse: 10 callbacks suppressed [ 1014.830868][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17268'. [ 1015.373606][T20095] netlink: 'syz.8.17273': attribute type 1 has an invalid length. [ 1015.381690][T20095] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17273'. [ 1015.439335][T20097] netlink: 'syz.7.17274': attribute type 13 has an invalid length. [ 1015.568260][T20105] netlink: 'syz.8.17277': attribute type 13 has an invalid length. [ 1015.638822][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17279'. [ 1015.742777][T20114] random: crng reseeded on system resumption [ 1016.454773][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17289'. [ 1016.464770][T20136] bridge_slave_1: left allmulticast mode [ 1016.470627][T20136] bridge_slave_1: left promiscuous mode [ 1016.476390][T20136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.485184][T20136] bridge_slave_0: left allmulticast mode [ 1016.485613][T20139] netlink: 'syz.7.17288': attribute type 13 has an invalid length. [ 1016.491016][T20136] bridge_slave_0: left promiscuous mode [ 1016.491162][T20136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.514983][T20140] siw: device registration error -23 [ 1016.516294][T20138] netlink: 'syz.4.17291': attribute type 1 has an invalid length. [ 1016.528396][T20138] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.17291'. [ 1016.573095][T20144] tipc: Enabling of bearer rejected, already enabled [ 1016.605690][T20145] netlink: 'syz.1.17293': attribute type 13 has an invalid length. [ 1016.683087][T20145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.695810][T20145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.739768][T20145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.748825][T20145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.758072][T20145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.767292][T20145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.786362][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17299'. [ 1016.811692][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17299'. [ 1016.821721][T20156] siw: device registration error -23 [ 1016.844600][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17300'. [ 1016.871649][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17300'. [ 1016.882092][T20160] siw: device registration error -23 [ 1016.908169][T20164] netlink: 'syz.4.17301': attribute type 1 has an invalid length. [ 1016.916191][T20164] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.17301'. [ 1017.141788][T20171] random: crng reseeded on system resumption [ 1017.372299][T20178] tipc: Enabling of bearer rejected, already enabled [ 1017.547302][T20188] siw: device registration error -23 [ 1017.583463][T20192] netlink: 'syz.1.17312': attribute type 1 has an invalid length. [ 1017.665630][T20194] loop9: detected capacity change from 0 to 7 [ 1017.673928][T20194] Buffer I/O error on dev loop9, logical block 0, async page read [ 1017.682749][T20194] Buffer I/O error on dev loop9, logical block 0, async page read [ 1017.690895][T20194] loop9: unable to read partition table [ 1017.696833][T20194] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1017.696833][T20194] ) failed (rc=-5) [ 1017.988532][T20218] siw: device registration error -23 [ 1018.177665][T20234] siw: device registration error -23 [ 1018.290933][T20254] random: crng reseeded on system resumption [ 1018.341678][T20256] siw: device registration error -23 [ 1018.626945][T20272] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1018.713254][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 1018.721083][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 1018.732030][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.740030][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.747865][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.755554][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.763281][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.771021][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.778823][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.786719][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.794521][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.802257][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.810057][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.817848][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.825582][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.833382][ T23] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 1018.852099][ T23] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 1018.866898][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 1018.866918][ T29] audit: type=1400 audit(1752668171.088:90297): avc: denied { create } for pid=20280 comm="syz.5.17346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1018.895415][ T29] audit: type=1400 audit(1752668171.088:90298): avc: denied { connect } for pid=20280 comm="syz.5.17346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1019.019566][T20288] siw: device registration error -23 [ 1019.103143][T20290] tipc: Started in network mode [ 1019.108180][T20290] tipc: Node identity ac141413, cluster identity 4711 [ 1019.115219][T20290] tipc: New replicast peer: 10.1.1.2 [ 1019.120629][T20290] tipc: Enabled bearer , priority 10 [ 1019.199382][ T29] audit: type=1326 audit(1752668171.435:90299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20294 comm="syz.4.17352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ad410e929 code=0x0 [ 1019.224728][T20301] validate_nla: 3 callbacks suppressed [ 1019.224749][T20301] netlink: 'syz.8.17354': attribute type 13 has an invalid length. [ 1019.248072][ T29] audit: type=1326 audit(1752668171.487:90300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20294 comm="syz.4.17352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ad410e929 code=0x0 [ 1019.408193][T20313] tipc: Enabling of bearer rejected, already enabled [ 1019.456055][T20314] netlink: 'syz.7.17358': attribute type 13 has an invalid length. [ 1019.504912][T20318] random: crng reseeded on system resumption [ 1019.961893][T20325] __nla_validate_parse: 15 callbacks suppressed [ 1019.961909][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17362'. [ 1019.996628][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17362'. [ 1020.006840][T20325] siw: device registration error -23 [ 1020.027867][T20332] tipc: Enabling of bearer rejected, already enabled [ 1020.112006][ T29] audit: type=1326 audit(1752668172.390:90301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20342 comm="syz.8.17369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1020.136338][ T29] audit: type=1326 audit(1752668172.390:90302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20342 comm="syz.8.17369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1020.160170][ T29] audit: type=1326 audit(1752668172.390:90303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20342 comm="syz.8.17369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1020.184046][ T29] audit: type=1326 audit(1752668172.390:90304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20342 comm="syz.8.17369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1020.207751][ T29] audit: type=1326 audit(1752668172.390:90305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20342 comm="syz.8.17369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1020.231486][ T29] audit: type=1326 audit(1752668172.390:90306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20342 comm="syz.8.17369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1020.234588][ T23] tipc: Node number set to 2886997011 [ 1020.389435][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17376'. [ 1020.418200][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17376'. [ 1020.428518][T20358] siw: device registration error -23 [ 1020.495803][T20366] tipc: Enabling of bearer rejected, already enabled [ 1020.616879][T20378] random: crng reseeded on system resumption [ 1021.282478][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17388'. [ 1021.318046][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17388'. [ 1021.328267][T20396] siw: device registration error -23 [ 1021.355835][T20401] netlink: 'syz.4.17389': attribute type 13 has an invalid length. [ 1021.383175][T20404] tipc: Enabling of bearer rejected, already enabled [ 1021.458174][T20409] netlink: 'syz.7.17393': attribute type 1 has an invalid length. [ 1021.466174][T20409] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17393'. [ 1021.590893][T20417] program syz.8.17397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.742705][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17402'. [ 1021.773530][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17402'. [ 1021.783776][T20433] siw: device registration error -23 [ 1022.302945][T20442] random: crng reseeded on system resumption [ 1022.316526][T20444] tipc: Enabling of bearer rejected, already enabled [ 1022.349994][T20448] veth1_to_bond: entered allmulticast mode [ 1022.362550][T20448] veth1_to_bond: left allmulticast mode [ 1022.496183][T20462] netlink: 'syz.5.17414': attribute type 1 has an invalid length. [ 1022.504161][T20462] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.17414'. [ 1022.537291][T20467] netlink: 'syz.7.17415': attribute type 13 has an invalid length. [ 1023.125948][T20481] tipc: Enabling of bearer rejected, already enabled [ 1023.428719][T20497] netlink: 'syz.1.17427': attribute type 1 has an invalid length. [ 1023.534443][T20509] netlink: 'syz.5.17430': attribute type 13 has an invalid length. [ 1024.106567][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 1024.106587][ T29] audit: type=1326 audit(1752668176.590:90389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.136806][ T29] audit: type=1326 audit(1752668176.590:90390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.160578][ T29] audit: type=1326 audit(1752668176.590:90391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.184351][ T29] audit: type=1326 audit(1752668176.590:90392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.208344][ T29] audit: type=1326 audit(1752668176.590:90393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.232623][ T29] audit: type=1326 audit(1752668176.590:90394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.256436][ T29] audit: type=1326 audit(1752668176.590:90395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.280261][ T29] audit: type=1326 audit(1752668176.590:90396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.304160][ T29] audit: type=1326 audit(1752668176.590:90397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.328019][ T29] audit: type=1326 audit(1752668176.590:90398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.4.17435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1024.455526][T20536] netlink: 'syz.1.17439': attribute type 13 has an invalid length. [ 1024.945643][T20544] netlink: 'syz.4.17443': attribute type 1 has an invalid length. [ 1024.953630][T20544] __nla_validate_parse: 4 callbacks suppressed [ 1024.953647][T20544] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.17443'. [ 1025.139169][T20554] tipc: Enabling of bearer rejected, already enabled [ 1025.176754][T20556] loop9: detected capacity change from 0 to 7 [ 1025.205435][T20556] Buffer I/O error on dev loop9, logical block 0, async page read [ 1025.218225][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17449'. [ 1025.229024][T20558] siw: device registration error -23 [ 1025.233859][T20556] Buffer I/O error on dev loop9, logical block 0, async page read [ 1025.242456][T20556] loop9: unable to read partition table [ 1025.262329][T20556] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1025.262329][T20556] ) failed (rc=-5) [ 1025.307305][T20566] tipc: Enabling of bearer rejected, already enabled [ 1025.340331][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17450'. [ 1025.342195][T20571] netlink: 'syz.7.17451': attribute type 13 has an invalid length. [ 1025.373672][T20573] netlink: 'syz.1.17455': attribute type 1 has an invalid length. [ 1025.381690][T20573] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.17455'. [ 1025.449908][T20582] tipc: Enabling of bearer rejected, already enabled [ 1025.907934][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17463'. [ 1026.058828][T20599] netlink: 'syz.4.17467': attribute type 1 has an invalid length. [ 1026.066849][T20599] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.17467'. [ 1026.136991][T20601] netlink: 'syz.7.17468': attribute type 1 has an invalid length. [ 1026.145013][T20601] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17468'. [ 1026.251175][T20610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17472'. [ 1026.273112][T20610] siw: device registration error -23 [ 1026.390713][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17481'. [ 1026.400707][T20631] siw: device registration error -23 [ 1026.415012][T20634] netlink: 'syz.1.17479': attribute type 13 has an invalid length. [ 1026.453577][T20638] loop9: detected capacity change from 0 to 7 [ 1026.460069][T20638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1026.469906][T20638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1026.478093][T20638] loop9: unable to read partition table [ 1026.485304][T20638] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1026.485304][T20638] ) failed (rc=-5) [ 1026.510544][T20618] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17475'. [ 1026.589836][T20650] random: crng reseeded on system resumption [ 1027.298617][T20663] siw: device registration error -23 [ 1027.584300][T20690] netlink: 'syz.8.17502': attribute type 13 has an invalid length. [ 1027.990800][T20716] tipc: Enabling of bearer rejected, already enabled [ 1028.030566][T20718] loop9: detected capacity change from 0 to 7 [ 1028.037109][T20718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1028.045154][T20718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1028.053062][T20718] loop9: unable to read partition table [ 1028.058791][T20718] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1028.058791][T20718] ) failed (rc=-5) [ 1028.136277][T20722] siw: device registration error -23 [ 1028.272806][T20736] random: crng reseeded on system resumption [ 1028.756063][T20754] siw: device registration error -23 [ 1029.136718][T20775] netlink: 'syz.7.17536': attribute type 13 has an invalid length. [ 1029.155543][T20777] random: crng reseeded on system resumption [ 1029.285982][T20785] siw: device registration error -23 [ 1029.918113][T20810] __nla_validate_parse: 11 callbacks suppressed [ 1029.918137][T20810] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.17553'. [ 1029.955482][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17554'. [ 1030.020192][T20816] netlink: 'syz.8.17555': attribute type 1 has an invalid length. [ 1030.028132][T20816] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17555'. [ 1030.038328][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 1030.038348][ T29] audit: type=1326 audit(1752668182.816:90627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.038456][ T29] audit: type=1326 audit(1752668182.816:90628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.049047][ T29] audit: type=1326 audit(1752668182.826:90629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.098282][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17557'. [ 1030.120961][ T29] audit: type=1326 audit(1752668182.910:90630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.153669][ T29] audit: type=1326 audit(1752668182.910:90631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.195862][T20822] loop9: detected capacity change from 0 to 7 [ 1030.196028][T20822] Buffer I/O error on dev loop9, logical block 0, async page read [ 1030.196066][T20822] Buffer I/O error on dev loop9, logical block 0, async page read [ 1030.196093][T20822] loop9: unable to read partition table [ 1030.196116][T20822] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1030.196116][T20822] ) failed (rc=-5) [ 1030.213660][ T29] audit: type=1326 audit(1752668182.973:90632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.264437][ T29] audit: type=1326 audit(1752668182.973:90633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.264472][ T29] audit: type=1326 audit(1752668182.973:90634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc811dde929 code=0x7ffc0000 [ 1030.264548][ T29] audit: type=1326 audit(1752668182.973:90635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc811dde963 code=0x7ffc0000 [ 1030.264588][ T29] audit: type=1326 audit(1752668182.973:90636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20819 comm="syz.7.17557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc811ddd3df code=0x7ffc0000 [ 1030.446097][T20841] tipc: Enabling of bearer rejected, already enabled [ 1030.513164][T20845] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17567'. [ 1031.045271][T20862] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17576'. [ 1031.155167][T20864] tipc: Enabling of bearer rejected, already enabled [ 1031.238982][T20868] random: crng reseeded on system resumption [ 1031.282504][T20869] netlink: 'syz.1.17578': attribute type 13 has an invalid length. [ 1031.448021][T20879] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.17583'. [ 1031.485533][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17585'. [ 1031.497439][T20883] siw: device registration error -23 [ 1031.578672][T20895] netlink: 'syz.7.17590': attribute type 1 has an invalid length. [ 1031.586700][T20895] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.17590'. [ 1032.087713][T20912] tipc: Enabling of bearer rejected, already enabled [ 1032.139252][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17599'. [ 1032.208938][T20926] netlink: 'syz.5.17603': attribute type 1 has an invalid length. [ 1032.268899][T20930] loop9: detected capacity change from 0 to 7 [ 1032.275227][T20930] Buffer I/O error on dev loop9, logical block 0, async page read [ 1032.283178][T20930] Buffer I/O error on dev loop9, logical block 0, async page read [ 1032.291087][T20930] loop9: unable to read partition table [ 1032.296902][T20930] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1032.296902][T20930] ) failed (rc=-5) [ 1032.332277][T20932] random: crng reseeded on system resumption [ 1032.399390][T20942] tipc: Enabling of bearer rejected, already enabled [ 1032.446238][T20946] siw: device registration error -23 [ 1032.549624][T20960] netlink: 'syz.4.17615': attribute type 1 has an invalid length. [ 1033.298791][T20995] netlink: 'syz.5.17631': attribute type 1 has an invalid length. [ 1033.354288][T21000] netlink: 'syz.8.17632': attribute type 13 has an invalid length. [ 1033.387782][T21001] netlink: 'syz.5.17633': attribute type 13 has an invalid length. [ 1033.455176][T21005] tipc: Enabling of bearer rejected, already enabled [ 1033.727757][T21027] netlink: 'syz.1.17644': attribute type 1 has an invalid length. [ 1033.816605][T21033] tipc: Enabling of bearer rejected, already enabled [ 1034.276104][T21057] random: crng reseeded on system resumption [ 1034.335132][T21065] tipc: Enabling of bearer rejected, already enabled [ 1034.392865][T21069] netlink: 'syz.5.17660': attribute type 1 has an invalid length. [ 1034.760106][T21075] __nla_validate_parse: 14 callbacks suppressed [ 1034.760143][T21075] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.17664'. [ 1034.916878][T21092] tipc: Enabling of bearer rejected, already enabled [ 1035.027189][T21102] netlink: 'syz.7.17673': attribute type 13 has an invalid length. [ 1035.112684][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17676'. [ 1035.124026][T21105] siw: device registration error -23 [ 1035.165712][T21111] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17678'. [ 1035.215804][T21071] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1035.273639][T21122] tipc: Enabling of bearer rejected, already enabled [ 1035.299647][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 1035.299780][ T29] audit: type=1326 audit(1752668188.338:90790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.329868][ T29] audit: type=1326 audit(1752668188.338:90791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.406443][ T29] audit: type=1326 audit(1752668188.401:90792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.430250][ T29] audit: type=1326 audit(1752668188.401:90793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.454058][ T29] audit: type=1326 audit(1752668188.401:90794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.477856][ T29] audit: type=1326 audit(1752668188.412:90795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.501765][ T29] audit: type=1326 audit(1752668188.412:90796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.525621][ T29] audit: type=1326 audit(1752668188.412:90797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.549654][ T29] audit: type=1326 audit(1752668188.412:90798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.573414][ T29] audit: type=1326 audit(1752668188.412:90799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.8.17684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1035.623257][T21134] random: crng reseeded on system resumption [ 1036.312971][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17692'. [ 1036.324490][T21155] siw: device registration error -23 [ 1036.330263][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17691'. [ 1036.355780][T21162] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17693'. [ 1036.402023][T21168] tipc: Enabling of bearer rejected, already enabled [ 1036.427604][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17697'. [ 1036.466401][T21172] netlink: 'syz.1.17699': attribute type 1 has an invalid length. [ 1036.474561][T21172] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.17699'. [ 1036.509944][T21178] netlink: 'syz.5.17701': attribute type 13 has an invalid length. [ 1036.851501][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17708'. [ 1036.863735][T21193] siw: device registration error -23 [ 1037.409988][T21200] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.17711'. [ 1037.470256][T21208] netlink: 'syz.8.17713': attribute type 1 has an invalid length. [ 1037.503307][T21217] xt_hashlimit: max too large, truncated to 1048576 [ 1037.511294][T21217] xt_limit: Overflow, try lower: 0/0 [ 1037.577964][T21230] random: crng reseeded on system resumption [ 1037.624087][T21232] netlink: 'syz.1.17721': attribute type 13 has an invalid length. [ 1039.029611][T21245] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1039.182132][T21272] netlink: 'syz.1.17735': attribute type 1 has an invalid length. [ 1039.380606][T21284] siw: device registration error -23 [ 1039.489790][T21305] loop9: detected capacity change from 0 to 7 [ 1039.497310][T21305] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.507884][T21305] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.515765][T21305] loop9: unable to read partition table [ 1039.523327][T21305] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1039.523327][T21305] ) failed (rc=-5) [ 1039.800012][T21323] __nla_validate_parse: 7 callbacks suppressed [ 1039.800033][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17754'. [ 1039.816313][T21323] siw: device registration error -23 [ 1039.920435][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17757'. [ 1040.121777][T21344] loop9: detected capacity change from 0 to 7 [ 1040.128299][T21344] Buffer I/O error on dev loop9, logical block 0, async page read [ 1040.136439][T21344] Buffer I/O error on dev loop9, logical block 0, async page read [ 1040.144401][T21344] loop9: unable to read partition table [ 1040.150589][T21344] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1040.150589][T21344] ) failed (rc=-5) [ 1040.704186][T21359] veth1_to_bond: entered allmulticast mode [ 1040.722788][T21359] veth1_to_bond: left allmulticast mode [ 1040.965391][T21370] netlink: 'syz.7.17771': attribute type 13 has an invalid length. [ 1040.991368][T21374] netlink: 'syz.1.17772': attribute type 13 has an invalid length. [ 1041.018006][T21376] netlink: 'syz.8.17774': attribute type 1 has an invalid length. [ 1041.026000][T21376] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17774'. [ 1041.981261][T21410] netlink: 'syz.1.17790': attribute type 1 has an invalid length. [ 1041.989439][T21410] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.17790'. [ 1042.050632][T21416] random: crng reseeded on system resumption [ 1042.317402][T21438] veth1_to_bond: entered allmulticast mode [ 1042.330849][T21438] veth1_to_bond: left allmulticast mode [ 1042.337263][T21441] netlink: 'syz.7.17799': attribute type 13 has an invalid length. [ 1042.986797][T21450] netlink: 'syz.8.17805': attribute type 1 has an invalid length. [ 1042.994793][T21450] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17805'. [ 1043.005820][T21451] netlink: 'syz.4.17804': attribute type 13 has an invalid length. [ 1043.289629][T21468] veth1_to_bond: entered allmulticast mode [ 1043.301652][T21468] veth1_to_bond: left allmulticast mode [ 1043.360763][T21471] random: crng reseeded on system resumption [ 1043.431697][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 1043.431713][ T29] audit: type=1326 audit(1752668196.874:90989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.469898][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17815'. [ 1043.515075][ T29] audit: type=1326 audit(1752668196.916:90990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.538938][ T29] audit: type=1326 audit(1752668196.916:90991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.562689][ T29] audit: type=1326 audit(1752668196.916:90992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.586509][ T29] audit: type=1326 audit(1752668196.916:90993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.610343][ T29] audit: type=1326 audit(1752668196.916:90994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.634143][ T29] audit: type=1326 audit(1752668196.916:90995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.657855][ T29] audit: type=1326 audit(1752668196.916:90996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.681813][ T29] audit: type=1326 audit(1752668196.916:90997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.705501][ T29] audit: type=1326 audit(1752668196.958:90998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.1.17815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049ff0e929 code=0x7ffc0000 [ 1043.756850][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17816'. [ 1043.767179][T21479] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17816'. [ 1043.861246][T21490] netlink: 'syz.4.17819': attribute type 13 has an invalid length. [ 1043.881972][T21455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1044.402968][T21504] loop9: detected capacity change from 0 to 7 [ 1044.428920][T21504] Buffer I/O error on dev loop9, logical block 0, async page read [ 1044.449916][T21504] Buffer I/O error on dev loop9, logical block 0, async page read [ 1044.458008][T21504] loop9: unable to read partition table [ 1044.466676][T21504] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1044.466676][T21504] ) failed (rc=-5) [ 1044.533162][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17827'. [ 1044.553533][T21508] siw: device registration error -23 [ 1044.759333][T21514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17838'. [ 1044.771337][T21514] siw: device registration error -23 [ 1044.821249][T21525] random: crng reseeded on system resumption [ 1044.880648][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17829'. [ 1044.928573][T21526] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17829'. [ 1045.112531][T21547] netlink: 'syz.8.17841': attribute type 13 has an invalid length. [ 1045.186276][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17843'. [ 1045.653887][T21566] netlink: 'syz.1.17846': attribute type 1 has an invalid length. [ 1045.661874][T21566] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.17846'. [ 1045.709474][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17845'. [ 1045.718991][T21567] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1045.726770][T21567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17845'. [ 1045.810836][T21567] vlan0: entered allmulticast mode [ 1045.816189][T21567] bridge_slave_0: entered allmulticast mode [ 1045.941452][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17849'. [ 1045.953187][T21574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17849'. [ 1045.965867][T21582] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1046.006383][T21582] SELinux: failed to load policy [ 1046.078390][T21588] random: crng reseeded on system resumption [ 1046.105287][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17857'. [ 1046.125271][T21590] siw: device registration error -23 [ 1046.201969][T21598] netlink: 'syz.8.17858': attribute type 1 has an invalid length. [ 1046.630783][T21607] loop9: detected capacity change from 0 to 7 [ 1046.637959][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.648911][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.656914][T21607] loop9: unable to read partition table [ 1046.665280][T21607] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1046.665280][T21607] ) failed (rc=-5) [ 1046.989141][T21623] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1046.999355][T21623] SELinux: failed to load policy [ 1047.027712][T21626] netlink: 'syz.7.17865': attribute type 13 has an invalid length. [ 1047.102756][T21632] siw: device registration error -23 [ 1047.171995][T21636] netlink: 'syz.1.17872': attribute type 1 has an invalid length. [ 1047.180357][T21639] loop9: detected capacity change from 0 to 7 [ 1047.187035][T21639] Buffer I/O error on dev loop9, logical block 0, async page read [ 1047.195062][T21639] Buffer I/O error on dev loop9, logical block 0, async page read [ 1047.203075][T21639] loop9: unable to read partition table [ 1047.210323][T21639] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1047.210323][T21639] ) failed (rc=-5) [ 1047.275599][T21647] random: crng reseeded on system resumption [ 1047.783486][T21659] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1047.793233][T21659] SELinux: failed to load policy [ 1048.123867][T21671] netlink: 'syz.5.17886': attribute type 1 has an invalid length. [ 1048.218272][T21676] netlink: 'syz.4.17883': attribute type 13 has an invalid length. [ 1048.640671][T21694] 9pnet_fd: Insufficient options for proto=fd [ 1048.797424][T21699] netlink: 'syz.7.17895': attribute type 1 has an invalid length. [ 1048.852849][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 1048.852869][ T29] audit: type=1326 audit(1752668202.565:91424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1048.892267][ T29] audit: type=1326 audit(1752668202.607:91425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1048.934023][ T29] audit: type=1326 audit(1752668202.617:91426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1048.934250][T21705] random: crng reseeded on system resumption [ 1048.957884][ T29] audit: type=1326 audit(1752668202.617:91427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1048.957923][ T29] audit: type=1326 audit(1752668202.617:91428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1048.957980][ T29] audit: type=1326 audit(1752668202.638:91429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1049.035386][ T29] audit: type=1326 audit(1752668202.638:91430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1049.059255][ T29] audit: type=1326 audit(1752668202.638:91431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1049.083256][ T29] audit: type=1326 audit(1752668202.638:91432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1049.107331][ T29] audit: type=1326 audit(1752668202.638:91433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.8.17897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99494e929 code=0x7ffc0000 [ 1049.243538][T21717] netlink: 'syz.4.17902': attribute type 1 has an invalid length. [ 1049.345422][T21719] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1049.356361][T21719] SELinux: failed to load policy [ 1049.401223][T21721] siw: device registration error -23 [ 1049.501951][T21729] veth1_to_bond: entered allmulticast mode [ 1049.508546][T21729] veth1_to_bond: left allmulticast mode [ 1049.552126][T21731] __nla_validate_parse: 15 callbacks suppressed [ 1049.552143][T21731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17909'. [ 1049.636010][T21736] netlink: 'syz.1.17910': attribute type 13 has an invalid length. [ 1049.726051][T21747] netlink: 'syz.8.17915': attribute type 1 has an invalid length. [ 1049.734021][T21747] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17915'. [ 1049.792514][T21749] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1049.802872][T21749] SELinux: failed to load policy [ 1050.232533][T21725] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1050.281371][T21760] veth1_to_bond: entered allmulticast mode [ 1050.299940][T21760] veth1_to_bond: left allmulticast mode [ 1050.409326][T21765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.431782][T21765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.434221][T21768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17924'. [ 1050.452335][T21765] netlink: 'syz.4.17923': attribute type 27 has an invalid length. [ 1050.473778][T21765] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1050.481957][T21765] veth3: left promiscuous mode [ 1050.504898][T21765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.533111][T21765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.546906][T21765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1050.604057][T21779] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.17928'. [ 1050.624025][T21781] SELinux: ebitmap: truncated map [ 1050.630132][T21781] SELinux: failed to load policy [ 1050.989003][T21791] random: crng reseeded on system resumption [ 1051.266618][T21809] SELinux: ebitmap: truncated map [ 1051.273297][T21809] SELinux: failed to load policy [ 1051.308102][T21812] validate_nla: 1 callbacks suppressed [ 1051.308121][T21812] netlink: 'syz.1.17942': attribute type 1 has an invalid length. [ 1051.321781][T21812] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.17942'. [ 1051.492797][T21787] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1051.925097][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17953'. [ 1052.329263][T21852] loop9: detected capacity change from 0 to 7 [ 1052.339905][T21856] veth1_to_bond: entered allmulticast mode [ 1052.339995][T21854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.346552][T21856] veth1_to_bond: left allmulticast mode [ 1052.354494][T21852] Buffer I/O error on dev loop9, logical block 0, async page read [ 1052.368214][T21854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.370526][T21852] Buffer I/O error on dev loop9, logical block 0, async page read [ 1052.381301][T21854] netlink: 'syz.1.17956': attribute type 27 has an invalid length. [ 1052.383959][T21852] loop9: unable to read partition table [ 1052.397770][T21854] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1052.399971][T21852] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1052.399971][T21852] ) failed (rc=-5) [ 1052.405746][T21854] ip6erspan0: left promiscuous mode [ 1052.466494][T21861] random: crng reseeded on system resumption [ 1052.476662][T21854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.486916][T21854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.502481][T21854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1053.403899][T21888] veth1_to_bond: entered allmulticast mode [ 1053.416407][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17971'. [ 1053.425698][T21888] veth1_to_bond: left allmulticast mode [ 1053.447409][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17971'. [ 1053.459488][T21890] siw: device registration error -23 [ 1053.621454][T21906] random: crng reseeded on system resumption [ 1053.630344][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 1053.630358][ T29] audit: type=1326 audit(1752668207.583:91525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.663309][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17979'. [ 1053.679844][ T29] audit: type=1326 audit(1752668207.615:91526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.703649][ T29] audit: type=1326 audit(1752668207.615:91527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.727713][ T29] audit: type=1326 audit(1752668207.615:91528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.751457][ T29] audit: type=1326 audit(1752668207.615:91529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.775294][ T29] audit: type=1326 audit(1752668207.615:91530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.799101][ T29] audit: type=1326 audit(1752668207.615:91531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.822891][ T29] audit: type=1326 audit(1752668207.615:91532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.846578][ T29] audit: type=1326 audit(1752668207.625:91533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1053.870307][ T29] audit: type=1326 audit(1752668207.625:91534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.4.17979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad410e929 code=0x7ffc0000 [ 1054.254749][T21913] ================================================================== [ 1054.262904][T21913] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 1054.270240][T21913] [ 1054.272595][T21913] write to 0xffff88811a2fd260 of 4 bytes by task 21914 on cpu 1: [ 1054.280348][T21913] touch_atime+0x1e8/0x340 [ 1054.284849][T21913] shmem_file_read_iter+0x477/0x540 [ 1054.290088][T21913] copy_splice_read+0x3c1/0x5f0 [ 1054.295018][T21913] splice_direct_to_actor+0x290/0x680 [ 1054.300474][T21913] do_splice_direct+0xda/0x150 [ 1054.305280][T21913] do_sendfile+0x380/0x650 [ 1054.309732][T21913] __x64_sys_sendfile64+0x105/0x150 [ 1054.314955][T21913] x64_sys_call+0xb39/0x2fb0 [ 1054.319581][T21913] do_syscall_64+0xd2/0x200 [ 1054.324099][T21913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.330013][T21913] [ 1054.332374][T21913] read to 0xffff88811a2fd260 of 4 bytes by task 21913 on cpu 0: [ 1054.340044][T21913] atime_needs_update+0x25f/0x3e0 [ 1054.345121][T21913] touch_atime+0x4a/0x340 [ 1054.349480][T21913] shmem_file_read_iter+0x477/0x540 [ 1054.354729][T21913] copy_splice_read+0x3c1/0x5f0 [ 1054.359631][T21913] splice_direct_to_actor+0x290/0x680 [ 1054.365041][T21913] do_splice_direct+0xda/0x150 [ 1054.369841][T21913] do_sendfile+0x380/0x650 [ 1054.374385][T21913] __x64_sys_sendfile64+0x105/0x150 [ 1054.379615][T21913] x64_sys_call+0xb39/0x2fb0 [ 1054.384230][T21913] do_syscall_64+0xd2/0x200 [ 1054.388754][T21913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.394748][T21913] [ 1054.397087][T21913] value changed: 0x0dfeb4a5 -> 0x0e9ee91e [ 1054.402920][T21913] [ 1054.405254][T21913] Reported by Kernel Concurrency Sanitizer on: [ 1054.411414][T21913] CPU: 0 UID: 0 PID: 21913 Comm: syz.8.17980 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1054.424039][T21913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.434128][T21913] ================================================================== [ 1054.469103][T21923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17984'.