last executing test programs: 11m5.554932265s ago: executing program 0 (id=4615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000bc0)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) 11m3.863325052s ago: executing program 0 (id=4622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r5, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 11m3.64634234s ago: executing program 0 (id=4625): gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11m3.593655024s ago: executing program 0 (id=4626): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x220, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x220}}, 0x24008044) 11m3.424183067s ago: executing program 0 (id=4630): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, 0x0, 0x2000000}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x2c}]}}}}}}}, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 11m1.752036233s ago: executing program 0 (id=4636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) io_setup(0x403, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 10m46.716093636s ago: executing program 32 (id=4636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) io_setup(0x403, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 3m42.894092802s ago: executing program 5 (id=8050): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="3daa00000000000071101100000000009500000000000000997fce78cdb314199ee93f468cfc41e7ee9078850ed49160c3c4daadbfa78c12fdfd936f143fb8f5e8da1b67c61cd6e4"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3m42.730527905s ago: executing program 5 (id=8052): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="3daa00000000000071101100000000009500000000000000997fce78cdb314199ee93f468cfc"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3m42.573203388s ago: executing program 5 (id=8054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3m42.364577675s ago: executing program 5 (id=8056): modify_ldt$read(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat(r5, 0x0, 0x640, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m42.17882336s ago: executing program 5 (id=8058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x40, 0x0, @l2={'eth', 0x3a, 'nicvf0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0xd4) 3m42.038455711s ago: executing program 5 (id=8059): r0 = socket(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff03, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sched_yield() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x3ff) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1) fcntl$setstatus(r7, 0x4, 0x7c00) dup3(r8, r7, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x3}}}], 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000005200010000000000000000000a000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 3m42.038209032s ago: executing program 33 (id=8059): r0 = socket(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff03, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sched_yield() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x3ff) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1) fcntl$setstatus(r7, 0x4, 0x7c00) dup3(r8, r7, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x3}}}], 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000005200010000000000000000000a000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 7.477680934s ago: executing program 2 (id=9851): bpf$MAP_CREATE(0x0, 0x0, 0x48) pause() r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x41e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x3}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="00022abd7000fddbdf2509000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090008000000", @ANYRES32=r2, @ANYBLOB="fe7f0000", @ANYRES32=r1, @ANYBLOB="8b0c103b90649a5bfd379107bcf1a14c3de4563cd6a605ef1fa59d057414e2e90791d0a052a1571e99ebf32b5aae5e70cd006648524d6ed5dc59815a7be18f69478b4ab48651a27703bee9346f73785000b532ab68685d5b6658f68e8459c26c24deca1060a77386d4b767107fb412b2c52d57"], 0x40}, 0x1, 0x0, 0x0, 0x4008810}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x2f, 0x3, 0x6, 0x3, 0x6e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x80, 0x7, 0x7fffffff, 0x5}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x1, &(0x7f0000000480)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x8, 0x0, r7, &(0x7f0000000180)="2932758e6dfb548cd6", 0x9}]) bind$bt_hci(r6, &(0x7f00000002c0)={0x27}, 0x6) 5.890213822s ago: executing program 2 (id=9858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x402200, 0x0) getdents64(r4, &(0x7f0000000080)=""/32, 0x20) getdents64(r4, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000300)={0x5, 0xf7, 0x3}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@init_itable}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ftruncate(0xffffffffffffffff, 0x2007ff3) copy_file_range(0xffffffffffffffff, 0x0, r9, 0x0, 0xffffffffa003e459, 0x700000000000000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.617107504s ago: executing program 2 (id=9865): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) clock_adjtime(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) acct(0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000118c0)='/sys/power/pm_async', 0x101201, 0xc9) writev(r6, &(0x7f0000012f40)=[{&(0x7f0000011940)="8f", 0x1}], 0x1) 4.127716195s ago: executing program 6 (id=9887): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r3 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r3, 0x44fd, 0x3, 0x1, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000300)={0x11, 0x1b, r10, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) r11 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r11}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r12, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.143319465s ago: executing program 6 (id=9890): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000004}, 0x18) 3.058301552s ago: executing program 6 (id=9891): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100009308"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = getpgid(0x0) ptrace(0x4207, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25010000000c000180080001", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) time(0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r9 = dup(r8) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x88, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}}) splice(r10, 0x0, r9, 0x0, 0x91, 0x5) getsockopt$inet6_tcp_int(r9, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000300)=0x4) 2.870690087s ago: executing program 4 (id=9893): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='svcrdma_send_err\x00', 0xffffffffffffffff, 0x0, 0x861}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x0, 0x1, 0x401, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000"], 0x24}}, 0x4000000) r4 = io_uring_setup(0x1bb1, &(0x7f0000000340)={0x0, 0x72dc, 0x40, 0x3, 0xe3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f00000005c0)=[{0x1e, 0x0, 0x0, 0x4, @tick=0x1, {}, {0x80}, @result}, {0x8, 0x40, 0x6c, 0x7f, @time={0x6, 0x1b}, {0x40, 0x6}, {0x4e, 0xa5}, @time=@time={0x6c69, 0x7}}], 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x400454a4, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f00000002c0)=[@ioring_restriction_sqe_op={0x1, 0x1a}], 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0x0, 0x0, {"3d0300"}, 0x0, 0xfffffffffffffffc, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x0, r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[], 0x20) 2.377724607s ago: executing program 4 (id=9896): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000e88000/0x4000)=nil) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x5d6c}, 0x18) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) ptrace$peekuser(0x3, r0, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munlockall() openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffa]}, 0x8) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0x9, 0xfffffffd, 0x800, 0x4b}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000a00)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000002580)={0x0, 0x6e, "1a311fff5ba4cc104db22562775454f22e326865d65a1ec222b2522127f7baeafda9562d4620d89ddd36688390ed205e26188f33ac1b40ece09440b24a7e08aebba4044f00fb98096977e5ed3c35771b8d066e5da5333081b113209df56e663b3454c533be037e259fda593e31d3"}, &(0x7f00000026c0)=0x76) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}], 0x1, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x800, 0x206, 0x2, 0x6, 0x14000000, 0xb, 0x4f}, 0x20) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r4, 0x4}, 0x8) unshare(0x20040400) pwritev2(r2, 0x0, 0x0, 0x2000, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x41, &(0x7f00000004c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.34162762s ago: executing program 3 (id=9897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='btrfs_trigger_flush\x00', r0, 0x0, 0x7fffffff}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendto(r1, &(0x7f00000004c0)="e676e253ebc2a21d9059078c89a2311dff6a91deb3faf9e007181eee6671c045d4404355b69d4e92cf4c17e705fb941fb7c9de0bcf91f3db4c6bf7c59335aa42d7e226e79dbadec25b7bf69420f3dba7ab13341d0ee2c24ec5e50aaa1c", 0x5d, 0x4040884, &(0x7f0000000600)=@caif, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f00000006c0)={&(0x7f0000000900)={0x184, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x47}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff8}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e06fcc878ade8788a10224d989259bc95e34dda395a89dea94a73e195946bf15a3def215c0f47121506110"}, @TIPC_NLA_NODE_ID={0x59, 0x3, "9a91072c23a43d30e5787a1314b04cf2f1741b17ba068266598788080ae9719b338318bcda0144ca74a56db89c7f0d6d367ad8b18ef04d04089fac8b0a243b45e9bc65dbc257de5dd1633f9884f40c629e65dcc647"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pim6reg\x00'}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x17a}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x810}, 0x8000) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "bed40c8022674b0ecf0153d786cfc67c1aa8a9bb2222a0c819cdef"}}]}, 0x158}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) 2.162298334s ago: executing program 6 (id=9900): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @local}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r2, &(0x7f0000000300)="2ab2", 0x2, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800600020030000000080004000009"], 0x48}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r9, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r10, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7fffeffd) 1.624340148s ago: executing program 1 (id=9902): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f7590}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0xeeb0, 0x8, 0x1000, 0x5dd}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000280)="9f", 0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x0, 0x2, 0xa, 0x8000000000000001}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.533245655s ago: executing program 2 (id=9903): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x939e02dc105d5baa, 0xfff5}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x2000, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x7, 0x9) write$P9_RWRITE(r8, &(0x7f0000000040)={0xb}, 0x11000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 1.434676173s ago: executing program 1 (id=9904): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x7fffffffffffffff, 0x101000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000030000000000000020bf0900000000000055090100000000b702000001000000850000008f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3a0, 0x0, 0x1d0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f0000000280), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0xfff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000220041"], 0x1c}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000440)={'veth0\x00', 0xba9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) set_robust_list(&(0x7f00000003c0)={0x0, 0xfffffffffffffff7}, 0x18) dup3(r0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x6, [@enum64={0xc, 0x4, 0x0, 0x13, 0x0, 0x9, [{0x1, 0x8000, 0x8}, {0xb, 0x5, 0xa}, {0xc, 0x800, 0x5cbc}, {0x3, 0x80000000, 0xffff}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x68, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x6, [{0xa, 0xf66, 0xd268}, {0x8, 0xb2cb394, 0x10000}, {0x3, 0xe63f, 0x40}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x8, 0x1}, {0x2}, {0x4}, {0x4, 0x3}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000001180)=""/4096, 0x102, 0x1000, 0x0, 0xfffffffd, 0x10000}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x10001}, 0x14) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) 1.383810807s ago: executing program 3 (id=9905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) rmdir(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000440)=""/137, 0x89}, {0x0}], 0x5, 0x3, 0x9e) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1.382521977s ago: executing program 1 (id=9907): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r5, @ANYRES64=r5, @ANYRESOCT, @ANYRES16=r4, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r6, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16], 0x94, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, &(0x7f0000000040)) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r9 = getuid() fchown(r8, r9, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@uid_gt}, {@euid_lt={'euid<', r9}}, {@obj_user={'obj_user', 0x3d, '(%[}{'}}, {@seclabel}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r10}}, {@fowner_gt={'fowner>', r10}}]}}) 1.272637197s ago: executing program 4 (id=9908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) rmdir(0x0) umount2(&(0x7f0000000300)='./control\x00', 0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r7, 0x0, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000600)=[@in={0x2, 0x4e26, @remote}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001c00"/28], 0x50) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x0, 0x14}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.160312276s ago: executing program 6 (id=9909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback=r0, 0xffffffffffffffff, 0x16, 0x2032}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) pread64(r2, &(0x7f0000000580)=""/150, 0x8f, 0x4c00) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000280)={0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r8, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) 1.074232173s ago: executing program 1 (id=9910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYRES64=r0], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x200, 0x80000001, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x66, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, {[@end, @end, @timestamp_addr={0x44, 0x3c, 0x17, 0x1, 0xe, [{@empty, 0x4}, {@rand_addr=0x64010101, 0x7}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x7fff}, {@multicast1, 0x100}, {@loopback, 0x8}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x8f, &(0x7f0000000c40)=""/143, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x3}, 0x10, 0x30762, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0), 0x10, 0xb9e}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="05000000020000000300"/21], 0x50) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x50007a2) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e73"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7ff80, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.061090053s ago: executing program 1 (id=9911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000000320000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000ffffffffffffffff00000000000000007f00000000000000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000200010100000000000000004c001200726663343330392863636d2861657329290000000000000000000000000000000000000000005eb869f400000000000000000000000000000000000000000000000000004000000008001600040000000c0015005c07350006000000766cbc21d36ecfe04f6cd1e200fadf643de6517c50703b7b12b97ba971a429dd9c13bc2a8f31174054c8c4878531a71fbbc2fbf011dd33f9d117d43ac92cb8aed7446314916742682ee8"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c000000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x8000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 1.006377378s ago: executing program 4 (id=9912): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 757.040448ms ago: executing program 4 (id=9913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a310000000009000100"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045030028000000000004907800000000e00000010000000000149078610600019935704b5f4cd745"], 0x0) 460.503622ms ago: executing program 2 (id=9914): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x840) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x14, 0x52, 0x921}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80800) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x2d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x7c7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x37}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe1fa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5cbe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x101, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r1, r5, r1, r1, r6], &(0x7f0000000480)=[{0x5, 0x5, 0x7, 0xb}, {0x3, 0x1, 0x3}, {0x3, 0x3, 0x8, 0x5}], 0x10, 0x66d}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x6, 0x0, 0x8, 0x5, 0x0, 0xefe, 0x0, [@sadb_address={0x3, 0x7, 0x32, 0x0, 0x0, @in={0x2, 0x0, @private=0x2000}}]}, 0x28}, 0x1, 0x7}, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r9, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="b8002300a15dbe359ba53062f2ecf51d3bd769ef68968b76a5cc53b17c3ec4f1f7c1297cc86175a5b14e08d62f7b", 0x2e}], 0x1}, 0x40400d0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) 459.098002ms ago: executing program 4 (id=9915): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 432.231224ms ago: executing program 3 (id=9916): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x25, 0x2, 0x42, 0x401, 0x0, 0x2, 0xe8}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48801}, 0x40000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_void(r2, 0x1, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000070a01"], 0xbc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r8}, 0x18) write$tun(r4, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @opaque="dafc3fec9b284c93cf0da2c96b67919fb5146b8da82ae0aeddf99df0c319ce53"}}}}}}, 0x4e) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 398.366087ms ago: executing program 3 (id=9917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300000000000000000100000000008d0254a5fda643"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000004c40)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064"], 0x62d) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cfd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c310060020001280080001007369740d1400028008000300ac14140006000e0040000000"], 0x40}}, 0x0) 335.548762ms ago: executing program 2 (id=9918): keyctl$describe(0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0xf913, 0x4, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x46, 0x2007, @fd=r0, 0xfffffffffffffff8, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x99) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) syslog(0x2, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) r7 = io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2}) pause() close_range(r7, 0xffffffffffffffff, 0x0) 190.268904ms ago: executing program 6 (id=9919): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r0}) keyctl$update(0x2, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='rxrpc_propose_ack\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1006, 0x1, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="3204138abe8e5204f7a303ea7119e6fffefac6509c37fbd0046bf97153f4b67107d572c7317337a09d82981fb355eb5a772fb85a70be516359efc00ddd46959b34455e26cf5c83d3119597c355cce0b888556d", 0x53, 0xfffffffffffffffb) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x40, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB=',wIdno=', @ANYRESHEX=r3, @ANYRESOCT]) r4 = msgget$private(0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) msgrcv(r4, 0x0, 0x0, 0x1, 0x3000) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100140800000000"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getgroups(0x41, &(0x7f0000000440)=[0xee01, 0xffffffffffffffff, r8]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000680)={{0x3, r7, r9, 0x0, r10, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r11}) keyctl$unlink(0x9, r2, r0) 133.277589ms ago: executing program 3 (id=9920): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6c00) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x1, 0x1, 0x3, 0xfffffffc}, {0x2, 0x1, 0x0, 0xffffffff}, {0x4, 0x4, 0xee, 0xfffffff0}, {0xba0, 0xff, 0xc, 0x4}, {0x655, 0x0, 0x8, 0x9}, {0x3, 0x1, 0x8, 0x800}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r3, 0xffffffff) accept4(r3, 0x0, 0x0, 0x80000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0104ef1b04000d000700000186dd0611000a0180c200000cfe80000000000000000000000000000dfffffffffffffe880000000000000000000000000101"], 0x3e) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 1 (id=9921): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @local}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r2, &(0x7f0000000300)="2ab2", 0x2, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800600020030000000080004000009"], 0x48}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r9, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r10, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1055.060496][ T29] audit: type=1400 audit(1334.746:68963): avc: denied { prog_load } for pid=32213 comm="syz.1.8937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1055.079806][ T29] audit: type=1400 audit(1334.746:68964): avc: denied { prog_load } for pid=32213 comm="syz.1.8937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1055.098703][ T29] audit: type=1400 audit(1334.746:68965): avc: denied { prog_load } for pid=32213 comm="syz.1.8937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1055.118612][ T29] audit: type=1326 audit(1334.764:68966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.1.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1055.143647][ T29] audit: type=1326 audit(1334.773:68967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.1.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1055.168554][ T29] audit: type=1400 audit(1334.773:68968): avc: denied { prog_load } for pid=32215 comm="syz.1.8938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1055.716222][T32237] sch_fq: defrate 4294967295 ignored. [ 1055.892671][T32245] lo speed is unknown, defaulting to 1000 [ 1055.899099][T32245] lo speed is unknown, defaulting to 1000 [ 1055.969830][T32245] loop6: detected capacity change from 0 to 1024 [ 1055.977945][T32245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1056.043309][T32245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.748774][T32258] __nla_validate_parse: 2 callbacks suppressed [ 1056.748791][T32258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8951'. [ 1056.826741][T32258] pimreg: entered allmulticast mode [ 1057.165994][T32273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8952'. [ 1057.239664][T32278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1057.254355][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1057.256679][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1057.289730][T32275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1057.429432][T32284] tipc: Enabling of bearer rejected, failed to enable media [ 1057.518966][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.549677][T32288] loop6: detected capacity change from 0 to 512 [ 1057.577237][T32288] EXT4-fs: Ignoring removed mblk_io_submit option [ 1057.585714][T32288] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1057.600882][T32288] EXT4-fs (loop6): 1 truncate cleaned up [ 1057.607687][T32288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.682370][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.143197][T32304] vlan0: entered allmulticast mode [ 1058.643933][T32314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8971'. [ 1058.658554][T32314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8971'. [ 1058.769940][T32325] tipc: Enabling of bearer rejected, failed to enable media [ 1058.902839][T32332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1058.918015][T32332] pimreg: entered allmulticast mode [ 1058.926294][T32332] pimreg: left allmulticast mode [ 1059.415598][T32342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1059.854517][T32360] loop6: detected capacity change from 0 to 512 [ 1059.871469][T32360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.004358][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.067184][T32374] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1060.104474][T32374] netlink: 'syz.6.8990': attribute type 1 has an invalid length. [ 1060.377210][T32386] pimreg: entered allmulticast mode [ 1060.384736][T32386] pimreg: left allmulticast mode [ 1060.403026][ T29] kauditd_printk_skb: 1383 callbacks suppressed [ 1060.403039][ T29] audit: type=1400 audit(1339.758:70352): avc: denied { prog_load } for pid=32387 comm="syz.4.8994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1060.429073][ T29] audit: type=1400 audit(1339.758:70353): avc: denied { bpf } for pid=32387 comm="syz.4.8994" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1060.454035][ T29] audit: type=1400 audit(1339.804:70354): avc: denied { name_bind } for pid=32385 comm="syz.6.8993" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1060.476430][ T29] audit: type=1400 audit(1339.804:70355): avc: denied { node_bind } for pid=32385 comm="syz.6.8993" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1060.516802][ T29] audit: type=1326 audit(1339.850:70356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.4.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1060.540590][ T29] audit: type=1326 audit(1339.850:70357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.4.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1060.564571][ T29] audit: type=1400 audit(1339.850:70358): avc: denied { create } for pid=32385 comm="syz.6.8993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.573589][T32388] lo speed is unknown, defaulting to 1000 [ 1060.585660][ T29] audit: type=1400 audit(1339.850:70359): avc: denied { write } for pid=32385 comm="syz.6.8993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.612263][ T29] audit: type=1400 audit(1339.850:70360): avc: denied { read } for pid=32385 comm="syz.6.8993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.632920][ T29] audit: type=1400 audit(1339.850:70361): avc: denied { create } for pid=32390 comm="syz.2.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1060.647771][T32388] lo speed is unknown, defaulting to 1000 [ 1060.672134][T32393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.685117][T32393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.732439][T32394] pimreg: entered allmulticast mode [ 1060.739797][T32394] pimreg: left allmulticast mode [ 1061.026489][T32411] netlink: 'syz.2.9002': attribute type 21 has an invalid length. [ 1061.035702][T32411] netlink: 'syz.2.9002': attribute type 1 has an invalid length. [ 1061.169348][T32418] ipvlan0: entered promiscuous mode [ 1061.175443][T32418] bridge0: port 1(ipvlan0) entered blocking state [ 1061.182340][T32418] bridge0: port 1(ipvlan0) entered disabled state [ 1061.189031][T32418] ipvlan0: entered allmulticast mode [ 1061.194408][T32418] bridge0: entered allmulticast mode [ 1061.200444][T32418] ipvlan0: left allmulticast mode [ 1061.205515][T32418] bridge0: left allmulticast mode [ 1061.485326][T32429] loop6: detected capacity change from 0 to 1024 [ 1061.521992][T32429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.553839][T32429] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.9008: Allocating blocks 449-513 which overlap fs metadata [ 1061.599590][T32429] EXT4-fs (loop6): pa ffff88810769e380: logic 48, phys. 177, len 21 [ 1061.608329][T32429] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 1061.632871][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.246831][T32456] tipc: Enabling of bearer rejected, failed to enable media [ 1062.779575][T32470] cgroup: No subsys list or none specified [ 1063.535471][T32479] ipvlan0: entered promiscuous mode [ 1063.546933][T32479] bridge0: port 1(ipvlan0) entered blocking state [ 1063.554145][T32479] bridge0: port 1(ipvlan0) entered disabled state [ 1063.580971][T32479] ipvlan0: entered allmulticast mode [ 1063.586514][T32479] bridge0: entered allmulticast mode [ 1063.618257][T32479] ipvlan0: left allmulticast mode [ 1063.623573][T32479] bridge0: left allmulticast mode [ 1063.629884][T32475] __nla_validate_parse: 13 callbacks suppressed [ 1063.629899][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9022'. [ 1063.707248][T32475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9022'. [ 1063.733707][T32485] loop6: detected capacity change from 0 to 512 [ 1063.741733][T32485] EXT4-fs: Ignoring removed mblk_io_submit option [ 1063.749152][T32485] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1063.764956][T32485] EXT4-fs (loop6): 1 truncate cleaned up [ 1063.771770][T32485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.776760][T32488] lo speed is unknown, defaulting to 1000 [ 1063.791643][T32488] lo speed is unknown, defaulting to 1000 [ 1063.854758][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.891432][T32495] tipc: Enabled bearer , priority 0 [ 1063.899252][T32495] syzkaller0: entered promiscuous mode [ 1063.905295][T32495] syzkaller0: entered allmulticast mode [ 1063.914759][T32494] tipc: Resetting bearer [ 1063.922377][T32494] tipc: Disabling bearer [ 1064.021864][T32500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9029'. [ 1064.036438][T32500] pimreg: entered allmulticast mode [ 1064.042987][T32500] pimreg: left allmulticast mode [ 1064.153709][T32506] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9030'. [ 1064.163836][T32506] hsr_slave_0: left promiscuous mode [ 1064.344246][T32515] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9034'. [ 1064.355320][T32515] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 1064.363527][T32515] 1ªî{X¹¦: entered allmulticast mode [ 1064.369821][T32515] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1064.423219][T32518] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9035'. [ 1064.432684][T32518] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9035'. [ 1064.640926][T32530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9039'. [ 1064.696773][T32532] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1066.605308][ T29] kauditd_printk_skb: 1057 callbacks suppressed [ 1066.605326][ T29] audit: type=1400 audit(1344.622:71419): avc: denied { perfmon } for pid=32549 comm="syz.1.9047" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1066.633262][ T29] audit: type=1400 audit(1344.622:71420): avc: denied { bpf } for pid=32549 comm="syz.1.9047" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1066.654522][ T29] audit: type=1400 audit(1344.631:71421): avc: denied { prog_load } for pid=32547 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1066.674715][ T29] audit: type=1400 audit(1344.631:71422): avc: denied { bpf } for pid=32547 comm="syz.2.9046" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1066.696037][ T29] audit: type=1400 audit(1344.631:71423): avc: denied { perfmon } for pid=32547 comm="syz.2.9046" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1066.718125][ T29] audit: type=1400 audit(1344.631:71424): avc: denied { prog_run } for pid=32547 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1066.737262][ T29] audit: type=1400 audit(1344.631:71425): avc: denied { create } for pid=32547 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.758479][ T29] audit: type=1400 audit(1344.640:71426): avc: denied { create } for pid=32547 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.779148][ T29] audit: type=1400 audit(1344.640:71427): avc: denied { write } for pid=32547 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.800116][ T29] audit: type=1400 audit(1344.640:71428): avc: denied { read } for pid=32547 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1067.214887][T32566] tipc: Enabling of bearer rejected, failed to enable media [ 1067.332523][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9052'. [ 1067.354985][T32573] pimreg: entered allmulticast mode [ 1067.365717][T32573] pimreg: left allmulticast mode [ 1067.499286][T32592] netlink: 'syz.1.9054': attribute type 298 has an invalid length. [ 1067.714251][T32597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9057'. [ 1068.518282][T32613] tipc: Enabling of bearer rejected, failed to enable media [ 1068.818004][T32632] pimreg: entered allmulticast mode [ 1068.829037][T32632] pimreg: left allmulticast mode [ 1068.877629][T32639] netlink: 'syz.2.9070': attribute type 13 has an invalid length. [ 1069.023689][T25954] Process accounting resumed [ 1069.200426][T32649] netlink: 'syz.2.9073': attribute type 10 has an invalid length. [ 1069.209365][T32649] __nla_validate_parse: 5 callbacks suppressed [ 1069.209381][T32649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9073'. [ 1069.227020][T32649] geneve1: left promiscuous mode [ 1069.232165][T32649] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1069.807557][T32671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1069.831656][T32673] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9082'. [ 1069.997549][T32678] lo speed is unknown, defaulting to 1000 [ 1070.003972][T32678] lo speed is unknown, defaulting to 1000 [ 1070.234425][T32686] bond0: Device is already in use. [ 1070.340630][T32688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9087'. [ 1070.356143][T32688] pimreg: entered allmulticast mode [ 1070.363597][T32688] pimreg: left allmulticast mode [ 1070.367001][T32691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9088'. [ 1070.408459][T32691] pimreg: entered allmulticast mode [ 1070.408615][T32683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9085'. [ 1070.425312][T32691] pimreg: left allmulticast mode [ 1070.605442][T32704] pimreg: left allmulticast mode [ 1070.658620][T32704] rdma_rxe: rxe_newlink: failed to add lo [ 1070.670113][T32704] 1ªî{X¹¦: left allmulticast mode [ 1070.683329][T32704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1070.700653][T27173] lo speed is unknown, defaulting to 1000 [ 1070.707053][T27173] syz2: Port: 1 Link ACTIVE [ 1070.747375][T32710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9094'. [ 1070.759206][T32710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9094'. [ 1070.910797][T32712] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9095'. [ 1070.920771][T32712] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9095'. [ 1071.010957][T32717] netem: change failed [ 1071.411146][T32742] tipc: Enabling of bearer rejected, failed to enable media [ 1071.562807][T32724] C: renamed from lo [ 1071.569179][T32724] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1072.100211][ T29] kauditd_printk_skb: 1401 callbacks suppressed [ 1072.100224][ T29] audit: type=1400 audit(1350.557:72830): avc: denied { map_create } for pid=32745 comm="syz.6.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1072.147039][T32752] netlink: 'syz.6.9105': attribute type 15 has an invalid length. [ 1072.335000][ T29] audit: type=1400 audit(1350.612:72831): avc: denied { sys_module } for pid=32741 comm="syz.3.9104" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1072.360931][ T29] audit: type=1400 audit(1350.612:72832): avc: denied { module_request } for pid=32741 comm="syz.3.9104" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1072.384266][ T29] audit: type=1400 audit(1350.640:72833): avc: denied { execmem } for pid=32745 comm="syz.6.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1072.434021][ T29] audit: type=1400 audit(1350.843:72834): avc: denied { sys_module } for pid=32722 comm="syz.4.9099" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1072.454973][ T29] audit: type=1400 audit(1350.843:72835): avc: denied { module_request } for pid=32722 comm="syz.4.9099" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1072.477247][ T29] audit: type=1400 audit(1350.843:72836): avc: denied { prog_load } for pid=32736 comm="syz.1.9103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1072.497848][ T29] audit: type=1400 audit(1350.843:72837): avc: denied { bpf } for pid=32736 comm="syz.1.9103" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1072.518979][ T29] audit: type=1326 audit(1350.852:72838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.9103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1072.542838][ T29] audit: type=1326 audit(1350.852:72839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32736 comm="syz.1.9103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1072.589673][T32758] C speed is unknown, defaulting to 1000 [ 1072.596654][T32758] lo speed is unknown, defaulting to 1000 [ 1073.039292][T32763] siw: device registration error -23 [ 1073.323819][ T304] pimreg: entered allmulticast mode [ 1073.329789][ T304] pimreg: left allmulticast mode [ 1073.467623][ T313] pimreg: entered allmulticast mode [ 1073.475727][ T313] pimreg: left allmulticast mode [ 1075.802174][ T348] Set syz1 is full, maxelem 65536 reached [ 1076.539754][ T396] openvswitch: netlink: Message has 6 unknown bytes. [ 1076.694068][ T400] __nla_validate_parse: 7 callbacks suppressed [ 1076.694194][ T400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9137'. [ 1076.725957][ T400] 9pnet_fd: Insufficient options for proto=fd [ 1077.080892][ T405] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9138'. [ 1077.091441][ T405] netem: change failed [ 1077.174082][ T414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9141'. [ 1077.559167][ T29] kauditd_printk_skb: 1021 callbacks suppressed [ 1077.559183][ T29] audit: type=1326 audit(1355.596:73861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=407 comm="syz.4.9141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9fb4c85ba7 code=0x7ffc0000 [ 1077.591175][ T29] audit: type=1326 audit(1355.596:73862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=407 comm="syz.4.9141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb4c2ade9 code=0x7ffc0000 [ 1077.616241][ T29] audit: type=1326 audit(1355.596:73863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=407 comm="syz.4.9141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1077.672588][ T29] audit: type=1400 audit(1355.698:73864): avc: denied { prog_load } for pid=420 comm="syz.6.9145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1077.692258][ T29] audit: type=1400 audit(1355.698:73865): avc: denied { bpf } for pid=420 comm="syz.6.9145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1077.714521][ T29] audit: type=1400 audit(1355.698:73866): avc: denied { perfmon } for pid=420 comm="syz.6.9145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1077.735411][ T29] audit: type=1400 audit(1355.698:73867): avc: denied { perfmon } for pid=420 comm="syz.6.9145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1077.757362][ T29] audit: type=1400 audit(1355.698:73868): avc: denied { bpf } for pid=420 comm="syz.6.9145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1077.778452][ T29] audit: type=1326 audit(1355.698:73869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=407 comm="syz.4.9141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9fb4c85ba7 code=0x7ffc0000 [ 1077.829641][ T29] audit: type=1326 audit(1355.698:73870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=407 comm="syz.4.9141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb4c2ade9 code=0x7ffc0000 [ 1077.912421][ T417] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9144'. [ 1077.923867][ T417] IPVS: stopping backup sync thread 24359 ... [ 1078.247184][ T435] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1078.258219][ T435] 1ªî{X¹¦: left allmulticast mode [ 1078.443649][ T427] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9147'. [ 1078.454936][ T427] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9147'. [ 1078.692419][ T451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9161'. [ 1079.263496][ T464] loop6: detected capacity change from 0 to 512 [ 1079.272065][ T464] EXT4-fs: Ignoring removed mblk_io_submit option [ 1079.279481][ T464] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1079.313966][ T464] EXT4-fs (loop6): 1 truncate cleaned up [ 1079.320417][ T464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.391034][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.529548][ T471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1079.632386][ T474] loop6: detected capacity change from 0 to 512 [ 1079.650768][ T474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.721203][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.758022][ T482] loop6: detected capacity change from 0 to 512 [ 1079.766341][ T482] EXT4-fs: Ignoring removed mblk_io_submit option [ 1079.773321][ T482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1079.791028][ T482] EXT4-fs (loop6): 1 truncate cleaned up [ 1079.797669][ T482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.860149][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.347755][ T513] loop6: detected capacity change from 0 to 1024 [ 1080.355946][ T513] EXT4-fs: Ignoring removed mblk_io_submit option [ 1080.362788][ T513] EXT4-fs: dax option not supported [ 1080.408550][ T518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1080.637123][ T528] C speed is unknown, defaulting to 1000 [ 1080.644466][ T528] lo speed is unknown, defaulting to 1000 [ 1081.260242][ T544] loop6: detected capacity change from 0 to 1024 [ 1081.275113][ T544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1081.377643][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1082.032208][ T584] C speed is unknown, defaulting to 1000 [ 1082.038843][ T584] lo speed is unknown, defaulting to 1000 [ 1082.479932][ T589] loop6: detected capacity change from 0 to 1024 [ 1082.492267][ T589] EXT4-fs: Ignoring removed mblk_io_submit option [ 1082.500767][ T589] EXT4-fs: dax option not supported [ 1082.994982][ T29] kauditd_printk_skb: 1377 callbacks suppressed [ 1082.994999][ T29] audit: type=1400 audit(1360.608:75248): avc: denied { map_create } for pid=588 comm="syz.6.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1083.024628][ T29] audit: type=1400 audit(1360.636:75249): avc: denied { prog_load } for pid=588 comm="syz.6.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1083.046051][ T29] audit: type=1400 audit(1360.636:75250): avc: denied { bpf } for pid=588 comm="syz.6.9188" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1083.081405][ T29] audit: type=1400 audit(1360.636:75251): avc: denied { perfmon } for pid=588 comm="syz.6.9188" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1083.104160][ T29] audit: type=1400 audit(1360.636:75252): avc: denied { bpf } for pid=588 comm="syz.6.9188" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1083.125533][ T29] audit: type=1326 audit(1360.636:75253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.2.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f3e4ebe9 code=0x7ffc0000 [ 1083.150200][ T29] audit: type=1326 audit(1360.636:75254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.2.9186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f3e4ebe9 code=0x7ffc0000 [ 1083.234066][ T29] audit: type=1400 audit(1360.802:75255): avc: denied { prog_load } for pid=594 comm="syz.4.9189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1083.253660][ T29] audit: type=1400 audit(1360.802:75256): avc: denied { bpf } for pid=594 comm="syz.4.9189" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1083.292879][ T29] audit: type=1400 audit(1360.876:75257): avc: denied { read } for pid=562 comm="syz.3.9180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1083.335641][ T597] __nla_validate_parse: 6 callbacks suppressed [ 1083.335658][ T597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1083.353357][ T597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1083.870254][ T604] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9191'. [ 1083.882742][ T604] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9191'. [ 1083.892711][ T604] C: renamed from team_slave_0 [ 1083.919920][ T604] can0: slcan on ttyS3. [ 1084.035341][ T604] can0 (unregistered): slcan off ttyS3. [ 1084.047021][ T605] can0: slcan on ttyS3. [ 1084.176367][ T602] can0 (unregistered): slcan off ttyS3. [ 1084.198072][ T610] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.790906][ T624] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9197'. [ 1084.919900][ T620] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9196'. [ 1084.929279][ T620] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9196'. [ 1085.499880][ T649] rdma_rxe: rxe_newlink: failed to add lo [ 1085.537669][ T649] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 1085.552135][ T649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1085.824572][ T663] loop6: detected capacity change from 0 to 128 [ 1085.846577][ T663] 9pnet_fd: Insufficient options for proto=fd [ 1085.872773][ T663] loop6: detected capacity change from 0 to 1024 [ 1085.890112][ T663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.128809][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.147499][ T671] C speed is unknown, defaulting to 1000 [ 1086.161938][ T671] lo speed is unknown, defaulting to 1000 [ 1086.216675][ T676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1086.309912][ T680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9214'. [ 1086.316935][ T681] loop6: detected capacity change from 0 to 512 [ 1086.334343][ T681] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.9213: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1086.352943][ T681] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.9213: Bad quota inode: 3, type: 0 [ 1086.365543][ T681] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1086.382315][ T681] EXT4-fs (loop6): mount failed [ 1086.489822][ T674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1086.538835][ T681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1086.634404][ T690] sctp: [Deprecated]: syz.3.9216 (pid 690) Use of int in max_burst socket option. [ 1086.634404][ T690] Use struct sctp_assoc_value instead [ 1086.849081][ T701] netlink: 'syz.4.9218': attribute type 10 has an invalid length. [ 1086.859575][ T701] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1087.274706][ T715] C speed is unknown, defaulting to 1000 [ 1087.281307][ T715] lo speed is unknown, defaulting to 1000 [ 1087.345751][ T716] 9pnet_fd: Insufficient options for proto=fd [ 1087.383046][ T719] loop6: detected capacity change from 0 to 512 [ 1087.391285][ T719] EXT4-fs: Ignoring removed mblk_io_submit option [ 1087.399685][ T719] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1087.415196][ T719] EXT4-fs (loop6): 1 truncate cleaned up [ 1087.422339][ T719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.474463][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.343420][ T738] loop6: detected capacity change from 0 to 1024 [ 1088.352852][ T738] EXT4-fs: Ignoring removed mblk_io_submit option [ 1088.361930][ T738] EXT4-fs: dax option not supported [ 1088.404637][ T735] C speed is unknown, defaulting to 1000 [ 1088.423190][ T735] lo speed is unknown, defaulting to 1000 [ 1088.518680][ T29] kauditd_printk_skb: 1163 callbacks suppressed [ 1088.518695][ T29] audit: type=1400 audit(1877.635:76421): avc: denied { map_create } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1088.547893][ T29] audit: type=1400 audit(1877.635:76422): avc: denied { map_read map_write } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1088.569653][ T29] audit: type=1400 audit(1877.644:76423): avc: denied { prog_load } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1088.591547][ T29] audit: type=1400 audit(1877.644:76424): avc: denied { bpf } for pid=732 comm="syz.3.9227" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1088.620500][ T29] audit: type=1400 audit(1877.644:76425): avc: denied { perfmon } for pid=732 comm="syz.3.9227" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1088.644136][ T29] audit: type=1400 audit(1877.644:76426): avc: denied { prog_run } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1088.665176][ T29] audit: type=1400 audit(1877.644:76427): avc: denied { create } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1088.687188][ T29] audit: type=1400 audit(1877.653:76428): avc: denied { create } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1088.709754][ T29] audit: type=1400 audit(1877.653:76429): avc: denied { write } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1088.731152][ T29] audit: type=1400 audit(1877.653:76430): avc: denied { read } for pid=732 comm="syz.3.9227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1088.886899][ T741] __nla_validate_parse: 3 callbacks suppressed [ 1088.886916][ T741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1089.079691][ T747] netlink: 'syz.4.9231': attribute type 15 has an invalid length. [ 1089.088303][ T747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1090.569416][ T753] C speed is unknown, defaulting to 1000 [ 1090.575754][ T753] lo speed is unknown, defaulting to 1000 [ 1090.909371][ T760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=760 comm=syz.2.9233 [ 1091.062563][ T758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9233'. [ 1091.079442][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9236'. [ 1091.121300][ T758] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1091.218109][ T760] macvlan1: entered promiscuous mode [ 1091.223773][ T760] macvlan1: entered allmulticast mode [ 1091.295647][ T760] bond12: entered promiscuous mode [ 1091.319923][ T772] netlink: 'syz.6.9232': attribute type 10 has an invalid length. [ 1091.328023][ T772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9232'. [ 1091.341974][ T760] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1091.381895][ T760] bond12: left promiscuous mode [ 1091.458973][ T772] team0: Port device geneve1 added [ 1091.464897][ T3911] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.484286][ T3911] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.498320][ T3911] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.508751][ T3911] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.534946][ T776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1091.552192][ T776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1092.563819][ T787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1092.640343][ T787] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1092.649731][ T787] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1092.669339][ T787] dummy0: entered allmulticast mode [ 1092.680069][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1092.699504][ T793] loop6: detected capacity change from 0 to 1024 [ 1092.711386][ T787] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1092.724895][ T793] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1092.744782][ T787] bond8 (unregistering): Released all slaves [ 1092.754244][ T793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.782667][ T790] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.9240: missing EA_INODE flag [ 1092.795691][ T790] EXT4-fs (loop6): Remounting filesystem read-only [ 1092.809876][ T790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=790 comm=syz.6.9240 [ 1092.852105][ T785] dummy0: left allmulticast mode [ 1092.907913][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.932314][ T803] Set syz1 is full, maxelem 65536 reached [ 1093.940624][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 1093.940640][ T29] audit: type=1400 audit(1882.711:76840): avc: denied { mounton } for pid=794 comm="syz.4.9241" path="/1838/file0" dev="tmpfs" ino=9713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1094.001187][ T29] audit: type=1400 audit(1882.767:76841): avc: denied { prog_load } for pid=794 comm="syz.4.9241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1094.021831][ T29] audit: type=1400 audit(1882.767:76842): avc: denied { bpf } for pid=794 comm="syz.4.9241" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1094.043110][ T29] audit: type=1400 audit(1882.767:76843): avc: denied { perfmon } for pid=794 comm="syz.4.9241" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1094.065048][ T29] audit: type=1400 audit(1882.767:76844): avc: denied { prog_run } for pid=794 comm="syz.4.9241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1094.135071][ T29] audit: type=1400 audit(1882.896:76845): avc: denied { read } for pid=807 comm="syz.6.9245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1094.170824][ T29] audit: type=1400 audit(1882.924:76846): avc: denied { read write } for pid=29128 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.198010][ T29] audit: type=1400 audit(1882.924:76847): avc: denied { open } for pid=29128 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.223901][ T29] audit: type=1400 audit(1882.924:76848): avc: denied { ioctl } for pid=29128 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.264122][ T29] audit: type=1400 audit(1882.933:76849): avc: denied { prog_load } for pid=820 comm="syz.6.9246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1094.266769][ T822] rdma_rxe: rxe_newlink: failed to add lo [ 1094.290031][ T821] wireguard0: entered promiscuous mode [ 1094.295811][ T821] wireguard0: entered allmulticast mode [ 1094.318115][ T822] 0ªî{X¹¦: left allmulticast mode [ 1094.346336][ T822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.358642][ T822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1094.426866][ T830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9250'. [ 1094.437627][ T830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9250'. [ 1095.745334][ T839] C speed is unknown, defaulting to 1000 [ 1095.752141][ T839] lo speed is unknown, defaulting to 1000 [ 1096.899424][ T855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9256'. [ 1096.954318][ T855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1096.962169][ T855] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1096.962245][ T858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9257'. [ 1096.980943][ T855] dummy0: entered allmulticast mode [ 1096.989436][ T855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9256'. [ 1097.015838][ T855] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1097.026800][ T855] bond1 (unregistering): Released all slaves [ 1097.041900][ T863] pimreg: entered allmulticast mode [ 1097.053245][ T858] pimreg: left allmulticast mode [ 1097.089005][ T854] dummy0: left allmulticast mode [ 1097.149132][ T868] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.171442][ T871] netlink: 'syz.1.9260': attribute type 21 has an invalid length. [ 1097.179861][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1097.202575][ T868] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.244275][ T868] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.277571][ T868] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.316688][ T873] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1098.032859][ T882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1098.043265][ T879] loop6: detected capacity change from 0 to 1024 [ 1098.055342][ T882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1098.067678][ T879] EXT4-fs: Ignoring removed mblk_io_submit option [ 1098.074625][ T879] EXT4-fs: dax option not supported [ 1098.207516][ T884] C: left allmulticast mode [ 1098.227265][ T884] tunl0: left allmulticast mode [ 1098.233495][ T884] gre0: left allmulticast mode [ 1098.240809][ T884] 1ªî{X¹¦: left allmulticast mode [ 1098.246687][ T884] erspan0: left allmulticast mode [ 1098.253295][ T884] ip_vti0: left allmulticast mode [ 1098.259494][ T884] ip6_vti0: left allmulticast mode [ 1098.270451][ T884] sit0: left allmulticast mode [ 1098.278571][ T884] ip6tnl0: left allmulticast mode [ 1098.284889][ T884] ip6gre0: left allmulticast mode [ 1098.291155][ T884] $Hÿ: left allmulticast mode [ 1098.297059][ T884] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 1098.306958][ T884] nlmon0: left allmulticast mode [ 1098.313134][ T884] caif0: left allmulticast mode [ 1098.318397][ T884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1098.334902][T17761] C speed is unknown, defaulting to 1000 [ 1098.341532][T17761] syz0: Port: 1 Link ACTIVE [ 1098.817654][ T906] netlink: 'syz.1.9267': attribute type 10 has an invalid length. [ 1098.826062][ T906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9267'. [ 1098.837293][ T906] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1099.375875][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 1099.375888][ T29] audit: type=1400 audit(1887.723:77400): avc: denied { read write } for pid=29128 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.406942][ T29] audit: type=1400 audit(1887.723:77401): avc: denied { open } for pid=29128 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.437441][ T29] audit: type=1400 audit(1887.751:77402): avc: denied { ioctl } for pid=29128 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.464457][ T29] audit: type=1400 audit(1887.806:77403): avc: denied { map_create } for pid=914 comm="syz.6.9270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1099.484342][ T29] audit: type=1400 audit(1887.806:77404): avc: denied { perfmon } for pid=914 comm="syz.6.9270" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1099.506346][ T29] audit: type=1400 audit(1887.806:77405): avc: denied { map_read map_write } for pid=914 comm="syz.6.9270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1099.526008][ T29] audit: type=1400 audit(1887.806:77406): avc: denied { prog_load } for pid=914 comm="syz.6.9270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1099.545338][ T29] audit: type=1400 audit(1887.806:77407): avc: denied { bpf } for pid=914 comm="syz.6.9270" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1099.566454][ T29] audit: type=1400 audit(1887.806:77408): avc: denied { allowed } for pid=914 comm="syz.6.9270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1099.585909][ T915] wireguard0: entered promiscuous mode [ 1099.591758][ T915] wireguard0: entered allmulticast mode [ 1099.613361][ T29] audit: type=1400 audit(1887.825:77409): avc: denied { create } for pid=914 comm="syz.6.9270" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1100.208205][ T932] __nla_validate_parse: 3 callbacks suppressed [ 1100.208218][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9274'. [ 1100.418525][ T938] openvswitch: netlink: Message has 6 unknown bytes. [ 1100.693351][ T944] ipvlan2: entered promiscuous mode [ 1100.713771][ T944] bridge0: port 3(ipvlan2) entered blocking state [ 1100.720587][ T944] bridge0: port 3(ipvlan2) entered disabled state [ 1100.962389][ T944] ipvlan2: entered allmulticast mode [ 1100.967787][ T944] bridge0: entered allmulticast mode [ 1100.982488][ T945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=945 comm=syz.3.9277 [ 1100.996790][ T944] ipvlan2: left allmulticast mode [ 1101.002002][ T944] bridge0: left allmulticast mode [ 1101.299030][ T952] loop6: detected capacity change from 0 to 1024 [ 1101.309404][ T952] EXT4-fs: Ignoring removed bh option [ 1101.316913][ T952] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1101.336591][ T952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 1101.345953][ T952] System zones: 0-1, 3-12 [ 1101.368051][ T952] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.9279: lblock 1 mapped to illegal pblock 1 (length 1) [ 1101.389898][ T952] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.9279: Failed to acquire dquot type 0 [ 1101.404235][ T952] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.9279: Freeing blocks not in datazone - block = 0, count = 4096 [ 1101.405719][ T949] infiniband syz1: set down [ 1101.423247][ T949] infiniband syz1: added syz_tun [ 1101.430321][ T952] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.9279: Invalid inode bitmap blk 0 in block_group 0 [ 1101.445520][ T952] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 1101.454398][ T3879] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 1101.459497][ T952] EXT4-fs (loop6): 1 orphan inode deleted [ 1101.470643][ T3879] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:32: Failed to release dquot type 0 [ 1101.477205][ T952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.560018][ T949] RDS/IB: syz1: added [ 1101.576945][ T949] smc: adding ib device syz1 with port count 1 [ 1101.591061][ T949] smc: ib device syz1 port 1 has pnetid [ 1101.924190][ T966] netlink: 'syz.3.9284': attribute type 10 has an invalid length. [ 1101.932396][ T966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9284'. [ 1101.942464][ T966] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1102.173962][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.257557][ T978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9286'. [ 1102.273999][ T978] pimreg: entered allmulticast mode [ 1102.280476][ T978] pimreg: left allmulticast mode [ 1102.416304][ T985] ipvlan0: entered promiscuous mode [ 1102.522181][ T989] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1102.851185][ T999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9292'. [ 1102.924383][ T999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1102.942238][ T999] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1102.981567][ T999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9292'. [ 1102.992410][ T999] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1103.002006][ T999] bond8 (unregistering): Released all slaves [ 1103.093671][ T1004] netlink: 'syz.3.9295': attribute type 21 has an invalid length. [ 1103.101954][ T1004] netlink: 'syz.3.9295': attribute type 1 has an invalid length. [ 1103.110178][ T1004] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9295'. [ 1103.325018][ T1007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=1007 comm=syz.1.9294 [ 1103.633828][ T1020] loop6: detected capacity change from 0 to 8192 [ 1103.643175][ T1020] vfat: Unknown parameter 'ÿ…䇈TêS;zêŒôdŒ† ÐS‡W' [ 1103.816430][ T1023] openvswitch: netlink: Message has 6 unknown bytes. [ 1104.016748][ T1029] loop6: detected capacity change from 0 to 1024 [ 1104.053263][ T1029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.128748][ T1034] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.9305: lblock 0 mapped to illegal pblock 0 (length 4) [ 1104.159811][ T1034] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1104.175043][ T1034] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1104.175043][ T1034] [ 1104.411632][ T1041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9307'. [ 1104.422133][ T1041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9307'. [ 1104.486837][ T3918] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:64: lblock 4 mapped to illegal pblock 4 (length 2) [ 1104.504060][ T3918] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 1104.517010][ T3918] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1104.517010][ T3918] [ 1104.533781][ T3879] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 1104.565865][ T3879] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1104.581481][ T3879] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1104.581481][ T3879] [ 1104.697528][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1104.766012][ T1048] vlan2: entered allmulticast mode [ 1104.773048][ T1048] dummy0: entered allmulticast mode [ 1104.804824][ T29] kauditd_printk_skb: 1008 callbacks suppressed [ 1104.804837][ T29] audit: type=1400 audit(1892.744:78415): avc: denied { map_create } for pid=1049 comm="syz.4.9310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1104.858391][ T29] audit: type=1400 audit(1892.744:78416): avc: denied { bpf } for pid=1049 comm="syz.4.9310" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1104.878268][ T1050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9310'. [ 1104.879904][ T29] audit: type=1400 audit(1892.744:78417): avc: denied { map_read } for pid=1049 comm="syz.4.9310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1104.908152][ T29] audit: type=1400 audit(1892.744:78418): avc: denied { prog_load } for pid=1049 comm="syz.4.9310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1104.927631][ T29] audit: type=1400 audit(1892.744:78419): avc: denied { bpf } for pid=1049 comm="syz.4.9310" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1104.948719][ T29] audit: type=1400 audit(1892.744:78420): avc: denied { perfmon } for pid=1049 comm="syz.4.9310" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1104.965548][ T1050] pimreg: entered allmulticast mode [ 1104.969508][ T29] audit: type=1400 audit(1892.744:78421): avc: denied { bpf } for pid=1049 comm="syz.4.9310" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1104.995570][ T29] audit: type=1400 audit(1892.754:78422): avc: denied { prog_run } for pid=1049 comm="syz.4.9310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1105.004547][ T1052] loop6: detected capacity change from 0 to 2048 [ 1105.015467][ T29] audit: type=1400 audit(1892.754:78423): avc: denied { prog_load } for pid=1049 comm="syz.4.9310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1105.042899][ T29] audit: type=1400 audit(1892.754:78424): avc: denied { create } for pid=1049 comm="syz.4.9310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1105.066100][ T1050] pimreg: left allmulticast mode [ 1105.078930][ T1052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 1105.210935][ T1052] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.9309: inline data xattr refers to an external xattr inode [ 1105.314118][ T1052] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1105.329851][ T1052] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1105.342836][ T1052] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1105.342836][ T1052] [ 1105.353757][ T1052] EXT4-fs (loop6): Total free blocks count 0 [ 1105.360111][ T1052] EXT4-fs (loop6): Free/Dirty block details [ 1105.366138][ T1052] EXT4-fs (loop6): free_blocks=2415919104 [ 1105.372281][ T1052] EXT4-fs (loop6): dirty_blocks=2304 [ 1105.378099][ T1052] EXT4-fs (loop6): Block reservation details [ 1105.385351][ T1052] EXT4-fs (loop6): i_reserved_data_blocks=144 [ 1105.661396][ T3898] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 1105.783814][ T1065] __nla_validate_parse: 1 callbacks suppressed [ 1105.783830][ T1065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1105.816823][ T1065] pimreg: entered allmulticast mode [ 1105.839995][ T1065] pimreg: left allmulticast mode [ 1105.904535][ T1063] C speed is unknown, defaulting to 1000 [ 1105.937501][ T1063] lo speed is unknown, defaulting to 1000 [ 1106.722608][ T1073] ipvlan0: entered promiscuous mode [ 1106.733004][ T1073] bridge0: port 1(ipvlan0) entered blocking state [ 1106.739693][ T1073] bridge0: port 1(ipvlan0) entered disabled state [ 1106.755817][ T1073] ipvlan0: entered allmulticast mode [ 1106.761552][ T1073] bridge0: entered allmulticast mode [ 1106.769284][ T1073] ipvlan0: left allmulticast mode [ 1106.775471][ T1073] bridge0: left allmulticast mode [ 1107.106752][ T1087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9319'. [ 1107.122009][ T1087] loop6: detected capacity change from 0 to 512 [ 1107.136967][ T1083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=1083 comm=syz.4.9316 [ 1107.177318][ T1087] EXT4-fs (loop6): 1 orphan inode deleted [ 1107.184472][ T1087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.201146][ T3911] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:57: Failed to release dquot type 1 [ 1107.238810][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.338319][ T1096] ipvlan2: entered promiscuous mode [ 1107.344951][ T1096] bridge0: port 3(ipvlan2) entered blocking state [ 1107.351895][ T1096] bridge0: port 3(ipvlan2) entered disabled state [ 1107.358962][ T1096] ipvlan2: entered allmulticast mode [ 1107.365170][ T1096] bridge0: entered allmulticast mode [ 1107.371954][ T1096] ipvlan2: left allmulticast mode [ 1107.377342][ T1096] bridge0: left allmulticast mode [ 1107.446026][ T1102] pim6reg: entered allmulticast mode [ 1107.494469][ T1102] pim6reg: left allmulticast mode [ 1108.168435][ T1118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1108.200563][ T1118] pimreg: entered allmulticast mode [ 1108.215580][ T1118] pimreg: left allmulticast mode [ 1108.742107][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9329'. [ 1109.229993][ T1133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9332'. [ 1109.595549][ T1150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9337'. [ 1109.610862][ T1141] netlink: 'syz.4.9333': attribute type 10 has an invalid length. [ 1109.619200][ T1141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1109.644146][ T1150] sch_fq: defrate 4294967295 ignored. [ 1109.660439][ T1141] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1110.240256][ T29] kauditd_printk_skb: 880 callbacks suppressed [ 1110.240270][ T29] audit: type=1400 audit(1897.756:79304): avc: denied { execmem } for pid=1171 comm="syz.6.9343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1110.252688][ T1168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9352'. [ 1110.285328][ T1168] pimreg: entered allmulticast mode [ 1110.292430][ T1168] pimreg: left allmulticast mode [ 1110.295757][ T29] audit: type=1400 audit(1897.793:79305): avc: denied { create } for pid=1166 comm="syz.1.9352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1110.317876][ T29] audit: type=1400 audit(1897.793:79306): avc: denied { setopt } for pid=1166 comm="syz.1.9352" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1110.339289][ T29] audit: type=1400 audit(1897.812:79307): avc: denied { prog_load } for pid=1165 comm="syz.4.9342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1110.358318][ T29] audit: type=1400 audit(1897.812:79308): avc: denied { bpf } for pid=1165 comm="syz.4.9342" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.380668][ T29] audit: type=1400 audit(1897.867:79309): avc: denied { open } for pid=1166 comm="syz.1.9352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1110.400189][ T29] audit: type=1400 audit(1897.867:79310): avc: denied { perfmon } for pid=1166 comm="syz.1.9352" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.421603][ T29] audit: type=1400 audit(1897.867:79311): avc: denied { kernel } for pid=1166 comm="syz.1.9352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1110.441635][ T29] audit: type=1326 audit(1897.886:79312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1165 comm="syz.4.9342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1110.465398][ T29] audit: type=1326 audit(1897.886:79313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1165 comm="syz.4.9342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1110.466545][ T1172] loop6: detected capacity change from 0 to 8192 [ 1110.498042][ T1172] vfat: Unknown parameter 'ÿ…䇈TêS;zêŒôdŒ† ÐS‡W' [ 1111.204723][ T1186] ipvlan0: entered promiscuous mode [ 1111.210350][ T1185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9345'. [ 1111.222023][ T1186] bridge0: port 1(ipvlan0) entered blocking state [ 1111.228622][ T1186] bridge0: port 1(ipvlan0) entered disabled state [ 1111.235573][ T1186] ipvlan0: entered allmulticast mode [ 1111.241003][ T1186] bridge0: entered allmulticast mode [ 1111.262909][ T1186] ipvlan0: left allmulticast mode [ 1111.267983][ T1186] bridge0: left allmulticast mode [ 1111.813610][ T1204] netlink: 'syz.2.9362': attribute type 10 has an invalid length. [ 1112.202797][ T1214] vlan0: entered allmulticast mode [ 1112.209153][ T1214] dummy0: entered allmulticast mode [ 1112.626104][ T1223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9351'. [ 1112.637018][ T1223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9351'. [ 1113.102485][ T1238] bond0: Device is already in use. [ 1113.200593][ T1245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9359'. [ 1113.332998][ T1252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9360'. [ 1113.359854][ T1252] pimreg: entered allmulticast mode [ 1113.366665][ T1252] pimreg: left allmulticast mode [ 1113.432788][ T1259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9353'. [ 1114.268287][ T1275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1115.359097][ T1292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9372'. [ 1115.500349][ T1300] loop6: detected capacity change from 0 to 512 [ 1115.508858][ T1300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1115.517288][ T1301] C speed is unknown, defaulting to 1000 [ 1115.525800][ T1301] lo speed is unknown, defaulting to 1000 [ 1115.526858][ T1300] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9374: bg 0: block 4: invalid block bitmap [ 1115.545458][ T1300] EXT4-fs (loop6): Remounting filesystem read-only [ 1115.554100][ T1300] EXT4-fs (loop6): 1 truncate cleaned up [ 1115.560642][ T1300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.664888][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 1115.664903][ T29] audit: type=1400 audit(1902.768:80023): avc: denied { mounton } for pid=1297 comm="syz.4.9370" path="/1864/file0" dev="tmpfs" ino=9856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1115.714612][ T29] audit: type=1400 audit(1902.814:80024): avc: denied { open } for pid=1296 comm="syz.2.9382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1115.744326][ T29] audit: type=1400 audit(1902.814:80025): avc: denied { perfmon } for pid=1296 comm="syz.2.9382" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1115.765734][ T29] audit: type=1400 audit(1902.814:80026): avc: denied { kernel } for pid=1296 comm="syz.2.9382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1115.787335][ T29] audit: type=1400 audit(1902.870:80027): avc: denied { prog_load } for pid=1296 comm="syz.2.9382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.806981][ T29] audit: type=1400 audit(1902.870:80028): avc: denied { bpf } for pid=1296 comm="syz.2.9382" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1115.974810][ T29] audit: type=1400 audit(1903.045:80029): avc: denied { prog_load } for pid=1296 comm="syz.2.9382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.994918][ T29] audit: type=1400 audit(1903.045:80030): avc: denied { bpf } for pid=1296 comm="syz.2.9382" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1116.044526][ T29] audit: type=1400 audit(1903.110:80031): avc: denied { create } for pid=1308 comm="syz.3.9375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1116.068662][ T29] audit: type=1400 audit(1903.137:80032): avc: denied { write } for pid=1308 comm="syz.3.9375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1116.292833][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.441703][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9379'. [ 1116.465597][ T1324] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1116.489287][ T1323] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=1323 comm=syz.2.9376 [ 1120.086885][ T1360] __nla_validate_parse: 2 callbacks suppressed [ 1120.086901][ T1360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9394'. [ 1120.105297][ T1360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9394'. [ 1120.391780][ T1367] loop6: detected capacity change from 0 to 8192 [ 1120.399969][ T1367] vfat: Unknown parameter 'ÿ…䇈TêS;zêŒôdŒ† ÐS‡W' [ 1120.773619][ T1359] netlink: 'syz.4.9393': attribute type 3 has an invalid length. [ 1120.782576][ T1359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1120.833848][ T1359] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 1121.086761][ T1381] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1121.110628][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 1121.110644][ T29] audit: type=1400 audit(1907.780:80601): avc: denied { sys_module } for pid=1378 comm="syz.6.9409" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1121.139283][ T29] audit: type=1400 audit(1907.780:80602): avc: denied { module_request } for pid=1378 comm="syz.6.9409" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1121.187900][ T29] audit: type=1400 audit(1907.863:80603): avc: denied { map_create } for pid=1380 comm="syz.2.9399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1121.208581][ T1379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9409'. [ 1121.220496][ T29] audit: type=1400 audit(1907.891:80604): avc: denied { create } for pid=1378 comm="syz.6.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1121.245498][ T1379] pimreg: entered allmulticast mode [ 1121.252843][ T1379] pimreg: left allmulticast mode [ 1121.259369][ T29] audit: type=1400 audit(1907.919:80605): avc: denied { setopt } for pid=1378 comm="syz.6.9409" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1121.299325][ T29] audit: type=1400 audit(1907.965:80606): avc: denied { create } for pid=1387 comm="syz.4.9400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1121.322115][ T29] audit: type=1400 audit(1907.992:80607): avc: denied { open } for pid=1378 comm="syz.6.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1121.344857][ T29] audit: type=1400 audit(1907.992:80608): avc: denied { perfmon } for pid=1378 comm="syz.6.9409" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1121.367137][ T29] audit: type=1400 audit(1907.992:80609): avc: denied { kernel } for pid=1378 comm="syz.6.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1121.394289][ T29] audit: type=1400 audit(1908.057:80610): avc: denied { map_create } for pid=1386 comm="syz.1.9411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1121.429986][ T1390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9411'. [ 1121.874121][ T1390] C speed is unknown, defaulting to 1000 [ 1121.884900][ T1390] lo speed is unknown, defaulting to 1000 [ 1122.338805][ T1408] C speed is unknown, defaulting to 1000 [ 1122.345928][ T1408] lo speed is unknown, defaulting to 1000 [ 1123.523646][ T1418] netlink: 'syz.3.9406': attribute type 10 has an invalid length. [ 1123.531617][ T1418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9406'. [ 1123.569977][ T1418] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1123.609633][ T1420] loop6: detected capacity change from 0 to 8192 [ 1123.618135][ T1420] vfat: Unknown parameter 'ÿ…䇈TêS;zêŒôdŒ† ÐS‡W' [ 1124.106652][ T1434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9414'. [ 1124.144552][ T1428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9414'. [ 1124.181309][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9414'. [ 1124.718292][ T1436] C speed is unknown, defaulting to 1000 [ 1124.746223][ T1436] lo speed is unknown, defaulting to 1000 [ 1125.499944][ T1445] pimreg: entered allmulticast mode [ 1125.508496][ T1445] pimreg: left allmulticast mode [ 1125.738378][ T1466] vlan0: entered allmulticast mode [ 1125.743908][ T1466] dummy0: entered allmulticast mode [ 1126.285228][ T1480] __nla_validate_parse: 4 callbacks suppressed [ 1126.285244][ T1480] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9428'. [ 1126.312866][ T1480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9428'. [ 1126.325606][ T1482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9429'. [ 1126.336758][ T1482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9429'. [ 1126.436651][ T1486] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9432'. [ 1126.587200][ T29] kauditd_printk_skb: 802 callbacks suppressed [ 1126.587215][ T29] audit: type=1400 audit(1912.764:81413): avc: denied { execmem } for pid=1487 comm="syz.2.9431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1126.620859][ T29] audit: type=1326 audit(1912.875:81414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1126.645070][ T29] audit: type=1326 audit(1912.875:81415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1126.651961][ T1486] C speed is unknown, defaulting to 1000 [ 1126.669509][ T29] audit: type=1326 audit(1912.921:81416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1126.669646][ T29] audit: type=1400 audit(1912.921:81417): avc: denied { map_create } for pid=1489 comm="syz.1.9433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1126.669670][ T29] audit: type=1326 audit(1912.921:81418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1126.669739][ T29] audit: type=1326 audit(1912.921:81419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1126.670719][ T29] audit: type=1326 audit(1912.921:81420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1489 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1126.670751][ T29] audit: type=1400 audit(1912.921:81421): avc: denied { prog_load } for pid=1489 comm="syz.1.9433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1126.670797][ T29] audit: type=1400 audit(1912.921:81422): avc: denied { bpf } for pid=1489 comm="syz.1.9433" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1126.857589][ T1486] lo speed is unknown, defaulting to 1000 [ 1127.000485][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9438'. [ 1127.032992][ T1504] pimreg: entered allmulticast mode [ 1127.066703][ T1506] netlink: 'syz.3.9436': attribute type 10 has an invalid length. [ 1127.075566][ T1506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1127.088987][ T1506] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1127.128667][ T1509] pimreg: left allmulticast mode [ 1127.406513][ T1517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1127.432165][ T1517] pimreg: entered allmulticast mode [ 1127.440300][ T1517] pimreg: left allmulticast mode [ 1128.083663][ T1533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9444'. [ 1128.117215][ T1533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9444'. [ 1128.907949][ T1550] pim6reg: left allmulticast mode [ 1128.918435][ T1549] random: crng reseeded on system resumption [ 1129.126988][ T1568] pimreg: entered allmulticast mode [ 1129.134510][ T1568] pimreg: left allmulticast mode [ 1129.353174][ T1579] C speed is unknown, defaulting to 1000 [ 1129.360431][ T1579] lo speed is unknown, defaulting to 1000 [ 1129.943019][ T1586] pimreg: entered allmulticast mode [ 1129.950708][ T1586] pimreg: left allmulticast mode [ 1131.395413][ T1612] loop6: detected capacity change from 0 to 8192 [ 1131.404316][ T1612] vfat: Unknown parameter 'ÿ…䇈TêS;zêŒôdŒ† ÐS‡W' [ 1132.004059][ T1616] __nla_validate_parse: 6 callbacks suppressed [ 1132.004072][ T1616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1132.020432][ T29] kauditd_printk_skb: 893 callbacks suppressed [ 1132.020445][ T29] audit: type=1326 audit(1917.869:82316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1132.051884][ T29] audit: type=1326 audit(1917.869:82317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1132.108017][ T1620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9466'. [ 1132.118475][ T29] audit: type=1326 audit(1917.869:82318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1132.143514][ T29] audit: type=1400 audit(1917.869:82319): avc: denied { create } for pid=1615 comm="syz.1.9465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1132.164682][ T29] audit: type=1326 audit(1917.869:82320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1132.190818][ T29] audit: type=1326 audit(1917.869:82321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1132.215497][ T29] audit: type=1326 audit(1917.869:82322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c267eebe9 code=0x7ffc0000 [ 1132.240008][ T29] audit: type=1400 audit(1917.869:82323): avc: denied { map_create } for pid=1615 comm="syz.1.9465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1132.259831][ T29] audit: type=1400 audit(1917.869:82324): avc: denied { bpf } for pid=1615 comm="syz.1.9465" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1132.281716][ T29] audit: type=1400 audit(1917.869:82325): avc: denied { map_read map_write } for pid=1615 comm="syz.1.9465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1132.363986][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9469'. [ 1132.379865][ T1625] pimreg: entered allmulticast mode [ 1132.386587][ T1625] pimreg: left allmulticast mode [ 1132.602635][ T1634] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1133.070502][ T1646] netlink: 'syz.3.9477': attribute type 3 has an invalid length. [ 1133.078805][ T1646] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9477'. [ 1133.110728][ T1646] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 1134.410396][ T1682] C speed is unknown, defaulting to 1000 [ 1134.416907][ T1682] lo speed is unknown, defaulting to 1000 [ 1135.055726][ T1689] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1135.232393][ T1692] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9489'. [ 1135.246622][ T1692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9489'. [ 1135.267679][ T1692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9489'. [ 1135.295643][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9489'. [ 1135.394739][ T1694] loop6: detected capacity change from 0 to 2048 [ 1135.470287][ T1694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.983251][ T1719] wireguard0: entered promiscuous mode [ 1135.988947][ T1719] wireguard0: entered allmulticast mode [ 1136.307899][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.512520][ T1743] SELinux: failed to load policy [ 1137.454667][ T29] kauditd_printk_skb: 1194 callbacks suppressed [ 1137.454682][ T29] audit: type=1326 audit(1922.871:83520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.455332][ T1764] netlink: 'syz.1.9505': attribute type 4 has an invalid length. [ 1137.461413][ T29] audit: type=1326 audit(1922.871:83521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.516147][ T29] audit: type=1326 audit(1922.871:83522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.546948][T17761] lo speed is unknown, defaulting to 1000 [ 1137.552788][T17761] syz2: Port: 1 Link DOWN [ 1137.565337][ T29] audit: type=1326 audit(1922.945:83523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89660ad550 code=0x7ffc0000 [ 1137.589521][ T29] audit: type=1326 audit(1922.945:83524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.590959][ T1766] netlink: 'syz.1.9505': attribute type 4 has an invalid length. [ 1137.613941][ T29] audit: type=1326 audit(1922.945:83525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.614053][ T29] audit: type=1326 audit(1922.954:83526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.614191][ T29] audit: type=1326 audit(1922.954:83527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.614241][ T29] audit: type=1326 audit(1922.954:83528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.614275][ T29] audit: type=1326 audit(1922.954:83529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1760 comm="syz.6.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1137.843981][T17761] lo speed is unknown, defaulting to 1000 [ 1137.849931][T17761] syz2: Port: 1 Link ACTIVE [ 1137.901117][ T1776] loop6: detected capacity change from 0 to 2048 [ 1137.941702][ T1776] loop6: p1 < > p4 [ 1137.947880][ T1776] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1139.642134][ T1798] siw: device registration error -23 [ 1140.259297][ T1811] Set syz1 is full, maxelem 65536 reached [ 1140.698732][ T1833] C speed is unknown, defaulting to 1000 [ 1140.705148][ T1833] lo speed is unknown, defaulting to 1000 [ 1140.777185][ T1835] __nla_validate_parse: 7 callbacks suppressed [ 1140.777200][ T1835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9525'. [ 1141.140500][ T1847] loop6: detected capacity change from 0 to 164 [ 1141.155951][ T1847] iso9660: Unexpected value for 'cruft' [ 1141.550786][ T1854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9530'. [ 1141.613567][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9530'. [ 1141.702626][ T1858] netlink: 'syz.3.9531': attribute type 46 has an invalid length. [ 1141.732433][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9530'. [ 1141.770604][ T1854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9530'. [ 1142.176487][ T1867] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1142.184776][ T1867] netlink: 'syz.1.9533': attribute type 4 has an invalid length. [ 1142.193601][ T1867] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1142.326527][ T1867] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1142.334687][ T1867] netlink: 'syz.1.9533': attribute type 4 has an invalid length. [ 1142.342757][ T1867] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1142.382126][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1142.402032][ T1867] IPVS: Unknown mcast interface: vcan0 [ 1142.461772][ T1876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9535'. [ 1142.479495][ T1876] IPVS: Error joining to the multicast group [ 1142.492750][ T1876] loop6: detected capacity change from 0 to 512 [ 1142.512900][ T1876] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.9535: Failed to acquire dquot type 1 [ 1142.551290][ T1876] EXT4-fs (loop6): 1 truncate cleaned up [ 1142.570656][ T1876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.603904][ T1876] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9535'. [ 1142.951056][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 1142.951070][ T29] audit: type=1400 audit(2439.948:84419): avc: denied { prog_run } for pid=1887 comm="syz.3.9540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1143.012565][ T29] audit: type=1400 audit(2439.985:84420): avc: denied { map_create } for pid=1887 comm="syz.3.9540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1143.033179][ T29] audit: type=1400 audit(2439.985:84421): avc: denied { bpf } for pid=1887 comm="syz.3.9540" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1143.103217][ T29] audit: type=1400 audit(2440.041:84422): avc: denied { create } for pid=1887 comm="syz.3.9540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1143.123734][ T29] audit: type=1400 audit(2440.041:84423): avc: denied { write } for pid=1887 comm="syz.3.9540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1143.144944][ T29] audit: type=1400 audit(2440.041:84424): avc: denied { read } for pid=1887 comm="syz.3.9540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1143.165182][ T29] audit: type=1400 audit(2440.041:84425): avc: denied { prog_load } for pid=1887 comm="syz.3.9540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1143.184612][ T29] audit: type=1400 audit(2440.041:84426): avc: denied { bpf } for pid=1887 comm="syz.3.9540" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1143.205651][ T29] audit: type=1400 audit(2440.041:84427): avc: denied { perfmon } for pid=1887 comm="syz.3.9540" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1143.227478][ T29] audit: type=1400 audit(2440.050:84428): avc: denied { bpf } for pid=1887 comm="syz.3.9540" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1143.983597][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.095128][ T1910] loop6: detected capacity change from 0 to 8192 [ 1144.266828][ T1916] C speed is unknown, defaulting to 1000 [ 1144.272356][ T1910] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1144.274040][ T1916] lo speed is unknown, defaulting to 1000 [ 1144.281601][ T1910] FAT-fs (loop6): Filesystem has been set read-only [ 1144.538258][ T1928] loop6: detected capacity change from 0 to 8192 [ 1146.026771][ T1943] C speed is unknown, defaulting to 1000 [ 1146.035897][ T1943] lo speed is unknown, defaulting to 1000 [ 1146.279259][ T1959] loop6: detected capacity change from 0 to 512 [ 1146.508584][ T1973] __nla_validate_parse: 3 callbacks suppressed [ 1146.508598][ T1973] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1146.570011][ T1972] netlink: 'syz.3.9562': attribute type 10 has an invalid length. [ 1146.900478][ T1979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9565'. [ 1147.114801][ T1988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9570'. [ 1147.129514][ T1988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9570'. [ 1147.345755][ T1997] loop6: detected capacity change from 0 to 128 [ 1147.358565][ T1997] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1147.443101][T29128] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1147.511017][ T2004] loop6: detected capacity change from 0 to 1024 [ 1147.547687][ T2004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.623330][ T2009] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.9575: lblock 0 mapped to illegal pblock 0 (length 4) [ 1147.643539][ T2009] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1147.656513][ T2009] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1147.656513][ T2009] [ 1147.697620][ T2010] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9575'. [ 1147.912329][ T2019] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.9577'. [ 1148.057202][ T3919] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:65: lblock 4 mapped to illegal pblock 4 (length 2) [ 1148.079330][ T3919] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 1148.093442][ T3919] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1148.093442][ T3919] [ 1148.128611][ T3919] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:65: lblock 8 mapped to illegal pblock 8 (length 8) [ 1148.147208][ T3919] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1148.160554][ T3919] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1148.160554][ T3919] [ 1148.291545][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1148.374208][ T29] kauditd_printk_skb: 1106 callbacks suppressed [ 1148.374222][ T29] audit: type=1400 audit(2444.951:85535): avc: denied { prog_run } for pid=2016 comm="syz.1.9578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.504621][ T29] audit: type=1400 audit(2445.071:85536): avc: denied { prog_load } for pid=2022 comm="syz.6.9579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.526237][ T29] audit: type=1400 audit(2445.071:85537): avc: denied { bpf } for pid=2022 comm="syz.6.9579" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.549023][ T29] audit: type=1400 audit(2445.071:85538): avc: denied { perfmon } for pid=2022 comm="syz.6.9579" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.578466][ T29] audit: type=1400 audit(2445.145:85539): avc: denied { allowed } for pid=2022 comm="syz.6.9579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1148.600200][ T29] audit: type=1400 audit(2445.145:85540): avc: denied { create } for pid=2022 comm="syz.6.9579" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1148.623135][ T29] audit: type=1400 audit(2445.145:85541): avc: denied { map } for pid=2022 comm="syz.6.9579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1148.649157][ T29] audit: type=1400 audit(2445.145:85542): avc: denied { read write } for pid=2022 comm="syz.6.9579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1148.675866][ T29] audit: type=1400 audit(2445.145:85543): avc: denied { map } for pid=2022 comm="syz.6.9579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1148.711193][ T29] audit: type=1400 audit(2445.265:85544): avc: denied { prog_load } for pid=2016 comm="syz.1.9578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.715058][ T2026] loop6: detected capacity change from 0 to 8192 [ 1148.757056][ T2026] vfat: Unknown parameter 'ÿ…䇈TêS;zêŒôdŒ† ÐS‡W' [ 1149.220580][ T2023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.231210][ T2023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.371170][ T2038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9583'. [ 1149.382603][ T2038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9583'. [ 1149.521549][ T2044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9582'. [ 1150.056038][ T2086] netlink: 'syz.6.9587': attribute type 1 has an invalid length. [ 1150.064650][ T2086] netlink: 'syz.6.9587': attribute type 4 has an invalid length. [ 1150.072609][ T2086] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.9587'. [ 1150.109213][ T2086] netlink: 'syz.6.9587': attribute type 1 has an invalid length. [ 1150.117735][ T2086] netlink: 'syz.6.9587': attribute type 4 has an invalid length. [ 1150.155052][ T2086] IPVS: Error joining to the multicast group [ 1150.297801][ T2093] pim6reg: entered allmulticast mode [ 1150.308124][ T2093] pim6reg: left allmulticast mode [ 1150.575719][ T2124] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1150.688199][ T2134] loop6: detected capacity change from 0 to 2048 [ 1150.729274][ T2134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.759701][ T2124] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1150.950920][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.085068][ T2147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1151.191942][ T2143] loop6: detected capacity change from 0 to 128 [ 1151.488583][ T2160] pimreg: entered allmulticast mode [ 1151.514304][ T2160] pimreg: left allmulticast mode [ 1151.600281][ T2164] C speed is unknown, defaulting to 1000 [ 1151.606976][ T2164] lo speed is unknown, defaulting to 1000 [ 1151.690483][ T2169] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 1151.740958][ T2168] siw: device registration error -23 [ 1151.745752][ T2169] C speed is unknown, defaulting to 1000 [ 1151.764966][ T2169] lo speed is unknown, defaulting to 1000 [ 1151.851927][ T2172] C speed is unknown, defaulting to 1000 [ 1151.858204][ T2172] lo speed is unknown, defaulting to 1000 [ 1153.805912][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 1153.805927][ T29] audit: type=1400 audit(2449.963:86252): avc: denied { read write } for pid=2190 comm="syz.6.9608" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1153.837575][ T29] audit: type=1400 audit(2449.963:86253): avc: denied { read write open } for pid=2190 comm="syz.6.9608" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1153.865429][ T2191] loop6: detected capacity change from 0 to 1024 [ 1153.915827][ T29] audit: type=1400 audit(2450.028:86254): avc: denied { ioctl } for pid=2190 comm="syz.6.9608" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1153.942544][ T29] audit: type=1400 audit(2450.046:86255): avc: denied { mounton } for pid=2190 comm="syz.6.9608" path="/303/file1" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1154.177732][ T2191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.193863][ T29] audit: type=1400 audit(2450.323:86256): avc: denied { mount } for pid=2190 comm="syz.6.9608" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1154.218089][ T29] audit: type=1400 audit(2450.323:86257): avc: denied { read write } for pid=2190 comm="syz.6.9608" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.243027][ T29] audit: type=1400 audit(2450.323:86258): avc: denied { open } for pid=2190 comm="syz.6.9608" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.268106][ T29] audit: type=1400 audit(2450.360:86259): avc: denied { add_name } for pid=2190 comm="syz.6.9608" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1154.290588][ T29] audit: type=1400 audit(2450.360:86260): avc: denied { create } for pid=2190 comm="syz.6.9608" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1154.301774][ T2197] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.9608: lblock 0 mapped to illegal pblock 0 (length 4) [ 1154.313132][ T29] audit: type=1400 audit(2450.360:86261): avc: denied { read write } for pid=2190 comm="syz.6.9608" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1154.382274][ T2198] __nla_validate_parse: 6 callbacks suppressed [ 1154.382338][ T2198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9608'. [ 1154.457259][ T2197] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1154.471303][ T2197] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1154.471303][ T2197] [ 1154.614493][ T2203] netlink: 'syz.2.9610': attribute type 10 has an invalid length. [ 1154.805690][ T3911] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:57: lblock 4 mapped to illegal pblock 4 (length 2) [ 1154.822662][ T3911] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 1154.835982][ T3911] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1154.835982][ T3911] [ 1154.851247][ T3911] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:57: lblock 8 mapped to illegal pblock 8 (length 8) [ 1154.870251][ T3911] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1154.883349][ T3911] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1154.883349][ T3911] [ 1154.989447][T29128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1155.024525][ T2205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1155.344969][ T2214] netlink: 468 bytes leftover after parsing attributes in process `syz.1.9615'. [ 1156.105691][ T2231] tipc: Enabled bearer , priority 0 [ 1156.130409][ T2231] 9pnet_fd: Insufficient options for proto=fd [ 1156.677857][ T2222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9617'. [ 1156.976113][ T2246] pimreg: entered allmulticast mode [ 1157.005151][ T2281] pimreg: left allmulticast mode [ 1157.044788][ T2295] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1157.057801][ T2295] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1157.164997][ T2297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1158.325550][ T2312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9624'. [ 1159.225147][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 1159.225160][ T29] audit: type=1400 audit(2454.975:86780): avc: denied { create } for pid=2376 comm="syz.3.9631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1159.257438][ T29] audit: type=1400 audit(2454.993:86781): avc: denied { map_create } for pid=2378 comm="syz.6.9632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1159.277595][ T29] audit: type=1400 audit(2454.993:86782): avc: denied { map_read map_write } for pid=2378 comm="syz.6.9632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1159.300102][ T29] audit: type=1400 audit(2454.993:86783): avc: denied { write } for pid=2376 comm="syz.3.9631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1159.321408][ T29] audit: type=1400 audit(2455.003:86784): avc: denied { read } for pid=2376 comm="syz.3.9631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1159.344029][ T29] audit: type=1400 audit(2455.003:86785): avc: denied { prog_load } for pid=2378 comm="syz.6.9632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1159.364251][ T29] audit: type=1400 audit(2455.003:86786): avc: denied { bpf } for pid=2378 comm="syz.6.9632" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1159.386527][ T29] audit: type=1400 audit(2455.003:86787): avc: denied { perfmon } for pid=2378 comm="syz.6.9632" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1159.402005][ T2377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9631'. [ 1159.410312][ T29] audit: type=1400 audit(2455.003:86788): avc: denied { prog_run } for pid=2378 comm="syz.6.9632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1159.438639][ T29] audit: type=1326 audit(2455.003:86789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.6.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89660aebe9 code=0x7ffc0000 [ 1159.463123][ T2377] IPVS: Unknown mcast interface: vcan0 [ 1159.470734][ T2381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9633'. [ 1159.578186][ T2384] IPv4: Oversized IP packet from 127.202.26.0 [ 1159.838474][ T2387] loop6: detected capacity change from 0 to 8192 [ 1160.958332][ T2407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1160.970977][ T2405] netlink: 'syz.3.9640': attribute type 1 has an invalid length. [ 1160.979105][ T2405] netlink: 'syz.3.9640': attribute type 4 has an invalid length. [ 1160.987648][ T2405] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9640'. [ 1160.999863][ T2407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1161.000858][ T2405] netlink: 'syz.3.9640': attribute type 1 has an invalid length. [ 1161.019599][ T2405] netlink: 'syz.3.9640': attribute type 4 has an invalid length. [ 1161.028313][ T2405] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9640'. [ 1161.059291][ T2405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9640'. [ 1161.069454][ T2405] IPVS: Unknown mcast interface: vcan0 [ 1161.163996][ T2413] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.9641'. [ 1161.763572][ T2425] bridge29: entered promiscuous mode [ 1162.099833][ T2428] C speed is unknown, defaulting to 1000 [ 1162.106196][ T2428] lo speed is unknown, defaulting to 1000 [ 1162.183018][ T2429] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1162.238498][ T2429] C speed is unknown, defaulting to 1000 [ 1162.259650][ T2429] lo speed is unknown, defaulting to 1000 [ 1162.576341][ T2435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9646'. [ 1163.427796][ T2450] netlink: 'syz.3.9654': attribute type 27 has an invalid length. [ 1163.519120][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1163.531374][ T2458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1163.671343][ T2450] bridge29: left promiscuous mode [ 1163.783978][ T2469] C speed is unknown, defaulting to 1000 [ 1163.791075][ T2469] lo speed is unknown, defaulting to 1000 [ 1163.800887][ T2467] futex_wake_op: syz.6.9668 tries to shift op by -1; fix this program [ 1163.827228][ T2472] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1163.857318][ T2472] C speed is unknown, defaulting to 1000 [ 1163.867914][ T2472] lo speed is unknown, defaulting to 1000 [ 1164.026258][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9660'. [ 1164.668072][ T29] kauditd_printk_skb: 815 callbacks suppressed [ 1164.668085][ T29] audit: type=1400 audit(2459.996:87605): avc: denied { create } for pid=2500 comm="syz.3.9681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1164.698346][ T29] audit: type=1400 audit(2460.005:87606): avc: denied { prog_load } for pid=2502 comm="syz.4.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1164.717915][ T29] audit: type=1400 audit(2460.005:87607): avc: denied { prog_load } for pid=2502 comm="syz.4.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1164.737518][ T29] audit: type=1400 audit(2460.005:87608): avc: denied { map_create } for pid=2502 comm="syz.4.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1164.757317][ T29] audit: type=1400 audit(2460.005:87609): avc: denied { prog_load } for pid=2502 comm="syz.4.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1164.777081][ T29] audit: type=1400 audit(2460.014:87610): avc: denied { allowed } for pid=2502 comm="syz.4.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 1164.782333][ T2503] netlink: 'syz.4.9671': attribute type 27 has an invalid length. [ 1164.796880][ T29] audit: type=1400 audit(2460.024:87611): avc: denied { create } for pid=2500 comm="syz.3.9681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1164.797911][ T29] audit: type=1400 audit(2460.024:87612): avc: denied { prog_load } for pid=2500 comm="syz.3.9681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1164.844718][ T29] audit: type=1400 audit(2460.024:87613): avc: denied { open } for pid=2500 comm="syz.3.9681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 1164.864256][ T29] audit: type=1400 audit(2460.024:87614): avc: denied { prog_load } for pid=2500 comm="syz.3.9681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1164.896965][ T2503] geneve2: left promiscuous mode [ 1164.902288][ T2503] geneve2: left allmulticast mode [ 1164.947623][T17761] C speed is unknown, defaulting to 1000 [ 1164.953596][T17761] syz0: Port: 1 Link DOWN [ 1165.488021][ T2519] 0ªX¹¦D: renamed from 31ªî{X¹¦ [ 1165.498252][ T2519] 0ªX¹¦D: entered allmulticast mode [ 1165.505400][ T2519] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1165.571104][ T2524] C speed is unknown, defaulting to 1000 [ 1165.578372][ T2524] lo speed is unknown, defaulting to 1000 [ 1165.636497][ T2527] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 1165.661070][ T1895] Process accounting resumed [ 1165.731862][ T2527] C speed is unknown, defaulting to 1000 [ 1166.025603][ T2527] lo speed is unknown, defaulting to 1000 [ 1166.627383][ T2554] __nla_validate_parse: 3 callbacks suppressed [ 1166.627399][ T2554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9689'. [ 1166.666505][ T2554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9689'. [ 1167.269616][ T2578] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9700'. [ 1167.330954][ T2580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9701'. [ 1167.350453][ T2580] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1168.133727][ T2600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9708'. [ 1168.143013][ T2600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9708'. [ 1168.191843][ T2603] all: renamed from lo (while UP) [ 1168.204274][ T2603] netlink: 'syz.1.9710': attribute type 13 has an invalid length. [ 1168.212709][ T2603] netlink: 'syz.1.9710': attribute type 17 has an invalid length. [ 1168.228881][ T2603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1168.873141][ T2631] C speed is unknown, defaulting to 1000 [ 1168.880529][ T2631] lo speed is unknown, defaulting to 1000 [ 1168.892098][ T2635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9723'. [ 1169.364403][ T2656] C speed is unknown, defaulting to 1000 [ 1169.371904][ T2656] lo speed is unknown, defaulting to 1000 [ 1169.793659][ T1895] Process accounting resumed [ 1169.853680][ T2674] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1170.101207][ T29] kauditd_printk_skb: 1996 callbacks suppressed [ 1170.101246][ T29] audit: type=1326 audit(2465.019:89611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.4.9736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1170.132234][ T29] audit: type=1326 audit(2465.050:89612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.4.9736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1170.167017][ T29] audit: type=1400 audit(2465.071:89613): avc: denied { prog_load } for pid=2677 comm="syz.1.9737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1170.194071][ T29] audit: type=1400 audit(2465.103:89614): avc: denied { prog_load } for pid=2677 comm="syz.1.9737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1170.225578][ T29] audit: type=1326 audit(2465.144:89615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.4.9736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1170.249277][ T29] audit: type=1326 audit(2465.144:89616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.4.9736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1170.273153][ T29] audit: type=1326 audit(2465.144:89617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.4.9736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1170.330933][ T29] audit: type=1400 audit(2465.249:89618): avc: denied { create } for pid=2682 comm="syz.3.9738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1170.352342][ T29] audit: type=1400 audit(2465.281:89619): avc: denied { prog_load } for pid=2682 comm="syz.3.9738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1170.374957][ T29] audit: type=1400 audit(2465.302:89620): avc: denied { execmem } for pid=2682 comm="syz.3.9738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1170.473780][ T2687] C speed is unknown, defaulting to 1000 [ 1170.483047][ T2687] lo speed is unknown, defaulting to 1000 [ 1170.491003][ T2689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9739'. [ 1170.784983][ T2696] netlink: 'syz.6.9751': attribute type 10 has an invalid length. [ 1170.793479][ T2696] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9751'. [ 1171.895404][ T2730] netlink: 'syz.4.9752': attribute type 21 has an invalid length. [ 1171.903500][ T2730] __nla_validate_parse: 1 callbacks suppressed [ 1171.903516][ T2730] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9752'. [ 1171.922675][ T2732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1171.932840][ T2732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1172.073290][T17761] Process accounting resumed [ 1172.297700][ T2751] netlink: 'syz.1.9760': attribute type 4 has an invalid length. [ 1172.306217][ T2751] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9760'. [ 1172.948658][ T2766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9765'. [ 1172.970384][ T2766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9765'. [ 1173.032720][ T2771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9768'. [ 1173.120196][ T2774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9769'. [ 1173.870779][ T2783] netlink: 'syz.6.9773': attribute type 10 has an invalid length. [ 1174.289427][ T2794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9778'. [ 1174.310249][ T2794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9778'. [ 1174.596643][ T2810] C speed is unknown, defaulting to 1000 [ 1174.603967][ T2810] lo speed is unknown, defaulting to 1000 [ 1174.616461][ T2814] netlink: 'syz.3.9786': attribute type 6 has an invalid length. [ 1175.026367][ T2828] sctp: [Deprecated]: syz.2.9792 (pid 2828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1175.026367][ T2828] Use struct sctp_sack_info instead [ 1175.117749][ T29] kauditd_printk_skb: 878 callbacks suppressed [ 1175.117762][ T29] audit: type=1400 audit(2470.022:90499): avc: denied { prog_load } for pid=2831 comm="syz.2.9794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1175.144486][ T29] audit: type=1400 audit(2470.022:90500): avc: denied { prog_load } for pid=2831 comm="syz.2.9794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1175.174588][ T29] audit: type=1400 audit(2470.069:90501): avc: denied { prog_load } for pid=2831 comm="syz.2.9794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1175.195785][ T29] audit: type=1400 audit(2470.098:90502): avc: denied { create } for pid=2831 comm="syz.2.9794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1175.217547][ T29] audit: type=1400 audit(2470.098:90503): avc: denied { prog_load } for pid=2835 comm="syz.3.9795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1175.236676][ T29] audit: type=1400 audit(2470.098:90504): avc: denied { execmem } for pid=2835 comm="syz.3.9795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1175.282974][ T29] audit: type=1400 audit(2470.174:90505): avc: denied { map_create } for pid=2835 comm="syz.3.9795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1175.302648][ T29] audit: type=1400 audit(2470.174:90506): avc: denied { prog_load } for pid=2835 comm="syz.3.9795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1175.321578][ T29] audit: type=1400 audit(2470.174:90507): avc: denied { create } for pid=2835 comm="syz.3.9795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 1175.341596][ T29] audit: type=1400 audit(2470.203:90508): avc: denied { create } for pid=2831 comm="syz.2.9794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1175.533490][ T2844] C speed is unknown, defaulting to 1000 [ 1175.539786][ T2844] lo speed is unknown, defaulting to 1000 [ 1176.038658][ T2862] C speed is unknown, defaulting to 1000 [ 1176.045719][ T2862] lo speed is unknown, defaulting to 1000 [ 1176.182000][ T2869] netlink: 'syz.2.9807': attribute type 8 has an invalid length. [ 1176.778164][ T2883] netlink: 'syz.4.9811': attribute type 5 has an invalid length. [ 1176.880723][ T2882] netlink: 'syz.3.9813': attribute type 21 has an invalid length. [ 1177.082644][ T2900] __nla_validate_parse: 11 callbacks suppressed [ 1177.082702][ T2900] netlink: 136 bytes leftover after parsing attributes in process `syz.6.9820'. [ 1177.290382][ T2916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9823'. [ 1177.483907][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9829'. [ 1177.498004][ T2923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9829'. [ 1178.238983][ T2949] netlink: 5 bytes leftover after parsing attributes in process `syz.6.9838'. [ 1179.676394][T17761] Process accounting resumed [ 1180.584485][ T29] kauditd_printk_skb: 1427 callbacks suppressed [ 1180.584500][ T29] audit: type=1400 audit(2475.161:91936): avc: denied { read write } for pid=29128 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1180.645814][ T29] audit: type=1400 audit(2475.226:91937): avc: denied { prog_load } for pid=3000 comm="syz.6.9854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.666912][ T29] audit: type=1400 audit(2475.226:91938): avc: denied { prog_load } for pid=3000 comm="syz.6.9854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.688437][ T29] audit: type=1400 audit(2475.244:91939): avc: denied { create } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 1180.708614][ T29] audit: type=1400 audit(2475.244:91940): avc: denied { prog_load } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.729895][ T29] audit: type=1400 audit(2475.244:91941): avc: denied { prog_load } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.748948][ T29] audit: type=1400 audit(2475.244:91942): avc: denied { prog_load } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.768100][ T29] audit: type=1400 audit(2475.244:91943): avc: denied { prog_load } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.787894][ T29] audit: type=1400 audit(2475.244:91944): avc: denied { map_create } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1180.807140][ T29] audit: type=1400 audit(2475.244:91945): avc: denied { create } for pid=3002 comm="syz.3.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 1180.980134][ T3015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1180.989822][ T3015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1181.109015][ T3027] bridge0: entered allmulticast mode [ 1181.599011][ T3046] netlink: 'syz.4.9871': attribute type 4 has an invalid length. [ 1181.848649][ T3051] C speed is unknown, defaulting to 1000 [ 1181.855008][ T3051] lo speed is unknown, defaulting to 1000 [ 1182.402061][ T3068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9880'. [ 1182.412084][ T3068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9880'. [ 1182.717150][ T3087] C speed is unknown, defaulting to 1000 [ 1182.742901][ T3087] lo speed is unknown, defaulting to 1000 [ 1182.743227][ T3089] C speed is unknown, defaulting to 1000 [ 1182.756282][ T3089] lo speed is unknown, defaulting to 1000 [ 1183.863600][ T3103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1183.985599][ T3108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9892'. [ 1184.022352][ T3108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9892'. [ 1184.067590][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1184.513079][ T3128] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9899'. [ 1184.523197][ T3128] 0ªX¹¦D: renamed from 31ªî{X¹¦ (while UP) [ 1184.530274][ T3128] 0ªX¹¦D: entered allmulticast mode [ 1184.536492][ T3128] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1185.436399][ T3148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9905'. [ 1185.478435][ T3146] C speed is unknown, defaulting to 1000 [ 1185.492479][ T3146] lo speed is unknown, defaulting to 1000 [ 1185.668335][ T3155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9910'. [ 1185.682952][ T3155] 0ªX¹¦D: left allmulticast mode [ 1185.693720][ T3157] netlink: 'syz.4.9908': attribute type 13 has an invalid length. [ 1185.740015][ T3160] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9911'. [ 1185.750435][ T3160] 0ªX¹¦D: entered promiscuous mode [ 1185.758706][ T3160] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9911'. [ 1185.768796][ T3160] 1ªX¹¦D: renamed from 30ªX¹¦D [ 1185.775510][ T3160] 1ªX¹¦D: left promiscuous mode [ 1185.780666][ T3160] 1ªX¹¦D: entered allmulticast mode [ 1185.787042][ T3160] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1185.804020][ T3162] netlink: 'syz.4.9912': attribute type 30 has an invalid length. [ 1186.029886][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 1186.029901][ T29] audit: type=1400 audit(2480.216:93024): avc: denied { map_create } for pid=3164 comm="syz.4.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1186.059488][ T29] audit: type=1400 audit(2480.244:93025): avc: denied { open } for pid=3164 comm="syz.4.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 1186.081177][ T29] audit: type=1400 audit(2480.262:93026): avc: denied { prog_load } for pid=3164 comm="syz.4.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1186.101776][ T29] audit: type=1400 audit(2480.281:93027): avc: denied { prog_load } for pid=3164 comm="syz.4.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1186.123709][ T29] audit: type=1326 audit(2480.309:93028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.4.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1186.147530][ T29] audit: type=1326 audit(2480.309:93029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.4.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1186.172303][ T29] audit: type=1326 audit(2480.346:93030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.4.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1186.196796][ T29] audit: type=1326 audit(2480.373:93031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.4.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1186.220661][ T29] audit: type=1326 audit(2480.392:93032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.4.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1186.244060][ T29] audit: type=1326 audit(2480.392:93033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.4.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb4c8ebe9 code=0x7ffc0000 [ 1186.403535][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9917'. [ 1186.461794][ T3173] C speed is unknown, defaulting to 1000 [ 1186.468929][ T3173] lo speed is unknown, defaulting to 1000 [ 1186.898772][ T3190] ================================================================== [ 1186.907129][ T3190] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 1186.916204][ T3190] [ 1186.918624][ T3190] write to 0xffff88810ca29834 of 4 bytes by task 3187 on cpu 1: [ 1186.926596][ T3190] inode_update_timestamps+0x147/0x270 [ 1186.932067][ T3190] file_update_time+0x20e/0x2b0 [ 1186.937016][ T3190] shmem_file_write_iter+0x9c/0xf0 [ 1186.942128][ T3190] iter_file_splice_write+0x663/0xa60 [ 1186.947684][ T3190] direct_splice_actor+0x153/0x2a0 [ 1186.953149][ T3190] splice_direct_to_actor+0x30f/0x680 [ 1186.958626][ T3190] do_splice_direct+0xda/0x150 [ 1186.963485][ T3190] do_sendfile+0x380/0x650 [ 1186.968184][ T3190] __x64_sys_sendfile64+0x105/0x150 [ 1186.973566][ T3190] x64_sys_call+0x2bb0/0x2ff0 [ 1186.978240][ T3190] do_syscall_64+0xd2/0x200 [ 1186.983111][ T3190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.989427][ T3190] [ 1186.991865][ T3190] read to 0xffff88810ca29834 of 4 bytes by task 3190 on cpu 0: [ 1186.999660][ T3190] atime_needs_update+0x2a8/0x3e0 [ 1187.004772][ T3190] touch_atime+0x4a/0x340 [ 1187.009193][ T3190] shmem_file_splice_read+0x5b1/0x600 [ 1187.015180][ T3190] splice_direct_to_actor+0x26f/0x680 [ 1187.020903][ T3190] do_splice_direct+0xda/0x150 [ 1187.025660][ T3190] do_sendfile+0x380/0x650 [ 1187.030250][ T3190] __x64_sys_sendfile64+0x105/0x150 [ 1187.035450][ T3190] x64_sys_call+0x2bb0/0x2ff0 [ 1187.040502][ T3190] do_syscall_64+0xd2/0x200 [ 1187.045310][ T3190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.051306][ T3190] [ 1187.053720][ T3190] value changed: 0x00bb4e78 -> 0x014869a1 [ 1187.059614][ T3190] [ 1187.062021][ T3190] Reported by Kernel Concurrency Sanitizer on: [ 1187.068351][ T3190] CPU: 0 UID: 0 PID: 3190 Comm: syz.1.9921 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1187.080015][ T3190] Tainted: [W]=WARN [ 1187.083822][ T3190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1187.094330][ T3190] ==================================================================