last executing test programs: 2m40.319234036s ago: executing program 1 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x3, 0x2) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000500)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x400088b}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x0, 0xd5) 2m39.799522717s ago: executing program 1 (id=667): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 2m39.458235733s ago: executing program 1 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r1) 2m39.282791747s ago: executing program 1 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m38.362097595s ago: executing program 1 (id=683): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/113, 0x71, 0x0, &(0x7f0000000680)=""/215, 0xd7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 2m38.117258639s ago: executing program 1 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x2, 0xd}, 0x50) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x0) 2m38.078871641s ago: executing program 32 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x2, 0xd}, 0x50) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x0) 47.907115541s ago: executing program 4 (id=1674): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 47.787939903s ago: executing program 4 (id=1677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffdfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xc, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, 0x7800, 0x8, 0x3, 0x8001}}) 47.033131068s ago: executing program 4 (id=1691): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 46.931283239s ago: executing program 4 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f", 0xd, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") listen(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000000)=0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000063000000010"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x2, {0x1}, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 43.887794419s ago: executing program 4 (id=1725): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.674158764s ago: executing program 4 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) memfd_create(0x0, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setresuid(0x0, 0x0, 0xee00) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r3, 0x0, 0x1002}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) symlink(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0009012bbd7000fbdbdf250affa60000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {0x0}, {&(0x7f0000000800)="50563ab467b22c4008f83b896107", 0xe}], 0x4) io_uring_setup(0x398e, &(0x7f00000004c0)={0x0, 0x5503, 0x200a1, 0x3, 0x8c, 0x0, r5}) io_setup(0x739, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000086) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="03f1547955edd38a63dfe2f5a6a2d2728fb2a854034fc41cbc211208df9cd2f32538c9aa3cac399dc046471e5ef295299c75b03936a530a9c8a1b82391e0519192cfc2ed8579085d15e0ea51f71245ce0a4388ca5196b36e6703e97650a6939c3e492458f6e9748d5c706a84636dea5e1ee896fe16107167f4601ab4df347ab377f2fc5000c78503a8203725bf7e130df95661aeda514f8d84d2a35ae6432fa4"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) syz_read_part_table(0x5b2, &(0x7f00000005c0)="$eJzs0z9Lc3cUAOCTtOH2LbUJRXBoB8GMtgU76JBARWLI0ojY4tDOxcEOlg4OoqhDJ1u/QMV/i4t0LAhdihZEIU7iKH4BxcUpxeS2BHEQVOorzzPk5PzOuTm5nHuDt1o2/ky/NZOISKIrTZPOroU7J7nW55v4eqcyWusdGx6fiMjEtxFR+eSDVi3T+asR8Xua19O8lgw01g9HrnYKR30nB8XNbFrfy7anTZ9v5VsH368+/U3zauyW9/NLyzPVldny1Gl17uKLeL9dGNwozX/TU5pMH6y9dvzjuecXG0Pbx836ZRQ6XoLb9+CpB/Mi3N3/Wvfi2eLNV5n46fP+j87+mv81fQauM//3PwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF673TeRX1qeqa7Mlqd+/Dniu81PKx//UvlhdXCjNJ/0lCaz7b697L2Xv/vo+eX9/+YvVOcuio2h7eNm/fK3rs9yB42bgb/Tvv7MYyfxEqX7j9v9n1bnLta6F9/7t9bs2Pm1/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1QZrfWODY9PRGRa+Ui2kLuNzaRdz6R9uTTW0/NaMtBYPxy52ikc9Z0cFDfHkuhtXZeNWIiI6fOtfMSX9418px0+fNb74mH+CQAA//+X4HWC") close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 43.628985515s ago: executing program 33 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) memfd_create(0x0, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setresuid(0x0, 0x0, 0xee00) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r3, 0x0, 0x1002}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) symlink(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0009012bbd7000fbdbdf250affa60000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {0x0}, {&(0x7f0000000800)="50563ab467b22c4008f83b896107", 0xe}], 0x4) io_uring_setup(0x398e, &(0x7f00000004c0)={0x0, 0x5503, 0x200a1, 0x3, 0x8c, 0x0, r5}) io_setup(0x739, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000086) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="03f1547955edd38a63dfe2f5a6a2d2728fb2a854034fc41cbc211208df9cd2f32538c9aa3cac399dc046471e5ef295299c75b03936a530a9c8a1b82391e0519192cfc2ed8579085d15e0ea51f71245ce0a4388ca5196b36e6703e97650a6939c3e492458f6e9748d5c706a84636dea5e1ee896fe16107167f4601ab4df347ab377f2fc5000c78503a8203725bf7e130df95661aeda514f8d84d2a35ae6432fa4"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) syz_read_part_table(0x5b2, &(0x7f00000005c0)="$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") close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 2.845130444s ago: executing program 0 (id=2191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.757914376s ago: executing program 2 (id=2193): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x9, {"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", 0x1000}}, 0x1006) 2.642189908s ago: executing program 2 (id=2194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) memfd_create(0x0, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setresuid(0x0, 0x0, 0xee00) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r3, 0x0, 0x1002}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0009012bbd7000fbdbdf250affa6000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f00000007c0)="f8079ee78c9711b36402abae104bad8870fe4f0df779249a3b835b1dfa8185cf76e13098a89383752048ec"}, {&(0x7f0000000800)="50563ab467b22c4008f83b8961076a"}], 0x10000000000002ff) io_uring_setup(0x398e, &(0x7f00000004c0)={0x0, 0x5503, 0x200a1, 0x3, 0x8c, 0x0, r5}) io_setup(0x739, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000010471bc30b000000001000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000086) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="03f1547955edd38a63dfe2f5a6a2d2728fb2a854034fc41cbc211208df9cd2f32538c9aa3cac399dc046471e5ef295299c75b03936a530a9c8a1b82391e0519192cfc2ed8579085d15e0ea51f71245ce0a4388ca5196b36e6703e97650a6939c3e492458f6e9748d5c706a84636dea5e1ee896fe16107167f4601ab4df347ab377f2fc5000c78503a8203725bf7e130df95661aeda514f8d84d2a35ae6432fa4"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) syz_read_part_table(0x5b2, &(0x7f00000005c0)="$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") close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 2.511774701s ago: executing program 2 (id=2197): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 2.509387931s ago: executing program 0 (id=2199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b4278", 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x40, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendfile(r3, r2, 0x0, 0x7fffeffd) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000280), &(0x7f0000000200)=r11}, 0x20) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f0000000080)={0x3, 0x3, 0xffffffff, 0x9, 0xffffffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.418468873s ago: executing program 2 (id=2200): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 2.343915734s ago: executing program 2 (id=2201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x400088b}, 0x4000) 2.340377274s ago: executing program 2 (id=2203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f", 0xd, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") listen(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000000)=0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000063000000010"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x2, {0x1}, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 2.319333704s ago: executing program 6 (id=2204): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 2.223843356s ago: executing program 6 (id=2205): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0xf00, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.453642272s ago: executing program 0 (id=2215): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES8], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getneigh={0x14, 0x1e, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fbb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) capget(&(0x7f0000000180)={0x19980330}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 1.148286047s ago: executing program 6 (id=2216): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x26}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) (fail_nth: 3) sendfile(r2, r1, 0x0, 0x7ffff000) 791.012844ms ago: executing program 5 (id=2223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.state\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f00000003c0)="800037bbfa9ba1ce", 0x8, 0x4000, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 748.386416ms ago: executing program 5 (id=2224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') kexec_load(0x3e00, 0x0, 0x0, 0x0) 747.497266ms ago: executing program 5 (id=2225): setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0xffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004c}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x41c, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x1df, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x220, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xfd, 0x2, "89098f739fc69807c1f873a1de25259e187cff3d3181e9c3b9d6b32d700a318692cea1cf4da1c92cef0d3743ff8caec3c094c8eb34aece66c13142eed7577ba3afdffa5c8311ab0147382970c10d9c164bd93877fc2f497af99caeea467fab7c43725d6c3215f1f561938db4f1e09aae4bc966268279bbca2256a5248d9b509cbb340e77b36addfc8195acb2a5361599dee7c5c7d999d59613f58e8de5b8113ca8346b8c62962614a96e396779c61a2af413cb8506be57a71c8cc3965c2f6ff62fa1f5d6b7cbec258c6185066f0e83fee2f47ebe68585cccec0b55487dbcc4078045218df304dddc6cccc95efb59d387f08356b4f219d30bba"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x39, 0x2, "2bab11b7674dbb24492c0c16075bc3df31d3d5bd55e9ec2ac6097a04bcb8f4eca33b868b8345b98b15edf2922fb932e3a66391998b"}, @NL80211_FTM_RESP_ATTR_LCI={0xdb, 0x2, "b0a48bb1179897a764fe2f8d72a1a15559e52247ad4e407f54fca288063b4cb5eb2d09e31b3b2df61224d03e920e2e65dd3d379b1595bffd20d88070e2d30122771a400e6ef3b3073817e99b19d2625a7daf9e19c506cffe83a44f085a57551712d4c62bce8a9ffaeb7b60462c75d49ef7e8bc966f8a5c3abe26a2dce86ac75c5c2e61a5a9031c855fcf4f9e7213cf52c18de36ed6497947e8944323efa85ae233698c5fa67b8bbe0c29ba573d7dc77dcc8e96aba846430612d38ab4b251518a9ec5386fc3034d876438b1a1f0e6ad8a439b23a30fac41"}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r3 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x8, 0x6600) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044881}, 0x20008811) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000780)={0x0, 0x7, 0x0, 0xfffffffffffffc01}, &(0x7f00000007c0)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000800)={0x2a, 0x8009, 0x9, 0x5, r5}, 0x10) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000840)={'\x00', 0x3, 0x2, 0x9}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'gretap0\x00'}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = fsopen(&(0x7f0000000980)='smb3\x00', 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000009c0)=0x4) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x400, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r7) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000885}, 0xc000) sendmsg$rds(r3, &(0x7f0000001500)={&(0x7f0000000bc0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/234, 0xea}], 0x2, &(0x7f0000001440)=[@rdma_args={0x48, 0x114, 0x1, {{0x9da, 0x45}, {&(0x7f0000000dc0)=""/55, 0x37}, &(0x7f0000001340)=[{&(0x7f0000000e00)=""/240, 0xf0}, {&(0x7f0000000f00)=""/230, 0xe6}, {&(0x7f0000001000)=""/65, 0x41}, {&(0x7f0000001080)=""/246, 0xf6}, {&(0x7f0000001180)=""/72, 0x48}, {&(0x7f0000001200)=""/38, 0x26}, {&(0x7f0000001240)=""/13, 0xd}, {&(0x7f0000001280)=""/168, 0xa8}], 0x8, 0x0, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @mask_fadd={0x58, 0x114, 0x8, {{0x66, 0x9}, &(0x7f00000013c0)=0x1, &(0x7f0000001400)=0x6, 0xb14, 0xffffffffffffb48b, 0x0, 0x1, 0x62, 0x7}}], 0xb8, 0x800}, 0x0) sendmsg$inet(r0, &(0x7f0000001880)={&(0x7f0000001540)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001580)="e59a111eb0d4fc031770bc719ca3d79eaadac8eedca2139e60d710748431b237e8fcddb8e754b13c50ef41f264f830282e0775134c4265498115ffbcd5feecbd506b67e109e683235b6f2848b0b1fc5e8678d739838b5b4d850a2248fa6306f4b8db40fd8b4493480852f0c9520cbe94723f6eb061a25cf2d37a804b41a350d32cddb4f07e38d996bfcc6212db1cd1464d16383a137bb21fdecc1478e521e12f473f48d508144130a62dd9cf1745e278c24bd7227e8b2c460a6c6a7108db361f2d481aa4", 0xc4}, {&(0x7f0000001680)="709dda3e39d936f0461bbc3446c5b01d124329c5bf8439382a021a4b8ed4943f9acc6f5965127bf3f43709478030ddbf29afe70704ecbb47859fd100b663603f657edf2e237b43da7f10989b632404f0ce52cab35f056d317837c148ee008d764a185d85f1b06c6fca54cda1cc199e82a9eb29d198281f8e6acbc2bf3f88472555c82aaf99c3cbe025952cceef0b41ee004693919397c81a2f2c322e440f936ae6c4e91bea810b511a797e94c2f1d7e2430fae661a1d35d670e5ba94eaaa8c4a27f6fb6f6e50e8a53b20bbf90c3e68f16a78a80d05bda161200e560470caf6c565d12a32", 0xe4}, {&(0x7f0000001780)="a29998f9c532bf9c490aabcded6e67fa3505db3b861f3ad16e647b40ecb961d1141c", 0x22}], 0x3, &(0x7f0000001800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14}}], 0x68}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x160, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEYS={0x10c, 0x51, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, 'g{'}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "124e5e0477"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3df5b7456d3ca6f5a7879d02f2"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xe, 0x4, "434a6ff3722cb6f0175a"}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "dffc8c2e5db2a441fad4d00814"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "10f8799e29"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "8ff583cf2e8db78a44fd2555fdf603"}, @NL80211_KEY_SEQ={0x9, 0x4, "ae79308566"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xa}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xf42}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffaa}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xf7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x4001}, 0x2000884) openat$random(0xffffffffffffff9c, &(0x7f0000001b00), 0x101102, 0x0) close_range(r3, r9, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000001b40)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, r10, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10008084) 707.428046ms ago: executing program 5 (id=2227): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1}) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"]) 656.914977ms ago: executing program 3 (id=2229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0xfffffffe, 0x6d, 0x8000000, 0x5, 0xb, "fa7d31afbd51c19fb490ab5c38978b9f40efc4", 0x4, 0xb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r5, 0x0, 0xfffffeea) 616.181188ms ago: executing program 3 (id=2230): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) 612.740848ms ago: executing program 5 (id=2231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) memfd_create(0x0, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setresuid(0x0, 0x0, 0xee00) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r3, 0x0, 0x1002}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0009012bbd7000fbdbdf250affa6000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f00000007c0)="f8079ee78c9711b36402abae104bad8870fe4f0df779249a3b835b1dfa8185cf76e13098a89383752048ec"}, {&(0x7f0000000800)="50563ab467b22c4008f83b8961076a"}], 0x10000000000002ff) io_uring_setup(0x398e, &(0x7f00000004c0)={0x0, 0x5503, 0x200a1, 0x3, 0x8c, 0x0, r5}) io_setup(0x739, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000086) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) syz_read_part_table(0x5b2, &(0x7f00000005c0)="$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") close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 612.182088ms ago: executing program 0 (id=2232): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 551.701919ms ago: executing program 0 (id=2233): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000400)='GPL\x00', 0x0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r4, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x0) socket$inet(0x2, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) writev(r6, &(0x7f0000000740)=[{&(0x7f0000000600)="b3", 0x1}], 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r10, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0xd3a, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f00000004c0)={0x80}) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) 551.473749ms ago: executing program 3 (id=2234): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1fffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb851}, 0x1c) 541.518799ms ago: executing program 3 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) (fail_nth: 3) 539.129699ms ago: executing program 5 (id=2236): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) (fail_nth: 3) 471.792201ms ago: executing program 6 (id=2237): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 471.249301ms ago: executing program 0 (id=2238): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 471.018821ms ago: executing program 3 (id=2239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 185.031076ms ago: executing program 6 (id=2240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xfffd}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8d4}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}, {0x8, 0xb, 0x664}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0xfffb}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x100}, {0x5}, {0x6, 0x11, 0x9}, {0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20040844}, 0x80d0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x324, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0xe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xf5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x10000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x59}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x206}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd9e}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x633d}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0xa}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x84}, {0x5}, {0x6, 0x11, 0x9e}, {0x8, 0xb, 0x957b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xf0}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xd}, {0x8, 0xb, 0x9}}]}, 0x324}, 0x1, 0x0, 0x0, 0x840}, 0x40) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0xc014) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x7}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x34}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7387}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4008004) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000dc0)={&(0x7f00000009c0), 0xc, &(0x7f0000000d80)={&(0x7f0000000a00)={0x330, 0x0, 0x611, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x18b, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0x40}}, @ht={0x2d, 0x1a, {0x490, 0x0, 0x0, 0x0, {0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x300, 0x7, 0xa1}}, @challenge={0x10, 0x1, 0x78}, @measure_req={0x26, 0x12, {0x80, 0x9, 0x5, "e67c66b2bcae1972bd713d95bc7614"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0x135, {0x5, 0x13, [{{}, @broadcast, 0xb, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x3a}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_a, 0x8001, @value, 0x1e}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x1d}, {{}, @device_a, 0x1c000, @void, 0x2c}, {{}, @device_b, 0x9, @void, 0x4}, {{}, @device_a, 0x419, @void, 0x27}, {{}, @broadcast, 0x7d540000, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x2d}, {{}, @device_b, 0x5, @void, 0x2e}, {{}, @device_a, 0x88, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0xfff, @value, 0x3f}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x3c}, {{}, @broadcast, 0xa4b9, @void, 0x7}, {{0x0, 0x1}, @device_a, 0x7ff, @value=@device_b, 0x30}, {{}, @device_b, 0x6, @void, 0x20}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x25}, {{0x0, 0x1}, @device_b, 0x6d, @value, 0x41}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0x95, 0x3, 0x0, 0x2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x59, 0x7f, [@random_vendor={0xdd, 0x1d, "a0ad7bb62aa475f49fefd9baedcfbf6ead9f1cd651b0260ae0f5fe077b"}, @mic={0x8c, 0x18, {0x372, "bcc9439f526e", @long="bd917b9b5f0162b7cc13f309951f82f5"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x81, 0xb3, 0xff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x52, 0x2, 0x5}}, @chsw_timing={0x68, 0x4, {0x0, 0x6}}, @peer_mgmt={0x75, 0x8, {0x0, 0xd14, @val=0x2, @val=0xb, @void}}]}, @NL80211_ATTR_PROBE_RESP={0xe1, 0x91, "9b6ab1f4b5e2de1ad643161c247c7fe8186af33b30843948cb120805e3f83685bc9560bc51cedf47e36fe23f7659b4a1beeb07da931adc7abadd804630c07f64ed63970610c244b7e0c91bfc09a6a263eff334d79800a1f93d9f853719aac7a7e3f58fb66d0e8fd122d4c66069d80b29257c7fc20bd72ae063dce804cdc275e972926c3898f79957afc869a00d646d8610881b01b12749673e2c7fe96b8b6d30b86450edaf83e8c7fd71df19da8b5b93acc784ac017b71e2a13ed32b66c71d0b96714b97b2beb52af6e83cce82540de3675e7c28d709d4a19fca39213d"}, @NL80211_ATTR_IE={0x4f, 0x2a, [@dsss={0x3, 0x1, 0xa5}, @preq={0x82, 0x3b, {{}, 0x4, 0x10, 0x3, @broadcast, 0xa3d, @void, 0x6, 0xae7, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x4fa3}, {{0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffffe}]}}, @challenge={0x10, 0x1, 0x1e}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x8000}, 0x18000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e00), 0x114040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000e40)=0x1, 0x4) preadv(r5, &(0x7f0000003040)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/200, 0xc8}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/188, 0xbc}], 0x4, 0xffff, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000030c0), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000000) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x70, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe00}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x5080) sendmsg$inet(r0, &(0x7f0000003600)={&(0x7f0000003300)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003340)="271a", 0x2}, {&(0x7f0000003380)="b5a9b107fa4233a43b39b92ed02a094161b9aa7b1a893992d9c1f78c8a301442163cbc800f7a7ec80a1c68c3ac30", 0x2e}, {&(0x7f00000033c0)="dd1536323fd6de4698c46a38cd80ca5163f8b083e5ddfadde486f742f78e81a8fc60820d5e1b32e516f522453af26a76944f9de426594b9a1ecd1fdb2a8c5441a8f2784f3558b9c2a807ad0edb498cb08db06acbe696a1188d31581f342b5d1a44e3528cb36e27111bafdf77b3d4dfec98a5158605e16da765bd9e1494b5b7aac7ac0e44e30003ef8ec9aaf31de77ae1ea9595ea5b629c78f3d1b8ed667dcec27985b41f34a7c752108010e84a7514141cd484a26456bdc6d8b2c188c4bdff1fe21e29c7b1867b4440a0f80a8157451db436507838064a545845b0d1182d56fb7edfbf6455f8f04125d5fe69761f81965cc1", 0xf2}, {&(0x7f00000034c0)="d43f8f1a1ef145d75de2f8fa55c453d605d8c8f1bd235fcafb02c6ad1d0384839843fd0655a7008f7955dab99301c3e939dd279d23ae93c47ec2414672f576463a2ce2f944aa09e35202456049279cb4616b3b61c4d0b532fbe23bebfb580a0cc8e93832a43cde0032345d09a0a95b333f9ab677fef7e6d66ff6ebd19e15a05e06ce35bd2fabee", 0x87}], 0x4, &(0x7f00000035c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, 0xfffffffffffffffd, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003680), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x48, r9, 0x600, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) lremovexattr(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)=@random={'system.', '}.*.^\\^-/{\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003840)={r5, r5, 0x31, 0x0, @val=@perf_event={0x6}}, 0x18) perf_event_open(&(0x7f0000003880)={0x1, 0x80, 0x4, 0x2, 0x8, 0x9f, 0x0, 0x0, 0x200, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x81, 0x189f}, 0x100a, 0x6, 0x3, 0x8, 0x7, 0x7fff, 0x1, 0x0, 0xc, 0x0, 0x56c}, 0xffffffffffffffff, 0x4, r5, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000003a80)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003940)={0xdc, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40088}, 0xc050) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000003ac0)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x58, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004808}, 0x40000) 160.403817ms ago: executing program 6 (id=2241): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) socket$packet(0x11, 0xa, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(0x0, 0x0, 0x0, 0x5, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) accept$unix(r0, 0x0, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}, {&(0x7f00000001c0)="e9632b4b8d1808b96cfe4790030b3f0d13e5dfcaeac9d901bdbb33651f1ca33f30c467b37ac6ba29be71e41ae2838922736ee3102a5429c0ed30fc037134de3fed8dd791c0630d4b11f7bb1ea5b8193f594c11aec9f1f8e9a62c8b326e03127cae9daec6f6308681d58c6a2309f943bad2c662eabc9bc2199c1f2d2c4d1004e3919da9abf88f9da202e1b9cf", 0x8c}, {&(0x7f0000000440)="644d67dd70cbb6041cf4705844bd8b5f53cfc21579a8b1f9106df2457167abc4a8", 0x21}], 0x3}}], 0x1, 0x20000010) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=2242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050003"], 0x48}}, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)) ftruncate(r1, 0x81fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sched_getaffinity(r2, 0x8, &(0x7f0000000b80)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000420001002abd50980117dbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00'}, 0x18) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @scatter={0x8, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f0000000980)=""/236, 0xec}, {&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/238, 0xee}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000640)=""/28, 0x1c}]}, &(0x7f0000000380)="259375582919", 0x0, 0x1, 0x14, 0x0, 0x0}) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) socket(0x10, 0x80803, 0x0) kernel console output (not intermixed with test programs): 509] total_inactive_file 0 [ 182.202935][ T8509] total_active_file 0 [ 182.206938][ T8509] total_unevictable 0 [ 182.210937][ T8509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1493,pid=8508,uid=0 [ 182.225567][ T8509] Memory cgroup out of memory: Killed process 8508 (syz.0.1493) total-vm:95808kB, anon-rss:1072kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 182.719914][ T8528] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.870094][ T29] audit: type=1400 audit(1758493740.330:2916): avc: denied { mount } for pid=8531 comm="syz.0.1500" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 183.057937][ T8540] loop0: detected capacity change from 0 to 2048 [ 183.083407][ T8540] loop0: p1 p3 p4 [ 183.096336][ T8540] loop0: p4 size 589824 extends beyond EOD, truncated [ 183.177653][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 183.190632][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 183.208852][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 183.444676][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1510'. [ 183.619734][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1510'. [ 183.640205][ T8562] loop5: detected capacity change from 0 to 2048 [ 183.654287][ T8562] EXT4-fs: Ignoring removed bh option [ 183.694248][ T8562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.717204][ T8562] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #12: comm syz.5.1510: corrupted in-inode xattr: e_name out of bounds [ 183.821534][ T8576] loop4: detected capacity change from 0 to 2048 [ 183.867782][ T8576] loop4: p1 p3 p4 [ 183.874865][ T8576] loop4: p4 size 589824 extends beyond EOD, truncated [ 183.885844][ T8583] netlink: 'syz.2.1518': attribute type 30 has an invalid length. [ 183.898433][ T8567] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 183.924693][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 183.924726][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 183.935533][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 183.948008][ T8583] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.968858][ T8583] smc: net device bond0 erased user defined pnetid SYZ0 [ 183.975715][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 183.987297][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 183.998379][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 184.101572][ T8590] loop2: detected capacity change from 0 to 2048 [ 184.147669][ T3296] loop2: p1 p3 p4 [ 184.157863][ T3296] loop2: p4 size 589824 extends beyond EOD, truncated [ 184.172260][ T8590] loop2: p1 p3 p4 [ 184.178911][ T8599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.202120][ T8590] loop2: p4 size 589824 extends beyond EOD, truncated [ 184.311363][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 184.347673][ T8612] netlink: 'syz.0.1531': attribute type 30 has an invalid length. [ 184.355756][ T8611] loop2: detected capacity change from 0 to 2048 [ 184.377141][ T8612] smc: net device bond0 applied user defined pnetid SYZ0 [ 184.386873][ T8612] smc: net device bond0 erased user defined pnetid SYZ0 [ 184.397863][ T3296] loop2: p1 p3 p4 [ 184.403002][ T3296] loop2: p4 size 589824 extends beyond EOD, truncated [ 184.413385][ T8611] loop2: p1 p3 p4 [ 184.418644][ T8611] loop2: p4 size 589824 extends beyond EOD, truncated [ 184.536653][ T8627] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.573607][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 184.583256][ T29] audit: type=1404 audit(1758493742.040:2917): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 184.599073][ T29] audit: type=1400 audit(1758493742.040:2918): avc: denied { create } for pid=8629 comm="syz.2.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 184.628726][ T29] audit: type=1400 audit(1758493742.060:2919): avc: denied { prog_load } for pid=8629 comm="syz.2.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 184.647910][ T29] audit: type=1400 audit(1758493742.060:2920): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.695186][ T8640] loop4: detected capacity change from 0 to 2048 [ 184.739620][ T8641] loop0: detected capacity change from 0 to 2048 [ 184.757178][ T3271] loop4: p1 p3 p4 [ 184.764598][ T3271] loop4: p4 size 589824 extends beyond EOD, truncated [ 184.773780][ T8641] EXT4-fs: Ignoring removed bh option [ 184.791158][ T8640] loop4: p1 p3 p4 [ 184.808440][ T8640] loop4: p4 size 589824 extends beyond EOD, truncated [ 184.817449][ T8641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.848357][ T8641] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #12: comm syz.0.1538: corrupted in-inode xattr: e_name out of bounds [ 185.042468][ T8648] netlink: 'syz.4.1544': attribute type 30 has an invalid length. [ 185.081887][ T8648] smc: net device bond0 applied user defined pnetid SYZ0 [ 185.101917][ T8648] smc: net device bond0 erased user defined pnetid SYZ0 [ 185.190817][ T8650] loop3: detected capacity change from 0 to 512 [ 185.203763][ T8650] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1545: error while reading EA inode 32 err=-116 [ 185.218694][ T8650] EXT4-fs (loop3): Remounting filesystem read-only [ 185.225258][ T8650] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 185.261506][ T8650] EXT4-fs (loop3): 1 orphan inode deleted [ 185.268873][ T8650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.283837][ T8650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.285272][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 185.299211][ T8663] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.345921][ T8650] netlink: 'syz.3.1545': attribute type 4 has an invalid length. [ 185.392419][ T8661] loop4: detected capacity change from 0 to 2048 [ 185.447726][ T8661] loop4: p1 p3 p4 [ 185.452357][ T8661] loop4: p4 size 589824 extends beyond EOD, truncated [ 186.085621][ T8683] netlink: 'syz.4.1557': attribute type 30 has an invalid length. [ 186.103208][ T8683] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.110978][ T8683] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.170164][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 186.179636][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 186.179651][ T29] audit: type=1404 audit(1758493743.640:2965): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 186.204808][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 186.216167][ T29] audit: type=1404 audit(1758493743.660:2966): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 186.231320][ T29] audit: type=1400 audit(1758493743.660:2967): avc: denied { allowed } for pid=8687 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.250733][ T29] audit: type=1400 audit(1758493743.670:2968): avc: denied { map_create } for pid=8687 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 186.269900][ T29] audit: type=1400 audit(1758493743.670:2969): avc: denied { write } for pid=8687 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.301226][ T8688] loop4: detected capacity change from 0 to 2048 [ 186.307815][ T29] audit: type=1400 audit(1758493743.760:2970): avc: denied { read write } for pid=8687 comm="syz.4.1559" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.332083][ T29] audit: type=1400 audit(1758493743.760:2971): avc: denied { open } for pid=8687 comm="syz.4.1559" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.356050][ T29] audit: type=1400 audit(1758493743.760:2972): avc: denied { ioctl } for pid=8687 comm="syz.4.1559" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.390612][ T29] audit: type=1400 audit(1758493743.790:2973): avc: denied { bpf } for pid=8679 comm="syz.3.1556" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.411249][ T29] audit: type=1400 audit(1758493743.790:2974): avc: denied { prog_run } for pid=8679 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 186.434563][ T3296] loop4: p1 p3 p4 [ 186.440887][ T3296] loop4: p4 size 589824 extends beyond EOD, truncated [ 186.458760][ T8688] loop4: p1 p3 p4 [ 186.464615][ T8688] loop4: p4 size 589824 extends beyond EOD, truncated [ 186.465018][ T5588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.501835][ T8693] loop3: detected capacity change from 0 to 512 [ 186.566941][ T8697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.597293][ T8693] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1560: error while reading EA inode 32 err=-116 [ 186.630343][ T8693] EXT4-fs (loop3): Remounting filesystem read-only [ 186.636896][ T8693] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 186.647184][ T8693] EXT4-fs (loop3): 1 orphan inode deleted [ 186.653837][ T8693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.666779][ T8693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.694676][ T8692] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 186.920173][ T8713] loop3: detected capacity change from 0 to 512 [ 186.940180][ T8713] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1568: error while reading EA inode 32 err=-116 [ 186.953672][ T8713] EXT4-fs (loop3): Remounting filesystem read-only [ 186.960267][ T8713] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 186.970541][ T8713] EXT4-fs (loop3): 1 orphan inode deleted [ 186.984287][ T8713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.001020][ T8716] netlink: 'syz.4.1569': attribute type 30 has an invalid length. [ 187.022619][ T8713] netlink: 'syz.3.1568': attribute type 4 has an invalid length. [ 187.044909][ T8716] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.056419][ T8716] smc: net device bond0 erased user defined pnetid SYZ0 [ 187.142401][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 187.173582][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 187.205440][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 187.253914][ T8725] loop3: detected capacity change from 0 to 2048 [ 187.299441][ T8725] loop3: p1 p3 p4 [ 187.306387][ T8725] loop3: p4 size 589824 extends beyond EOD, truncated [ 187.323243][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 187.360442][ T8736] loop4: detected capacity change from 0 to 2048 [ 187.369058][ T8736] EXT4-fs: Ignoring removed bh option [ 187.401350][ T8736] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.1571: corrupted in-inode xattr: e_name out of bounds [ 187.771398][ T8754] netlink: 'syz.5.1582': attribute type 30 has an invalid length. [ 187.826207][ T8754] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.846277][ T8758] loop3: detected capacity change from 0 to 512 [ 187.846792][ T8754] smc: net device bond0 erased user defined pnetid SYZ0 [ 187.897769][ T8758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1583: error while reading EA inode 32 err=-116 [ 187.936447][ T8758] EXT4-fs (loop3): Remounting filesystem read-only [ 187.943047][ T8758] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 187.975999][ T8758] EXT4-fs (loop3): 1 orphan inode deleted [ 188.000401][ T8766] loop5: detected capacity change from 0 to 2048 [ 188.029521][ T3296] loop5: p1 p3 p4 [ 188.039439][ T8756] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 188.040239][ T3296] loop5: p4 size 589824 extends beyond EOD, truncated [ 188.068737][ T8766] loop5: p1 p3 p4 [ 188.076109][ T8766] loop5: p4 size 589824 extends beyond EOD, truncated [ 188.454295][ T8780] smc: net device bond0 applied user defined pnetid SYZ0 [ 188.475172][ T8780] smc: net device bond0 erased user defined pnetid SYZ0 [ 188.554052][ T8787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.663597][ T8796] __nla_validate_parse: 2 callbacks suppressed [ 188.663632][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 188.686695][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 188.697782][ T3311] CPU: 0 UID: 0 PID: 3311 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.697808][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.697820][ T3311] Call Trace: [ 188.697827][ T3311] [ 188.697834][ T3311] __dump_stack+0x1d/0x30 [ 188.697864][ T3311] dump_stack_lvl+0xe8/0x140 [ 188.697886][ T3311] dump_stack+0x15/0x1b [ 188.697978][ T3311] dump_header+0x81/0x220 [ 188.698019][ T3311] oom_kill_process+0x342/0x400 [ 188.698097][ T3311] out_of_memory+0x979/0xb80 [ 188.698133][ T3311] try_charge_memcg+0x5e6/0x9e0 [ 188.698162][ T3311] charge_memcg+0x51/0xc0 [ 188.698180][ T3311] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 188.698237][ T3311] __read_swap_cache_async+0x1df/0x350 [ 188.698357][ T3311] swap_cluster_readahead+0x376/0x3e0 [ 188.698519][ T3311] swapin_readahead+0xde/0x6f0 [ 188.698592][ T3311] ? __filemap_get_folio+0x4f7/0x6b0 [ 188.698672][ T3311] ? __rcu_read_unlock+0x34/0x70 [ 188.698693][ T3311] ? swap_cache_get_folio+0x77/0x200 [ 188.698724][ T3311] do_swap_page+0x301/0x2430 [ 188.698774][ T3311] ? css_rstat_updated+0xb7/0x240 [ 188.698815][ T3311] ? __pfx_default_wake_function+0x10/0x10 [ 188.698847][ T3311] handle_mm_fault+0x9a5/0x2c20 [ 188.698943][ T3311] do_user_addr_fault+0x636/0x1090 [ 188.698987][ T3311] exc_page_fault+0x62/0xa0 [ 188.699023][ T3311] asm_exc_page_fault+0x26/0x30 [ 188.699176][ T3311] RIP: 0033:0x7f5062fbebd9 [ 188.699196][ T3311] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 e8 b1 32 00 00 90 b8 4d 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 [ 188.699220][ T3311] RSP: 002b:00007ffc213f6b38 EFLAGS: 00010202 [ 188.699238][ T3311] RAX: 0000000000000000 RBX: 0000000000000364 RCX: 00007f5062ff14a3 [ 188.699251][ T3311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.699265][ T3311] RBP: 00007ffc213f6b7c R08: 000000002277df05 R09: 0000000000000000 [ 188.699281][ T3311] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 188.699323][ T3311] R13: 00000000000927c0 R14: 000000000002dd14 R15: 00007ffc213f6bd0 [ 188.699341][ T3311] [ 188.699355][ T3311] memory: usage 307200kB, limit 307200kB, failcnt 1334 [ 188.751595][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 188.752646][ T3311] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 188.867245][ T8644] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 188.872499][ T3311] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 188.880539][ T8644] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.888516][ T3311] Memory cgroup stats for /syz0: [ 188.930370][ T3311] cache 0 [ 188.963722][ T3311] rss 0 [ 188.966488][ T3311] shmem 0 [ 188.969464][ T3311] mapped_file 0 [ 188.972925][ T3311] dirty 0 [ 188.975862][ T3311] writeback 0 [ 188.979178][ T3311] workingset_refault_anon 221 [ 188.983869][ T3311] workingset_refault_file 2027 [ 188.988768][ T3311] swap 192512 [ 188.992057][ T3311] swapcached 0 [ 188.995432][ T3311] pgpgin 117957 [ 188.999009][ T3311] pgpgout 117957 [ 189.002630][ T3311] pgfault 147672 [ 189.006203][ T3311] pgmajfault 142 [ 189.010058][ T3311] inactive_anon 0 [ 189.013772][ T3311] active_anon 0 [ 189.017269][ T3311] inactive_file 0 [ 189.020905][ T3311] active_file 0 [ 189.024367][ T3311] unevictable 0 [ 189.027860][ T3311] hierarchical_memory_limit 314572800 [ 189.033231][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 189.039479][ T3311] total_cache 0 [ 189.043187][ T3311] total_rss 0 [ 189.046614][ T3311] total_shmem 0 [ 189.050129][ T3311] total_mapped_file 0 [ 189.054160][ T3311] total_dirty 0 [ 189.057872][ T3311] total_writeback 0 [ 189.061804][ T3311] total_workingset_refault_anon 221 [ 189.067007][ T3311] total_workingset_refault_file 2027 [ 189.072378][ T3311] total_swap 192512 [ 189.076197][ T3311] total_swapcached 0 [ 189.080175][ T3311] total_pgpgin 117957 [ 189.084154][ T3311] total_pgpgout 117957 [ 189.088276][ T3311] total_pgfault 147674 [ 189.092356][ T3311] total_pgmajfault 142 [ 189.096496][ T3311] total_inactive_anon 0 [ 189.100701][ T3311] total_active_anon 0 [ 189.104700][ T3311] total_inactive_file 0 [ 189.108943][ T3311] total_active_file 0 [ 189.112999][ T3311] total_unevictable 0 [ 189.116993][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1581,pid=8751,uid=0 [ 189.131741][ T3311] Memory cgroup out of memory: Killed process 8751 (syz.0.1581) total-vm:95808kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 189.181518][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'. [ 189.254535][ T8817] loop5: detected capacity change from 0 to 2048 [ 189.297632][ T8817] loop5: p1 p3 p4 [ 189.320690][ T8817] loop5: p4 size 589824 extends beyond EOD, truncated [ 189.422967][ T8823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.436062][ T8816] loop2: detected capacity change from 0 to 512 [ 189.470662][ T8816] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1606: error while reading EA inode 32 err=-116 [ 189.495982][ T8816] EXT4-fs (loop2): Remounting filesystem read-only [ 189.502581][ T8816] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 189.512973][ T8816] EXT4-fs (loop2): 1 orphan inode deleted [ 189.544510][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 189.557242][ T8816] netlink: 'syz.2.1606': attribute type 4 has an invalid length. [ 189.586551][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1611'. [ 189.645632][ T8831] loop3: detected capacity change from 0 to 2048 [ 189.656204][ T8842] smc: net device bond0 applied user defined pnetid SYZ0 [ 189.663956][ T8842] smc: net device bond0 erased user defined pnetid SYZ0 [ 189.707733][ T3296] loop3: p1 p3 p4 [ 189.718511][ T3296] loop3: p4 size 589824 extends beyond EOD, truncated [ 189.729030][ T8831] loop3: p1 p3 p4 [ 189.733624][ T8831] loop3: p4 size 589824 extends beyond EOD, truncated [ 189.840768][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 189.841810][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 189.861999][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 189.872681][ T8846] loop5: detected capacity change from 0 to 2048 [ 189.892684][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 189.894517][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 189.916751][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 189.929523][ T3581] loop5: p1 p3 p4 [ 189.945137][ T3581] loop5: p4 size 589824 extends beyond EOD, truncated [ 189.956641][ T8846] loop5: p1 p3 p4 [ 189.962838][ T8846] loop5: p4 size 589824 extends beyond EOD, truncated [ 190.028470][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 190.039755][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 190.065216][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 190.066599][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 190.104340][ T8858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.152198][ T3308] EXT4-fs unmount: 7 callbacks suppressed [ 190.152274][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.500511][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 190.509704][ T8880] smc: net device bond0 applied user defined pnetid SYZ0 [ 190.649933][ T8876] loop4: detected capacity change from 0 to 2048 [ 190.689479][ T8876] loop4: p1 p3 p4 [ 190.704120][ T8876] loop4: p4 size 589824 extends beyond EOD, truncated [ 190.797294][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 190.969819][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 191.012521][ T8897] loop3: detected capacity change from 0 to 2048 [ 191.030924][ T8897] EXT4-fs: Ignoring removed bh option [ 191.102350][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 191.122389][ T8897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.154310][ T8897] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #12: comm syz.3.1632: corrupted in-inode xattr: e_name out of bounds [ 191.198034][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 191.204305][ T29] audit: type=1400 audit(1758493748.660:3254): avc: denied { write } for pid=8899 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.233564][ T29] audit: type=1400 audit(1758493748.690:3255): avc: denied { ioctl } for pid=8899 comm="syz.2.1635" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.233913][ T8904] loop2: detected capacity change from 0 to 2048 [ 191.298511][ T3296] loop2: p1 p3 p4 [ 191.306759][ T3296] loop2: p4 size 589824 extends beyond EOD, truncated [ 191.331319][ T8904] loop2: p1 p3 p4 [ 191.336477][ T8904] loop2: p4 size 589824 extends beyond EOD, truncated [ 191.431603][ T29] audit: type=1400 audit(1758493748.890:3256): avc: denied { map_read map_write } for pid=8906 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.500385][ T29] audit: type=1400 audit(1758493748.960:3257): avc: denied { prog_run } for pid=8906 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.643389][ T29] audit: type=1400 audit(1758493749.100:3258): avc: denied { create } for pid=8913 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.646616][ T8914] smc: net device bond0 erased user defined pnetid SYZ0 [ 191.664440][ T29] audit: type=1400 audit(1758493749.100:3259): avc: denied { write } for pid=8913 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.691589][ T29] audit: type=1400 audit(1758493749.100:3260): avc: denied { read } for pid=8913 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.712024][ T29] audit: type=1400 audit(1758493749.100:3261): avc: denied { read } for pid=8913 comm="syz.0.1639" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.733189][ T29] audit: type=1400 audit(1758493749.100:3262): avc: denied { open } for pid=8913 comm="syz.0.1639" path="net:[4026532493]" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.771507][ T29] audit: type=1400 audit(1758493749.230:3263): avc: denied { open } for pid=8917 comm="syz.0.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.946579][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 192.050510][ T8932] loop4: detected capacity change from 0 to 2048 [ 192.118485][ T8932] loop4: p1 p3 p4 [ 192.125486][ T8932] loop4: p4 size 589824 extends beyond EOD, truncated [ 192.302721][ T8936] loop4: detected capacity change from 0 to 512 [ 192.312177][ T8936] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1647: error while reading EA inode 32 err=-116 [ 192.326415][ T8936] EXT4-fs (loop4): Remounting filesystem read-only [ 192.333077][ T8936] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 192.354013][ T8936] EXT4-fs (loop4): 1 orphan inode deleted [ 192.369567][ T8936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.385152][ T8936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.425117][ T8936] netlink: 'syz.4.1647': attribute type 4 has an invalid length. [ 192.653732][ T8949] smc: net device bond0 applied user defined pnetid SYZ0 [ 192.661247][ T8949] smc: net device bond0 erased user defined pnetid SYZ0 [ 193.277736][ T8983] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.286198][ T8983] smc: net device bond0 erased user defined pnetid SYZ0 [ 193.710458][ T9004] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.895806][ T9017] loop2: detected capacity change from 0 to 512 [ 193.919579][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.926854][ T9017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1679: error while reading EA inode 32 err=-116 [ 193.942712][ T9017] EXT4-fs (loop2): Remounting filesystem read-only [ 193.949298][ T9017] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 193.965902][ T9017] EXT4-fs (loop2): 1 orphan inode deleted [ 193.972532][ T9017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.986921][ T9017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.014066][ T9017] netlink: 'syz.2.1679': attribute type 4 has an invalid length. [ 194.023972][ T9022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.211007][ T9037] smc: net device bond0 applied user defined pnetid SYZ0 [ 194.241188][ T9037] smc: net device bond0 erased user defined pnetid SYZ0 [ 194.675174][ T9054] loop4: detected capacity change from 0 to 2048 [ 194.697767][ T9054] EXT4-fs: Ignoring removed bh option [ 194.721072][ T9054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.746256][ T9054] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.1692: corrupted in-inode xattr: e_name out of bounds [ 194.975220][ T9060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.243485][ T9074] smc: net device bond0 applied user defined pnetid SYZ0 [ 195.251101][ T9074] smc: net device bond0 erased user defined pnetid SYZ0 [ 196.123586][ T9095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.299094][ T9111] smc: net device bond0 applied user defined pnetid SYZ0 [ 196.312247][ T9111] smc: net device bond0 erased user defined pnetid SYZ0 [ 196.578548][ T9122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.670643][ T9125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1718'. [ 196.721813][ T9125] loop3: detected capacity change from 0 to 2048 [ 196.777829][ T9125] loop3: p1 p3 p4 [ 196.783465][ T9125] loop3: p4 size 589824 extends beyond EOD, truncated [ 196.794794][ T2995] loop3: p1 p3 p4 [ 196.799734][ T2995] loop3: p4 size 589824 extends beyond EOD, truncated [ 196.843685][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 196.843704][ T29] audit: type=1400 audit(1758493754.300:3330): avc: denied { nlmsg_write } for pid=9133 comm="syz.0.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.901105][ T9136] loop0: detected capacity change from 0 to 512 [ 196.920303][ T9136] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1720: error while reading EA inode 32 err=-116 [ 197.003957][ T29] audit: type=1326 audit(1758493754.460:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.029129][ T29] audit: type=1326 audit(1758493754.490:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.052591][ T29] audit: type=1326 audit(1758493754.490:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.076053][ T29] audit: type=1326 audit(1758493754.490:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.099509][ T29] audit: type=1326 audit(1758493754.490:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.122925][ T29] audit: type=1326 audit(1758493754.490:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.125009][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 197.146318][ T29] audit: type=1326 audit(1758493754.490:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.157611][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 197.179629][ T29] audit: type=1326 audit(1758493754.490:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d29c7ec29 code=0x7ffc0000 [ 197.200576][ T8829] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.217388][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 197.240837][ T9136] EXT4-fs (loop0): Remounting filesystem read-only [ 197.247481][ T9136] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 197.289554][ T9136] EXT4-fs (loop0): 1 orphan inode deleted [ 197.313384][ T9136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.417353][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 197.439418][ T9136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.461277][ T29] audit: type=1404 audit(1758493754.880:3339): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 197.492545][ T9134] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 197.514322][ T3308] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 197.533690][ T3308] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 197.669958][ T9157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.729442][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.859711][ T9183] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.050871][ T3460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.098823][ T3460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.158569][ T3460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.218651][ T3460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.450655][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.468710][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.478636][ T3460] bond0 (unregistering): Released all slaves [ 198.487785][ T3460] bond1 (unregistering): Released all slaves [ 198.496305][ T3460] bond2 (unregistering): Released all slaves [ 198.504927][ T3460] bond3 (unregistering): Released all slaves [ 198.513774][ T3460] bond4 (unregistering): Released all slaves [ 198.522470][ T3460] bond5 (unregistering): Released all slaves [ 198.533760][ T3460] bond6 (unregistering): Released all slaves [ 198.542831][ T3460] bond7 (unregistering): Released all slaves [ 198.553376][ T3460] bond8 (unregistering): Released all slaves [ 198.562521][ T3460] bond9 (unregistering): Released all slaves [ 198.572995][ T3460] bond10 (unregistering): Released all slaves [ 198.581977][ T3460] bond11 (unregistering): Released all slaves [ 198.591838][ T3460] bond12 (unregistering): Released all slaves [ 198.600754][ T3460] bond13 (unregistering): Released all slaves [ 198.610416][ T3460] bond14 (unregistering): Released all slaves [ 198.685864][ T3460] hsr_slave_0: left promiscuous mode [ 198.691932][ T3460] hsr_slave_1: left promiscuous mode [ 198.697701][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.705145][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.712735][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.720212][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.730389][ T3460] veth1_macvtap: left promiscuous mode [ 198.735889][ T3460] veth0_macvtap: left promiscuous mode [ 198.741609][ T3460] veth1_vlan: left promiscuous mode [ 198.746872][ T3460] veth0_vlan: left promiscuous mode [ 198.844403][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 198.854981][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 201.000193][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 201.848182][ T29] kauditd_printk_skb: 33113 callbacks suppressed [ 201.848198][ T29] audit: type=1400 audit(1758493759.310:36384): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.854998][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.875820][ T29] audit: type=1400 audit(1758493759.310:36385): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.882306][ T3034] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 201.903442][ T29] audit: type=1400 audit(1758493759.310:36386): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.911156][ T3034] audit: backlog limit exceeded [ 201.937233][ T29] audit: type=1400 audit(1758493759.310:36387): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.942509][ T9239] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.958387][ T29] audit: type=1400 audit(1758493759.310:36388): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.958412][ T29] audit: type=1400 audit(1758493759.310:36389): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.980034][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1765'. [ 203.091318][ T9334] loop3: detected capacity change from 0 to 512 [ 203.136557][ T9334] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1765: error while reading EA inode 32 err=-116 [ 203.154441][ T9334] EXT4-fs (loop3): Remounting filesystem read-only [ 203.161068][ T9334] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 203.191638][ T9334] EXT4-fs (loop3): 1 orphan inode deleted [ 203.216419][ T9334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.229007][ T9340] loop0: detected capacity change from 0 to 2048 [ 203.250819][ T9340] EXT4-fs: Ignoring removed bh option [ 203.283525][ T9334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.298676][ T9340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.314093][ T9322] chnl_net:caif_netlink_parms(): no params data found [ 203.323437][ T9340] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #12: comm syz.0.1766: corrupted in-inode xattr: e_name out of bounds [ 203.405344][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.412615][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.414172][ T9321] netlink: 'syz.3.1765': attribute type 4 has an invalid length. [ 203.427627][ T9322] bridge_slave_0: entered allmulticast mode [ 203.434155][ T9322] bridge_slave_0: entered promiscuous mode [ 203.441118][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.448227][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.455472][ T9322] bridge_slave_1: entered allmulticast mode [ 203.462097][ T9322] bridge_slave_1: entered promiscuous mode [ 203.482246][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.493068][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.519621][ T9322] team0: Port device team_slave_0 added [ 203.538058][ T9322] team0: Port device team_slave_1 added [ 203.566806][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.573843][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.599743][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.611827][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.618819][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.644950][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.697790][ T9322] hsr_slave_0: entered promiscuous mode [ 203.703977][ T9322] hsr_slave_1: entered promiscuous mode [ 203.709932][ T9322] debugfs: 'hsr0' already exists in 'hsr' [ 203.715675][ T9322] Cannot create hsr debugfs directory [ 204.070765][ T9322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 204.079559][ T9322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.091157][ T9322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.102101][ T9322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.166946][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.174103][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.181427][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.188532][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.288849][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.297036][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.311592][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.348777][ T9377] smc: net device bond0 applied user defined pnetid SYZ0 [ 204.353808][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.362879][ T9377] smc: net device bond0 erased user defined pnetid SYZ0 [ 204.453916][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.461131][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.527306][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.534569][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.574110][ T9381] loop5: detected capacity change from 0 to 2048 [ 204.618131][ T3296] loop5: p1 p3 p4 [ 204.631790][ T3296] loop5: p4 size 589824 extends beyond EOD, truncated [ 204.639965][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.650138][ T9381] loop5: p1 p3 p4 [ 204.677853][ T9381] loop5: p4 size 589824 extends beyond EOD, truncated [ 204.685469][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 204.754883][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 204.768106][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 204.780395][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 204.780667][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 204.790450][ T9393] loop3: detected capacity change from 0 to 2048 [ 204.811723][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 204.811855][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 204.825486][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 204.868696][ T3296] loop3: p1 p3 p4 [ 204.878452][ T3296] loop3: p4 size 589824 extends beyond EOD, truncated [ 204.895266][ T9406] loop5: detected capacity change from 0 to 2048 [ 204.897375][ T9393] loop3: p1 p3 p4 [ 204.913999][ T9393] loop3: p4 size 589824 extends beyond EOD, truncated [ 204.917412][ T9322] veth0_vlan: entered promiscuous mode [ 204.927740][ T3271] loop5: p1 p3 p4 [ 204.935453][ T3271] loop5: p4 size 589824 extends beyond EOD, truncated [ 204.947611][ T9322] veth1_vlan: entered promiscuous mode [ 204.972103][ T9322] veth0_macvtap: entered promiscuous mode [ 204.978461][ T9406] loop5: p1 p3 p4 [ 204.981271][ T9322] veth1_macvtap: entered promiscuous mode [ 204.983689][ T9406] loop5: p4 size 589824 extends beyond EOD, truncated [ 205.014331][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 205.015112][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 205.027723][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 205.061386][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.069694][ T9412] smc: net device bond0 applied user defined pnetid SYZ0 [ 205.093849][ T9412] smc: net device bond0 erased user defined pnetid SYZ0 [ 205.108294][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.130382][ T3638] udevd[3638]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 205.137793][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 205.168004][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.225367][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.265317][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.278351][ T9425] netlink: 'syz.6.1735': attribute type 30 has an invalid length. [ 205.286733][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.306712][ T9425] smc: net device bond0 applied user defined pnetid SYZ0 [ 205.323114][ T9425] smc: net device bond0 erased user defined pnetid SYZ0 [ 205.389684][ T9414] loop3: detected capacity change from 0 to 2048 [ 205.429325][ T3296] loop3: p1 p3 p4 [ 205.434333][ T3296] loop3: p4 size 589824 extends beyond EOD, truncated [ 205.445827][ T9414] loop3: p1 p3 p4 [ 205.455898][ T9414] loop3: p4 size 589824 extends beyond EOD, truncated [ 205.506217][ T9436] loop6: detected capacity change from 0 to 512 [ 205.525602][ T9436] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1786: error while reading EA inode 32 err=-116 [ 205.541024][ T9436] EXT4-fs (loop6): Remounting filesystem read-only [ 205.547673][ T9436] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 205.557994][ T9436] EXT4-fs (loop6): 1 orphan inode deleted [ 205.569102][ T9436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.591192][ T9436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.672605][ T9436] netlink: 'syz.6.1786': attribute type 4 has an invalid length. [ 206.041640][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.089031][ T9452] smc: net device bond0 applied user defined pnetid SYZ0 [ 206.119909][ T9457] smc: net device bond0 erased user defined pnetid SYZ0 [ 206.257286][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1792'. [ 206.322476][ T9460] loop0: detected capacity change from 0 to 512 [ 206.373028][ T9460] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1792: error while reading EA inode 32 err=-116 [ 206.410744][ T9460] EXT4-fs (loop0): Remounting filesystem read-only [ 206.417381][ T9460] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 206.486983][ T9460] EXT4-fs (loop0): 1 orphan inode deleted [ 206.510785][ T9460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.574233][ T9460] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.628540][ T9460] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 206.821586][ T9487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.862506][ T9490] loop2: detected capacity change from 0 to 512 [ 206.890337][ T9494] smc: net device bond0 applied user defined pnetid SYZ0 [ 206.901885][ T9494] smc: net device bond0 erased user defined pnetid SYZ0 [ 206.924370][ T9490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1800: error while reading EA inode 32 err=-116 [ 206.949524][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 206.949581][ T29] audit: type=1400 audit(1758493764.410:36621): avc: denied { name_bind } for pid=9496 comm="syz.0.1804" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 206.977066][ T29] audit: type=1400 audit(1758493764.410:36622): avc: denied { node_bind } for pid=9496 comm="syz.0.1804" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 207.068322][ T9490] EXT4-fs (loop2): Remounting filesystem read-only [ 207.074909][ T9490] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 207.106693][ T9490] EXT4-fs (loop2): 1 orphan inode deleted [ 207.113902][ T9490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.128039][ T9490] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.158634][ T9483] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 207.204907][ T9507] loop0: detected capacity change from 0 to 2048 [ 207.219267][ T9507] EXT4-fs: Ignoring removed bh option [ 207.271258][ T9507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.293582][ T29] audit: type=1400 audit(1758493764.750:36623): avc: denied { read } for pid=9515 comm="syz.2.1809" path="socket:[34675]" dev="sockfs" ino=34675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.337916][ T29] audit: type=1400 audit(1758493764.800:36624): avc: denied { read write } for pid=9496 comm="syz.0.1804" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.338352][ T9507] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #12: comm syz.0.1804: corrupted in-inode xattr: e_name out of bounds [ 207.362867][ T29] audit: type=1400 audit(1758493764.800:36625): avc: denied { open } for pid=9496 comm="syz.0.1804" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.362921][ T29] audit: type=1400 audit(1758493764.800:36626): avc: denied { ioctl } for pid=9496 comm="syz.0.1804" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.716823][ T29] audit: type=1326 audit(1758493765.170:36627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9499 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f29f9ec29 code=0x7ffc0000 [ 207.757062][ T29] audit: type=1326 audit(1758493765.200:36628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9499 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f29f9ec29 code=0x7ffc0000 [ 207.780713][ T29] audit: type=1326 audit(1758493765.200:36629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9499 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f29f9ec29 code=0x7ffc0000 [ 207.804531][ T29] audit: type=1326 audit(1758493765.200:36630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9499 comm="syz.5.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f29f9ec29 code=0x7ffc0000 [ 208.084081][ T9536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.596870][ T9544] smc: net device bond0 applied user defined pnetid SYZ0 [ 208.630068][ T9544] smc: net device bond0 erased user defined pnetid SYZ0 [ 208.712101][ T9548] smc: net device bond0 applied user defined pnetid SYZ0 [ 208.727530][ T9548] smc: net device bond0 erased user defined pnetid SYZ0 [ 208.751598][ T9550] loop3: detected capacity change from 0 to 512 [ 208.773740][ T9550] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1819: error while reading EA inode 32 err=-116 [ 208.842411][ T9550] EXT4-fs (loop3): Remounting filesystem read-only [ 208.849035][ T9550] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 208.859592][ T9550] EXT4-fs (loop3): 1 orphan inode deleted [ 208.865793][ T9550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.895154][ T9550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.945912][ T9546] netlink: 'syz.3.1819': attribute type 4 has an invalid length. [ 209.541779][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 209.572205][ T9576] loop3: detected capacity change from 0 to 2048 [ 209.608696][ T3296] loop3: p1 p3 p4 [ 209.633826][ T3296] loop3: p4 size 589824 extends beyond EOD, truncated [ 209.650220][ T9576] loop3: p1 p3 p4 [ 209.659929][ T9576] loop3: p4 size 589824 extends beyond EOD, truncated [ 209.708165][ T9583] loop5: detected capacity change from 0 to 512 [ 209.749113][ T9583] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1829: error while reading EA inode 32 err=-116 [ 209.775197][ T9586] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.788894][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 209.790705][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 209.800152][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 209.819500][ T9583] EXT4-fs (loop5): Remounting filesystem read-only [ 209.822331][ T9590] smc: net device bond0 applied user defined pnetid SYZ0 [ 209.826103][ T9583] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 209.840666][ T9590] smc: net device bond0 erased user defined pnetid SYZ0 [ 209.843489][ T9583] EXT4-fs (loop5): 1 orphan inode deleted [ 209.856494][ T9583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.870524][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 209.882246][ T9583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.928253][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 209.958783][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.984993][ T9579] netlink: 'syz.5.1829': attribute type 4 has an invalid length. [ 209.996467][ T9595] loop6: detected capacity change from 0 to 512 [ 210.065333][ T9595] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1834: error while reading EA inode 32 err=-116 [ 210.124092][ T9595] EXT4-fs (loop6): Remounting filesystem read-only [ 210.130788][ T9595] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 210.141466][ T9595] EXT4-fs (loop6): 1 orphan inode deleted [ 210.148464][ T9595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.183193][ T9595] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.313381][ T9592] netlink: 'syz.6.1834': attribute type 4 has an invalid length. [ 210.383517][ T9609] loop6: detected capacity change from 0 to 512 [ 210.401836][ T9609] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.453163][ T9609] EXT4-fs (loop6): 1 truncate cleaned up [ 210.463084][ T9609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.516431][ T9615] loop2: detected capacity change from 0 to 2048 [ 210.556829][ T9615] EXT4-fs: Ignoring removed bh option [ 210.579347][ T9615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.894816][ T9615] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.1837: corrupted in-inode xattr: e_name out of bounds [ 211.356645][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.476335][ T9634] smc: net device bond0 applied user defined pnetid SYZ0 [ 211.490861][ T9634] smc: net device bond0 erased user defined pnetid SYZ0 [ 211.530223][ T9636] loop0: detected capacity change from 0 to 512 [ 211.553684][ T9636] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.578454][ T9636] EXT4-fs (loop0): 1 truncate cleaned up [ 211.584616][ T9636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.876678][ T9640] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.989786][ T9640] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.092237][ T9640] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.191987][ T9640] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.305087][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 212.305105][ T29] audit: type=1400 audit(1758493769.760:36705): avc: denied { search } for pid=9655 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.358027][ T29] audit: type=1400 audit(1758493769.760:36706): avc: denied { search } for pid=9655 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.380881][ T29] audit: type=1400 audit(1758493769.760:36707): avc: denied { search } for pid=9655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.404146][ T29] audit: type=1400 audit(1758493769.760:36708): avc: denied { search } for pid=9655 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.427451][ T29] audit: type=1400 audit(1758493769.760:36709): avc: denied { read open } for pid=9658 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.452994][ T29] audit: type=1400 audit(1758493769.760:36710): avc: denied { getattr } for pid=9658 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.478475][ T29] audit: type=1400 audit(1758493769.770:36711): avc: denied { getattr } for pid=9658 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.504786][ T29] audit: type=1400 audit(1758493769.790:36712): avc: denied { read } for pid=9660 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.526795][ T29] audit: type=1400 audit(1758493769.790:36713): avc: denied { open } for pid=9660 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.563265][ T9675] loop6: detected capacity change from 0 to 512 [ 212.585733][ T29] audit: type=1400 audit(1758493769.890:36714): avc: denied { add_name } for pid=9655 comm="dhcpcd-run-hook" name="resolv.conf.eth6.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.602931][ T9675] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1852: error while reading EA inode 32 err=-116 [ 212.629103][ T9675] EXT4-fs (loop6): Remounting filesystem read-only [ 212.635684][ T9675] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 212.657777][ T9675] EXT4-fs (loop6): 1 orphan inode deleted [ 212.664019][ T9675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.678056][ T9675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.712947][ T9657] netlink: 'syz.6.1852': attribute type 4 has an invalid length. [ 212.786633][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.800018][ T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.949528][ T9698] smc: net device bond0 applied user defined pnetid SYZ0 [ 212.949532][ T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.961436][ T9698] smc: net device bond0 erased user defined pnetid SYZ0 [ 212.970181][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.102655][ T9701] loop6: detected capacity change from 0 to 512 [ 213.121623][ T9701] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1857: error while reading EA inode 32 err=-116 [ 213.146187][ T9701] EXT4-fs (loop6): Remounting filesystem read-only [ 213.152881][ T9701] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 213.163200][ T9701] EXT4-fs (loop6): 1 orphan inode deleted [ 213.169792][ T9701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.184875][ T9701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.210942][ T9701] netlink: 'syz.6.1857': attribute type 4 has an invalid length. [ 213.320535][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.387811][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.613974][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 213.653945][ T9733] loop0: detected capacity change from 0 to 2048 [ 213.888594][ T3296] loop0: p1 p3 p4 [ 213.894173][ T3296] loop0: p4 size 589824 extends beyond EOD, truncated [ 213.937734][ T9733] loop0: p1 p3 p4 [ 213.942862][ T9733] loop0: p4 size 589824 extends beyond EOD, truncated [ 214.163844][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 214.175433][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 214.186519][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 214.274025][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 214.278930][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 214.370520][ T9739] smc: net device bond0 applied user defined pnetid SYZ0 [ 214.402381][ T9742] smc: net device bond0 erased user defined pnetid SYZ0 [ 214.672705][ T9754] loop5: detected capacity change from 0 to 512 [ 214.692402][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'. [ 214.721579][ T9754] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1872: error while reading EA inode 32 err=-116 [ 214.763582][ T9754] EXT4-fs (loop5): Remounting filesystem read-only [ 214.770311][ T9754] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 214.782291][ T9754] EXT4-fs (loop5): 1 orphan inode deleted [ 214.788853][ T9754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.802366][ T9754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.831187][ T9754] netlink: 'syz.5.1872': attribute type 4 has an invalid length. [ 214.885919][ T9768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'. [ 214.939878][ T9768] loop3: detected capacity change from 0 to 2048 [ 214.948981][ T9768] EXT4-fs: Ignoring removed bh option [ 214.974041][ T9768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.990467][ T9768] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #12: comm syz.3.1875: corrupted in-inode xattr: e_name out of bounds [ 214.992244][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 215.025190][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 215.025883][ T9772] loop2: detected capacity change from 0 to 2048 [ 215.070385][ T9780] smc: net device bond0 applied user defined pnetid SYZ0 [ 215.077896][ T9775] loop5: detected capacity change from 0 to 2048 [ 215.084642][ T9780] smc: net device bond0 erased user defined pnetid SYZ0 [ 215.087564][ T9772] loop2: p1 p3 p4 [ 215.099519][ T9772] loop2: p4 size 589824 extends beyond EOD, truncated [ 215.126018][ T9775] loop5: p1 p3 p4 [ 215.136265][ T9775] loop5: p4 size 589824 extends beyond EOD, truncated [ 215.145464][ T2995] loop2: p1 p3 p4 [ 215.162697][ T2995] loop2: p4 size 589824 extends beyond EOD, truncated [ 215.203614][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 215.204390][ T7192] udevd[7192]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 215.225397][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 215.236237][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 215.239955][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 215.257348][ T3638] udevd[3638]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 215.281007][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 215.281665][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 215.292320][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 215.379252][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1886'. [ 215.400654][ T9797] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.423217][ T9794] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1886'. [ 215.496062][ T9794] loop6: detected capacity change from 0 to 2048 [ 215.538769][ T9794] loop6: p1 p3 p4 [ 215.545905][ T9794] loop6: p4 size 589824 extends beyond EOD, truncated [ 215.589145][ T9800] loop5: detected capacity change from 0 to 512 [ 215.608489][ T9800] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1888: error while reading EA inode 32 err=-116 [ 215.632706][ T9800] EXT4-fs (loop5): Remounting filesystem read-only [ 215.639446][ T9800] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 215.667176][ T9800] EXT4-fs (loop5): 1 orphan inode deleted [ 215.677794][ T9800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.701604][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.710665][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.723149][ T9800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.736499][ T9800] netlink: 'syz.5.1888': attribute type 4 has an invalid length. [ 215.746474][ T9804] bridge0: entered allmulticast mode [ 215.808143][ T9808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.875357][ T9805] bridge_slave_1: left allmulticast mode [ 215.885985][ T9805] bridge_slave_1: left promiscuous mode [ 215.896135][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.920223][ T9805] bridge_slave_0: left allmulticast mode [ 215.927074][ T9805] bridge_slave_0: left promiscuous mode [ 215.937382][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.330703][ T9816] loop5: detected capacity change from 0 to 2048 [ 216.388123][ T3296] loop5: p1 p3 p4 [ 216.393793][ T3296] loop5: p4 size 589824 extends beyond EOD, truncated [ 216.410634][ T9816] loop5: p1 p3 p4 [ 216.415620][ T9816] loop5: p4 size 589824 extends beyond EOD, truncated [ 216.473841][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 217.234505][ T9836] loop5: detected capacity change from 0 to 512 [ 217.261105][ T9836] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1898: error while reading EA inode 32 err=-116 [ 217.327214][ T9836] EXT4-fs (loop5): Remounting filesystem read-only [ 217.333806][ T9836] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 217.404888][ T9836] EXT4-fs (loop5): 1 orphan inode deleted [ 217.432906][ T9836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.474838][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.523897][ T9836] netlink: 'syz.5.1898': attribute type 4 has an invalid length. [ 217.694523][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 217.694551][ T29] audit: type=1400 audit(1758493775.150:36793): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 217.722705][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.990600][ T9858] loop2: detected capacity change from 0 to 2048 [ 218.027200][ T29] audit: type=1400 audit(1758493775.470:36794): avc: denied { mount } for pid=9861 comm="syz.0.1906" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 218.051871][ T3296] loop2: p1 p3 p4 [ 218.077305][ T3296] loop2: p4 size 589824 extends beyond EOD, truncated [ 218.091228][ T9858] loop2: p1 p3 p4 [ 218.116061][ T9858] loop2: p4 size 589824 extends beyond EOD, truncated [ 218.214932][ T29] audit: type=1326 audit(1758493775.670:36795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.278080][ T29] audit: type=1326 audit(1758493775.670:36796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.301746][ T29] audit: type=1326 audit(1758493775.670:36797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.325382][ T29] audit: type=1326 audit(1758493775.670:36798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.348979][ T29] audit: type=1326 audit(1758493775.670:36799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.372536][ T29] audit: type=1326 audit(1758493775.670:36800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.396042][ T29] audit: type=1326 audit(1758493775.680:36801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31aaaeec29 code=0x7ffc0000 [ 218.419607][ T29] audit: type=1400 audit(1758493775.700:36802): avc: denied { create } for pid=9868 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.337086][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1915'. [ 219.352201][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1915'. [ 219.401380][ T9898] loop2: detected capacity change from 0 to 512 [ 219.406944][ T9895] loop6: detected capacity change from 0 to 2048 [ 219.429949][ T9898] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1916: error while reading EA inode 32 err=-116 [ 219.459279][ T3271] loop6: p1 p3 p4 [ 219.484195][ T3271] loop6: p4 size 589824 extends beyond EOD, truncated [ 219.506119][ T9898] EXT4-fs (loop2): Remounting filesystem read-only [ 219.512774][ T9898] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 219.523119][ T9898] EXT4-fs (loop2): 1 orphan inode deleted [ 219.530391][ T9898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.537503][ T9895] loop6: p1 p3 p4 [ 219.564826][ T9898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.577857][ T9895] loop6: p4 size 589824 extends beyond EOD, truncated [ 219.607058][ T2995] loop6: p1 p3 p4 [ 219.630243][ T2995] loop6: p4 size 589824 extends beyond EOD, truncated [ 219.723861][ T9909] loop6: detected capacity change from 0 to 2048 [ 219.744533][ T9891] netlink: 'syz.2.1916': attribute type 4 has an invalid length. [ 219.797497][ T3296] loop6: p1 p3 p4 [ 219.802714][ T3296] loop6: p4 size 589824 extends beyond EOD, truncated [ 219.851311][ T9909] loop6: p1 p3 p4 [ 219.865865][ T9909] loop6: p4 size 589824 extends beyond EOD, truncated [ 219.899834][ T9916] loop2: detected capacity change from 0 to 512 [ 219.936878][ T2995] loop6: p1 p3 p4 [ 219.957515][ T2995] loop6: p4 size 589824 extends beyond EOD, truncated [ 219.995599][ T9916] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1920: error while reading EA inode 32 err=-116 [ 220.016124][ T9916] EXT4-fs (loop2): Remounting filesystem read-only [ 220.022741][ T9916] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 220.043936][ T9916] EXT4-fs (loop2): 1 orphan inode deleted [ 220.051248][ T9923] loop5: detected capacity change from 0 to 512 [ 220.085357][ T9916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.136808][ T9923] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1922: error while reading EA inode 32 err=-116 [ 220.187669][ T9916] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.225301][ T9923] EXT4-fs (loop5): Remounting filesystem read-only [ 220.231969][ T9923] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 220.302412][ T9923] EXT4-fs (loop5): 1 orphan inode deleted [ 220.333259][ T9923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.369382][ T9923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.526833][ T9941] loop3: detected capacity change from 0 to 512 [ 220.558030][ T9918] netlink: 'syz.5.1922': attribute type 4 has an invalid length. [ 220.628130][ T9941] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1927: error while reading EA inode 32 err=-116 [ 220.668645][ T9941] EXT4-fs (loop3): Remounting filesystem read-only [ 220.675247][ T9941] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 220.685678][ T9941] EXT4-fs (loop3): 1 orphan inode deleted [ 220.697474][ T9941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.788493][ T9941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.895922][ T9939] netlink: 'syz.3.1927': attribute type 4 has an invalid length. [ 220.926485][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 220.969625][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'. [ 221.019947][ T9952] loop2: detected capacity change from 0 to 2048 [ 221.048966][ T3296] loop2: p1 p3 p4 [ 221.055870][ T3296] loop2: p4 size 589824 extends beyond EOD, truncated [ 221.069193][ T9952] loop2: p1 p3 p4 [ 221.084165][ T9952] loop2: p4 size 589824 extends beyond EOD, truncated [ 221.143379][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 221.148697][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 221.164540][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 221.250143][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 221.250274][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 221.272499][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 221.380182][ T9971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.571275][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 221.641468][ T9987] loop3: detected capacity change from 0 to 2048 [ 221.709345][ T3296] loop3: p1 p3 p4 [ 221.719682][ T3296] loop3: p4 size 589824 extends beyond EOD, truncated [ 221.743245][ T9987] loop3: p1 p3 p4 [ 221.748486][ T9987] loop3: p4 size 589824 extends beyond EOD, truncated [ 221.819132][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 221.830696][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 221.830993][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 222.771457][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 222.777741][ T29] audit: type=1326 audit(1758493780.230:36910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062fbec29 code=0x7ffc0000 [ 222.801443][ T29] audit: type=1326 audit(1758493780.230:36911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062fbec29 code=0x7ffc0000 [ 222.841856][ T29] audit: type=1326 audit(1758493780.300:36912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5062fbec29 code=0x7ffc0000 [ 222.865544][ T29] audit: type=1326 audit(1758493780.300:36913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062fbec29 code=0x7ffc0000 [ 222.904448][ T29] audit: type=1326 audit(1758493780.350:36914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062fbec29 code=0x7ffc0000 [ 223.019001][ T29] audit: type=1400 audit(1758493780.470:36915): avc: denied { create } for pid=10019 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.039582][ T29] audit: type=1400 audit(1758493780.470:36916): avc: denied { write } for pid=10019 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.059941][ T29] audit: type=1400 audit(1758493780.470:36917): avc: denied { nlmsg_write } for pid=10019 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.070617][T10021] loop0: detected capacity change from 0 to 512 [ 223.156184][T10021] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1954: error while reading EA inode 32 err=-116 [ 223.199261][ T29] audit: type=1400 audit(1758493780.660:36918): avc: denied { create } for pid=10026 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.210371][T10021] EXT4-fs (loop0): Remounting filesystem read-only [ 223.225373][T10021] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 223.235569][ T29] audit: type=1400 audit(1758493780.680:36919): avc: denied { kexec_image_load } for pid=10026 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 223.255785][T10021] EXT4-fs (loop0): 1 orphan inode deleted [ 223.261970][T10021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.284596][T10021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.344558][T10021] netlink: 'syz.0.1954': attribute type 4 has an invalid length. [ 223.486893][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1960'. [ 223.518092][T10038] dummy0: entered promiscuous mode [ 223.535535][T10038] macvtap1: entered promiscuous mode [ 223.545140][T10038] macvtap1: entered allmulticast mode [ 223.576351][T10038] dummy0: entered allmulticast mode [ 223.593949][T10044] dummy0: left allmulticast mode [ 223.604790][T10044] dummy0: left promiscuous mode [ 224.418407][T10038] sctp: [Deprecated]: syz.5.1960 (pid 10038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.418407][T10038] Use struct sctp_sack_info instead [ 224.537609][T10076] loop3: detected capacity change from 0 to 512 [ 224.572799][T10076] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 224.597236][T10076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.612775][T10076] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.629247][T10076] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 224.640742][T10076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1973: bg 0: block 40: padding at end of block bitmap is not set [ 224.657512][T10076] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 224.666403][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 224.677163][T10076] EXT4-fs (loop3): 1 truncate cleaned up [ 224.683252][T10076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.745797][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.764764][T10075] loop5: detected capacity change from 0 to 2048 [ 224.799093][ T3296] loop5: p1 p3 p4 [ 224.834227][ T3296] loop5: p4 size 589824 extends beyond EOD, truncated [ 224.880594][T10075] loop5: p1 p3 p4 [ 224.885541][T10075] loop5: p4 size 589824 extends beyond EOD, truncated [ 224.937904][T10100] loop2: detected capacity change from 0 to 512 [ 224.954844][T10100] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1981: error while reading EA inode 32 err=-116 [ 224.989739][T10100] EXT4-fs (loop2): Remounting filesystem read-only [ 224.996306][T10100] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 225.006627][T10100] EXT4-fs (loop2): 1 orphan inode deleted [ 225.013042][T10100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.026652][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 225.030928][T10107] netlink: 'syz.5.1982': attribute type 30 has an invalid length. [ 225.093562][T10100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.104894][T10109] smc: net device bond0 applied user defined pnetid SYZ0 [ 225.112673][T10109] smc: net device bond0 erased user defined pnetid SYZ0 [ 225.261485][T10120] openvswitch: netlink: Message has 6 unknown bytes. [ 225.305363][T10124] loop5: detected capacity change from 0 to 512 [ 225.314637][T10124] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1984: error while reading EA inode 32 err=-116 [ 225.341772][T10124] EXT4-fs (loop5): Remounting filesystem read-only [ 225.348371][T10124] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 225.358727][T10124] EXT4-fs (loop5): 1 orphan inode deleted [ 225.364916][T10124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.431435][T10124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.537751][T10124] netlink: 'syz.5.1984': attribute type 4 has an invalid length. [ 226.194407][T10142] loop6: detected capacity change from 0 to 512 [ 226.210656][T10142] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1992: error while reading EA inode 32 err=-116 [ 226.247873][T10142] EXT4-fs (loop6): Remounting filesystem read-only [ 226.254411][T10142] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 226.265789][T10142] EXT4-fs (loop6): 1 orphan inode deleted [ 226.272654][T10142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.290808][T10142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.311120][T10142] netlink: 'syz.6.1992': attribute type 4 has an invalid length. [ 226.333361][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 226.366540][T10145] loop2: detected capacity change from 0 to 2048 [ 226.407459][ T3296] loop2: p1 p3 p4 [ 226.422154][ T3296] loop2: p4 size 589824 extends beyond EOD, truncated [ 226.440361][T10145] loop2: p1 p3 p4 [ 226.448474][T10145] loop2: p4 size 589824 extends beyond EOD, truncated [ 226.541170][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.552229][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 226.563228][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 226.653074][T10163] loop2: detected capacity change from 0 to 512 [ 226.670133][T10163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.680503][T10164] loop0: detected capacity change from 0 to 512 [ 226.709424][T10164] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1995: error while reading EA inode 32 err=-116 [ 226.711993][T10163] EXT4-fs (loop2): 1 truncate cleaned up [ 226.722869][T10164] EXT4-fs (loop0): Remounting filesystem read-only [ 226.733942][T10164] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 226.744397][T10164] EXT4-fs (loop0): 1 orphan inode deleted [ 226.751076][T10164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.765663][T10164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.783205][T10161] infiniband syz!: set active [ 226.787982][T10161] infiniband syz!: added team_slave_0 [ 226.792279][T10163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.819427][T10161] RDS/IB: syz!: added [ 226.829065][T10161] smc: adding ib device syz! with port count 1 [ 226.835938][T10161] smc: ib device syz! port 1 has pnetid [ 226.864730][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.057215][T10180] loop2: detected capacity change from 0 to 2048 [ 227.117960][T10180] loop2: p1 p3 p4 [ 227.128470][T10180] loop2: p4 size 589824 extends beyond EOD, truncated [ 227.233389][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 227.272367][T10186] loop2: detected capacity change from 0 to 512 [ 227.313220][T10186] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2004: error while reading EA inode 32 err=-116 [ 227.327005][T10186] EXT4-fs (loop2): Remounting filesystem read-only [ 227.333600][T10186] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 227.345141][T10186] EXT4-fs (loop2): 1 orphan inode deleted [ 227.351370][T10186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.364246][T10186] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.435870][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2007'. [ 227.454917][T10186] netlink: 'syz.2.2004': attribute type 4 has an invalid length. [ 227.475394][T10192] loop6: detected capacity change from 0 to 2048 [ 227.499053][ T3296] loop6: p1 p3 p4 [ 227.504352][ T3296] loop6: p4 size 589824 extends beyond EOD, truncated [ 227.522849][T10192] loop6: p1 p3 p4 [ 227.533336][T10192] loop6: p4 size 589824 extends beyond EOD, truncated [ 227.615178][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 227.617601][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 227.636731][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 227.781697][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 227.781714][ T29] audit: type=1400 audit(1758493785.240:36946): avc: denied { create } for pid=10203 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.819669][ T29] audit: type=1400 audit(1758493785.280:36947): avc: denied { bind } for pid=10203 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.863061][ T29] audit: type=1400 audit(1758493785.300:36948): avc: denied { setopt } for pid=10203 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.883458][ T29] audit: type=1400 audit(1758493785.310:36949): avc: denied { create } for pid=10207 comm="syz.2.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.903151][ T29] audit: type=1400 audit(1758493785.310:36950): avc: denied { create } for pid=10209 comm="syz.0.2014" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.924649][ T29] audit: type=1400 audit(1758493785.310:36951): avc: denied { map } for pid=10209 comm="syz.0.2014" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.949067][ T29] audit: type=1400 audit(1758493785.310:36952): avc: denied { read write } for pid=10209 comm="syz.0.2014" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.974131][ T29] audit: type=1400 audit(1758493785.320:36953): avc: denied { bind } for pid=10207 comm="syz.2.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.031576][ T29] audit: type=1400 audit(1758493785.470:36954): avc: denied { kexec_image_load } for pid=10203 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 228.048457][T10208] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 228.063330][T10208] EXT4-fs (loop2): unable to read superblock [ 228.079798][ T29] audit: type=1400 audit(1758493785.540:36955): avc: denied { setopt } for pid=10207 comm="syz.2.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.143994][T10221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.145052][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 228.220283][T10220] loop3: detected capacity change from 0 to 2048 [ 228.247809][T10220] loop3: p1 p3 p4 [ 228.254256][T10220] loop3: p4 size 589824 extends beyond EOD, truncated [ 228.291662][T10228] loop0: detected capacity change from 0 to 2048 [ 228.323173][T10228] EXT4-fs: Ignoring removed bh option [ 228.344178][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 228.355659][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 228.369149][ T3271] udevd[3271]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 228.384101][T10228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.405663][T10228] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #12: comm syz.0.2017: corrupted in-inode xattr: e_name out of bounds [ 228.680450][T10239] loop6: detected capacity change from 0 to 2048 [ 228.727712][ T3296] loop6: p1 p3 p4 [ 228.732919][ T3296] loop6: p4 size 589824 extends beyond EOD, truncated [ 228.918806][T10239] loop6: p1 p3 p4 [ 228.924852][T10239] loop6: p4 size 589824 extends beyond EOD, truncated [ 228.950910][ T2995] loop6: p1 p3 p4 [ 228.956026][ T2995] loop6: p4 size 589824 extends beyond EOD, truncated [ 228.999066][T10248] loop5: detected capacity change from 0 to 512 [ 229.040903][T10248] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 229.049456][T10248] EXT4-fs (loop5): orphan cleanup on readonly fs [ 229.056037][T10248] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.072034][T10248] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 229.086935][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 229.089945][T10248] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2025: bg 0: block 40: padding at end of block bitmap is not set [ 229.120390][T10248] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 229.136777][T10248] EXT4-fs (loop5): 1 truncate cleaned up [ 229.143122][T10248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.219174][T10257] loop3: detected capacity change from 0 to 2048 [ 229.246264][ T5588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.272546][T10262] loop5: detected capacity change from 0 to 512 [ 229.279100][ T3296] loop3: p1 p3 p4 [ 229.293961][T10264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.322726][T10262] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.339137][ T3296] loop3: p4 size 589824 extends beyond EOD, truncated [ 229.356285][T10262] EXT4-fs (loop5): 1 truncate cleaned up [ 229.379083][T10257] loop3: p1 p3 p4 [ 229.385017][T10269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.393091][T10262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.407567][T10257] loop3: p4 size 589824 extends beyond EOD, truncated [ 229.453313][ T5588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.554662][T10280] loop5: detected capacity change from 0 to 2048 [ 229.607197][ T3296] loop5: p1 p3 p4 [ 229.621103][ T3296] loop5: p4 size 589824 extends beyond EOD, truncated [ 229.639359][T10280] loop5: p1 p3 p4 [ 229.651198][T10280] loop5: p4 size 589824 extends beyond EOD, truncated [ 229.750731][T10292] smc: net device bond0 applied user defined pnetid SYZ0 [ 229.761245][T10294] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.774817][T10292] smc: net device bond0 erased user defined pnetid SYZ0 [ 230.767643][T10167] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.126023][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.271903][T10325] loop3: detected capacity change from 0 to 512 [ 231.318695][T10325] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2054: error while reading EA inode 32 err=-116 [ 231.337396][T10325] EXT4-fs (loop3): Remounting filesystem read-only [ 231.343948][T10325] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 231.356825][T10325] EXT4-fs (loop3): 1 orphan inode deleted [ 231.364546][T10325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.383375][T10325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.550812][T10330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.654976][T10336] loop6: detected capacity change from 0 to 512 [ 231.663848][T10336] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 231.675373][T10336] EXT4-fs (loop6): 1 truncate cleaned up [ 231.684209][T10336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.914048][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.005532][T10342] openvswitch: netlink: Message has 6 unknown bytes. [ 232.091317][T10346] openvswitch: netlink: Message has 6 unknown bytes. [ 232.341146][T10354] smc: net device bond0 applied user defined pnetid SYZ0 [ 232.358857][T10354] smc: net device bond0 erased user defined pnetid SYZ0 [ 232.539302][T10359] loop3: detected capacity change from 0 to 512 [ 233.342371][T10357] syz.2.2066 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 233.356670][T10357] CPU: 0 UID: 0 PID: 10357 Comm: syz.2.2066 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.356700][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.356716][T10357] Call Trace: [ 233.356724][T10357] [ 233.356733][T10357] __dump_stack+0x1d/0x30 [ 233.356799][T10357] dump_stack_lvl+0xe8/0x140 [ 233.356872][T10357] dump_stack+0x15/0x1b [ 233.356889][T10357] dump_header+0x81/0x220 [ 233.357023][T10357] oom_kill_process+0x342/0x400 [ 233.357069][T10357] out_of_memory+0x979/0xb80 [ 233.357165][T10357] try_charge_memcg+0x5e6/0x9e0 [ 233.357245][T10357] obj_cgroup_charge_pages+0xa6/0x150 [ 233.357303][T10357] __memcg_kmem_charge_page+0x9f/0x170 [ 233.357386][T10357] __alloc_frozen_pages_noprof+0x188/0x360 [ 233.357468][T10357] alloc_pages_mpol+0xb3/0x250 [ 233.357506][T10357] alloc_pages_noprof+0x90/0x130 [ 233.357608][T10357] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 233.357689][T10357] __kvmalloc_node_noprof+0x30f/0x4e0 [ 233.357725][T10357] ? ip_set_alloc+0x1f/0x30 [ 233.357746][T10357] ? ip_set_alloc+0x1f/0x30 [ 233.357889][T10357] ? __kmalloc_cache_noprof+0x189/0x320 [ 233.357989][T10357] ip_set_alloc+0x1f/0x30 [ 233.358013][T10357] hash_netiface_create+0x282/0x740 [ 233.358051][T10357] ? __pfx_hash_netiface_create+0x10/0x10 [ 233.358084][T10357] ip_set_create+0x3c9/0x960 [ 233.358150][T10357] ? __nla_parse+0x40/0x60 [ 233.358181][T10357] nfnetlink_rcv_msg+0x4c3/0x590 [ 233.358226][T10357] netlink_rcv_skb+0x123/0x220 [ 233.358258][T10357] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.358296][T10357] nfnetlink_rcv+0x16b/0x1690 [ 233.358323][T10357] ? nlmon_xmit+0x4f/0x60 [ 233.358381][T10357] ? consume_skb+0x49/0x150 [ 233.358408][T10357] ? nlmon_xmit+0x4f/0x60 [ 233.358438][T10357] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 233.358469][T10357] ? __dev_queue_xmit+0x1200/0x2000 [ 233.358544][T10357] ? __dev_queue_xmit+0x182/0x2000 [ 233.358576][T10357] ? ref_tracker_free+0x37d/0x3e0 [ 233.358660][T10357] ? __netlink_deliver_tap+0x4dc/0x500 [ 233.358699][T10357] netlink_unicast+0x5bd/0x690 [ 233.358790][T10357] netlink_sendmsg+0x58b/0x6b0 [ 233.358827][T10357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.358862][T10357] __sock_sendmsg+0x142/0x180 [ 233.358905][T10357] ____sys_sendmsg+0x31e/0x4e0 [ 233.358991][T10357] ___sys_sendmsg+0x17b/0x1d0 [ 233.359100][T10357] __x64_sys_sendmsg+0xd4/0x160 [ 233.359139][T10357] x64_sys_call+0x191e/0x2ff0 [ 233.359213][T10357] do_syscall_64+0xd2/0x200 [ 233.359255][T10357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.359320][T10357] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.359403][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.359431][T10357] RIP: 0033:0x7f6d29c7ec29 [ 233.359446][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.359469][T10357] RSP: 002b:00007f6d286e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.359508][T10357] RAX: ffffffffffffffda RBX: 00007f6d29ec5fa0 RCX: 00007f6d29c7ec29 [ 233.359525][T10357] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 233.359542][T10357] RBP: 00007f6d29d01e41 R08: 0000000000000000 R09: 0000000000000000 [ 233.359586][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.359602][T10357] R13: 00007f6d29ec6038 R14: 00007f6d29ec5fa0 R15: 00007fffb8142708 [ 233.359624][T10357] [ 233.689151][T10357] memory: usage 307200kB, limit 307200kB, failcnt 846 [ 233.695916][T10357] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 233.703911][T10357] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 233.711369][T10357] Memory cgroup stats for /syz2: [ 233.717855][T10357] cache 0 [ 233.725746][T10357] rss 0 [ 233.728654][T10357] shmem 0 [ 233.731602][T10357] mapped_file 0 [ 233.735096][T10357] dirty 0 [ 233.738062][T10357] writeback 0 [ 233.741359][T10357] workingset_refault_anon 235 [ 233.746041][T10357] workingset_refault_file 1571 [ 233.750831][T10357] swap 188416 [ 233.754120][T10357] swapcached 0 [ 233.757517][T10357] pgpgin 119683 [ 233.760987][T10357] pgpgout 119683 [ 233.764556][T10357] pgfault 164904 [ 233.768142][T10357] pgmajfault 120 [ 233.771682][T10357] inactive_anon 0 [ 233.775313][T10357] active_anon 0 [ 233.778803][T10357] inactive_file 0 [ 233.782446][T10357] active_file 0 [ 233.785917][T10357] unevictable 0 [ 233.789590][T10357] hierarchical_memory_limit 314572800 [ 233.794986][T10357] hierarchical_memsw_limit 9223372036854771712 [ 233.801205][T10357] total_cache 0 [ 233.804756][T10357] total_rss 0 [ 233.808085][T10357] total_shmem 0 [ 233.811542][T10357] total_mapped_file 0 [ 233.815650][T10357] total_dirty 0 [ 233.819156][T10357] total_writeback 0 [ 233.823039][T10357] total_workingset_refault_anon 235 [ 233.828318][T10357] total_workingset_refault_file 1571 [ 233.833618][T10357] total_swap 188416 [ 233.837529][T10357] total_swapcached 0 [ 233.841434][T10357] total_pgpgin 119683 [ 233.845424][T10357] total_pgpgout 119683 [ 233.849528][T10357] total_pgfault 164906 [ 233.853634][T10357] total_pgmajfault 120 [ 233.857736][T10357] total_inactive_anon 0 [ 233.861906][T10357] total_active_anon 0 [ 233.865958][T10357] total_inactive_file 0 [ 233.870554][T10357] total_active_file 0 [ 233.874558][T10357] total_unevictable 0 [ 233.878568][T10357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2066,pid=10356,uid=0 [ 233.893649][T10357] Memory cgroup out of memory: Killed process 10356 (syz.2.2066) total-vm:95808kB, anon-rss:1200kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 234.448599][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 234.458043][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 234.458110][ T29] audit: type=1404 audit(1758493791.920:37081): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 234.483082][ T29] audit: type=1400 audit(1758493791.940:37082): avc: denied { map_create } for pid=10384 comm="syz.2.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.507444][ T29] audit: type=1400 audit(1758493791.940:37083): avc: denied { prog_load } for pid=10384 comm="syz.2.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.526751][ T29] audit: type=1400 audit(1758493791.940:37084): avc: denied { prog_load } for pid=10384 comm="syz.2.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.546133][ T29] audit: type=1400 audit(1758493791.940:37085): avc: denied { map_create } for pid=10384 comm="syz.2.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.565566][ T29] audit: type=1400 audit(1758493791.940:37086): avc: denied { prog_load } for pid=10384 comm="syz.2.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.584806][ T29] audit: type=1400 audit(1758493791.940:37087): avc: denied { open } for pid=10384 comm="syz.2.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 234.604244][ T29] audit: type=1400 audit(1758493791.960:37088): avc: denied { allowed } for pid=10385 comm="syz.5.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 234.625157][ T29] audit: type=1400 audit(1758493792.060:37089): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 234.651136][ T29] audit: type=1400 audit(1758493792.110:37090): avc: denied { map_create } for pid=10385 comm="syz.5.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 235.316838][T10439] FAULT_INJECTION: forcing a failure. [ 235.316838][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 235.329624][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.2.2099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.329695][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.329710][T10439] Call Trace: [ 235.329717][T10439] [ 235.329727][T10439] __dump_stack+0x1d/0x30 [ 235.329751][T10439] dump_stack_lvl+0xe8/0x140 [ 235.329773][T10439] dump_stack+0x15/0x1b [ 235.329793][T10439] should_fail_ex+0x265/0x280 [ 235.329821][T10439] should_failslab+0x8c/0xb0 [ 235.329901][T10439] kmem_cache_alloc_node_noprof+0x57/0x320 [ 235.329936][T10439] ? __alloc_skb+0x101/0x320 [ 235.329967][T10439] __alloc_skb+0x101/0x320 [ 235.330063][T10439] netlink_alloc_large_skb+0xba/0xf0 [ 235.330087][T10439] netlink_sendmsg+0x3cf/0x6b0 [ 235.330116][T10439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.330190][T10439] __sock_sendmsg+0x142/0x180 [ 235.330230][T10439] ____sys_sendmsg+0x31e/0x4e0 [ 235.330264][T10439] ___sys_sendmsg+0x17b/0x1d0 [ 235.330312][T10439] __x64_sys_sendmsg+0xd4/0x160 [ 235.330401][T10439] x64_sys_call+0x191e/0x2ff0 [ 235.330425][T10439] do_syscall_64+0xd2/0x200 [ 235.330471][T10439] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.330498][T10439] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.330549][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.330573][T10439] RIP: 0033:0x7f6d29c7ec29 [ 235.330588][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.330609][T10439] RSP: 002b:00007f6d286e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.330630][T10439] RAX: ffffffffffffffda RBX: 00007f6d29ec5fa0 RCX: 00007f6d29c7ec29 [ 235.330643][T10439] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 235.330656][T10439] RBP: 00007f6d286e7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.330676][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.330690][T10439] R13: 00007f6d29ec6038 R14: 00007f6d29ec5fa0 R15: 00007fffb8142708 [ 235.330770][T10439] [ 235.745931][T10454] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2105'. [ 235.962104][T10467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2110'. [ 236.038177][T10471] netlink: 'syz.5.2109': attribute type 4 has an invalid length. [ 236.052516][T10474] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2112'. [ 236.135967][T10479] capability: warning: `syz.6.2114' uses 32-bit capabilities (legacy support in use) [ 236.241046][T10487] FAULT_INJECTION: forcing a failure. [ 236.241046][T10487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.249689][T10496] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2121'. [ 236.254330][T10487] CPU: 0 UID: 0 PID: 10487 Comm: syz.0.2117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.254363][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.254380][T10487] Call Trace: [ 236.254387][T10487] [ 236.254447][T10487] __dump_stack+0x1d/0x30 [ 236.254473][T10487] dump_stack_lvl+0xe8/0x140 [ 236.254497][T10487] dump_stack+0x15/0x1b [ 236.254557][T10487] should_fail_ex+0x265/0x280 [ 236.254607][T10487] should_fail+0xb/0x20 [ 236.254635][T10487] should_fail_usercopy+0x1a/0x20 [ 236.254733][T10487] fpu__restore_sig+0x12d/0xaa0 [ 236.254779][T10487] ? should_fail_ex+0xdb/0x280 [ 236.254817][T10487] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 236.254929][T10487] x64_sys_call+0x2d3c/0x2ff0 [ 236.255004][T10487] do_syscall_64+0xd2/0x200 [ 236.255113][T10487] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.255148][T10487] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.255191][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.255222][T10487] RIP: 0033:0x7f5062fbec27 [ 236.255250][T10487] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 236.255276][T10487] RSP: 002b:00007f5061a27038 EFLAGS: 00000246 [ 236.255374][T10487] RAX: 0000000000000001 RBX: 00007f5063205fa0 RCX: 00007f5062fbec29 [ 236.255443][T10487] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000003 [ 236.255460][T10487] RBP: 00007f5061a27090 R08: 0000000000000000 R09: 0000000000000000 [ 236.255477][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.255495][T10487] R13: 00007f5063206038 R14: 00007f5063205fa0 R15: 00007ffc213f67b8 [ 236.255520][T10487] [ 236.458068][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2124'. [ 236.556811][T10513] futex_wake_op: syz.0.2127 tries to shift op by -1; fix this program [ 236.679521][T10523] capability: warning: `syz.2.2131' uses deprecated v2 capabilities in a way that may be insecure [ 236.738745][T10527] netlink: 'syz.3.2130': attribute type 30 has an invalid length. [ 236.801193][T10534] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2134'. [ 236.979481][T10545] netdevsim netdevsim6: Direct firmware load for ./bus failed with error -2 [ 237.744348][T10602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10602 comm=syz.0.2163 [ 237.778655][T10608] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2166'. [ 237.847511][T10618] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2169'. [ 238.064021][T10640] netlink: 'syz.2.2176': attribute type 4 has an invalid length. [ 238.154335][T10653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2182'. [ 238.233978][T10661] FAULT_INJECTION: forcing a failure. [ 238.233978][T10661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.247170][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.0.2183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.247236][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.247252][T10661] Call Trace: [ 238.247260][T10661] [ 238.247270][T10661] __dump_stack+0x1d/0x30 [ 238.247351][T10661] dump_stack_lvl+0xe8/0x140 [ 238.247374][T10661] dump_stack+0x15/0x1b [ 238.247395][T10661] should_fail_ex+0x265/0x280 [ 238.247458][T10661] should_fail+0xb/0x20 [ 238.247484][T10661] should_fail_usercopy+0x1a/0x20 [ 238.247715][T10661] _copy_from_user+0x1c/0xb0 [ 238.247750][T10661] ___sys_recvmsg+0xaa/0x370 [ 238.247785][T10661] ? _parse_integer+0x27/0x40 [ 238.247821][T10661] do_recvmmsg+0x1ef/0x540 [ 238.247891][T10661] ? get_timespec64+0xc9/0x100 [ 238.247971][T10661] __x64_sys_recvmmsg+0xfb/0x170 [ 238.248003][T10661] x64_sys_call+0x27a6/0x2ff0 [ 238.248030][T10661] do_syscall_64+0xd2/0x200 [ 238.248072][T10661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 238.248116][T10661] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 238.248150][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.248171][T10661] RIP: 0033:0x7f5062fbec29 [ 238.248187][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.248205][T10661] RSP: 002b:00007f5061a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 238.248276][T10661] RAX: ffffffffffffffda RBX: 00007f5063205fa0 RCX: 00007f5062fbec29 [ 238.248292][T10661] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 238.248333][T10661] RBP: 00007f5061a27090 R08: 0000200000003700 R09: 0000000000000000 [ 238.248345][T10661] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 238.248357][T10661] R13: 00007f5063206038 R14: 00007f5063205fa0 R15: 00007ffc213f67b8 [ 238.248374][T10661] [ 239.201369][T10712] batadv1: entered promiscuous mode [ 239.206646][T10712] batadv1: entered allmulticast mode [ 239.512495][T10740] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 239.512495][T10740] The task syz.3.2210 (10740) triggered the difference, watch for misbehavior. [ 239.531632][ T29] kauditd_printk_skb: 1230 callbacks suppressed [ 239.531651][ T29] audit: type=1400 audit(1758493796.990:38321): avc: denied { create } for pid=10731 comm="syz.3.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 239.538671][T10740] FAULT_INJECTION: forcing a failure. [ 239.538671][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 239.567416][ T29] audit: type=1400 audit(1758493797.000:38322): avc: denied { read write } for pid=10731 comm="syz.3.2210" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.570217][T10740] CPU: 1 UID: 0 PID: 10740 Comm: syz.3.2210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.570252][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.570269][T10740] Call Trace: [ 239.570280][T10740] [ 239.570310][T10740] __dump_stack+0x1d/0x30 [ 239.570338][T10740] dump_stack_lvl+0xe8/0x140 [ 239.570366][T10740] dump_stack+0x15/0x1b [ 239.570387][T10740] should_fail_ex+0x265/0x280 [ 239.570420][T10740] should_failslab+0x8c/0xb0 [ 239.570453][T10740] kmem_cache_alloc_noprof+0x50/0x310 [ 239.570532][T10740] ? alloc_empty_file+0x76/0x200 [ 239.570576][T10740] alloc_empty_file+0x76/0x200 [ 239.570734][T10740] path_openat+0x68/0x2170 [ 239.570760][T10740] ? mntput+0x4b/0x80 [ 239.570801][T10740] ? terminate_walk+0x27f/0x2a0 [ 239.570915][T10740] ? path_openat+0x1bf8/0x2170 [ 239.570933][T10740] ? _parse_integer_limit+0x170/0x190 [ 239.570992][T10740] do_filp_open+0x109/0x230 [ 239.571028][T10740] do_open_execat+0xd8/0x260 [ 239.571057][T10740] alloc_bprm+0x25/0x350 [ 239.571085][T10740] do_execveat_common+0x12e/0x750 [ 239.571123][T10740] ? getname_flags+0x154/0x3b0 [ 239.571156][T10740] __x64_sys_execveat+0x73/0x90 [ 239.571185][T10740] x64_sys_call+0x1fec/0x2ff0 [ 239.571214][T10740] do_syscall_64+0xd2/0x200 [ 239.571318][T10740] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.571350][T10740] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.571465][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.571494][T10740] RIP: 0033:0x7f545a77ec29 [ 239.571514][T10740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.571539][T10740] RSP: 002b:00007f54591a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 239.571565][T10740] RAX: ffffffffffffffda RBX: 00007f545a9c6180 RCX: 00007f545a77ec29 [ 239.571591][T10740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 239.571608][T10740] RBP: 00007f54591a5090 R08: 0000000000001000 R09: 0000000000000000 [ 239.571625][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.571642][T10740] R13: 00007f545a9c6218 R14: 00007f545a9c6180 R15: 00007ffe6c31c608 [ 239.571668][T10740] [ 239.788370][T10742] netlink: 'syz.5.2212': attribute type 10 has an invalid length. [ 239.794291][ T29] audit: type=1400 audit(1758493797.060:38323): avc: denied { read write } for pid=5588 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.815462][T10742] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 239.820764][ T29] audit: type=1400 audit(1758493797.240:38324): avc: denied { read write } for pid=10741 comm="syz.5.2212" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 239.881038][ T29] audit: type=1400 audit(1758493797.240:38325): avc: denied { create } for pid=10741 comm="syz.5.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 239.901802][ T29] audit: type=1400 audit(1758493797.240:38326): avc: denied { create } for pid=10741 comm="syz.5.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 239.922600][ T29] audit: type=1400 audit(1758493797.240:38327): avc: denied { create } for pid=10741 comm="syz.5.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 239.942494][ T29] audit: type=1400 audit(1758493797.240:38328): avc: denied { read } for pid=10741 comm="syz.5.2212" dev="nsfs" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 239.964267][ T29] audit: type=1400 audit(1758493797.320:38329): avc: denied { read write } for pid=5588 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.988620][ T29] audit: type=1400 audit(1758493797.320:38330): avc: denied { map_create } for pid=10744 comm="syz.5.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.051622][T10753] FAULT_INJECTION: forcing a failure. [ 240.051622][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 240.064353][T10753] CPU: 0 UID: 0 PID: 10753 Comm: syz.6.2216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.064377][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.064388][T10753] Call Trace: [ 240.064394][T10753] [ 240.064400][T10753] __dump_stack+0x1d/0x30 [ 240.064498][T10753] dump_stack_lvl+0xe8/0x140 [ 240.064514][T10753] dump_stack+0x15/0x1b [ 240.064540][T10753] should_fail_ex+0x265/0x280 [ 240.064688][T10753] should_failslab+0x8c/0xb0 [ 240.064710][T10753] __kmalloc_noprof+0xa5/0x3e0 [ 240.064734][T10753] ? copy_splice_read+0xc2/0x660 [ 240.064752][T10753] copy_splice_read+0xc2/0x660 [ 240.064773][T10753] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 240.064802][T10753] splice_direct_to_actor+0x290/0x680 [ 240.064820][T10753] ? __pfx_direct_splice_actor+0x10/0x10 [ 240.064861][T10753] do_splice_direct+0xda/0x150 [ 240.064879][T10753] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 240.064902][T10753] do_sendfile+0x380/0x650 [ 240.064964][T10753] __x64_sys_sendfile64+0x105/0x150 [ 240.065070][T10753] x64_sys_call+0x2bb0/0x2ff0 [ 240.065089][T10753] do_syscall_64+0xd2/0x200 [ 240.065131][T10753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.065152][T10753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.065177][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.065208][T10753] RIP: 0033:0x7f31aaaeec29 [ 240.065220][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.065236][T10753] RSP: 002b:00007f31a954f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 240.065260][T10753] RAX: ffffffffffffffda RBX: 00007f31aad35fa0 RCX: 00007f31aaaeec29 [ 240.065276][T10753] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 240.065293][T10753] RBP: 00007f31a954f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.065363][T10753] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 240.065374][T10753] R13: 00007f31aad36038 R14: 00007f31aad35fa0 R15: 00007fffaf0ec968 [ 240.065390][T10753] [ 240.291381][T10755] __nla_validate_parse: 2 callbacks suppressed [ 240.291394][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 240.306571][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2217'. [ 240.718107][T10781] macsec0: entered promiscuous mode [ 240.723446][T10781] macsec0: entered allmulticast mode [ 240.729750][T10781] veth1_macvtap: entered promiscuous mode [ 240.735543][T10781] veth1_macvtap: entered allmulticast mode [ 240.742811][T10781] macsec0: left promiscuous mode [ 240.747865][T10781] macsec0: left allmulticast mode [ 240.752929][T10781] veth1_macvtap: left allmulticast mode [ 240.961715][T10806] FAULT_INJECTION: forcing a failure. [ 240.961715][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 240.974537][T10806] CPU: 0 UID: 0 PID: 10806 Comm: syz.5.2236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.974630][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.974642][T10806] Call Trace: [ 240.974647][T10806] [ 240.974654][T10806] __dump_stack+0x1d/0x30 [ 240.974674][T10806] dump_stack_lvl+0xe8/0x140 [ 240.974698][T10806] dump_stack+0x15/0x1b [ 240.974718][T10806] should_fail_ex+0x265/0x280 [ 240.974780][T10806] should_failslab+0x8c/0xb0 [ 240.974810][T10806] __kmalloc_noprof+0xa5/0x3e0 [ 240.974844][T10806] ? copy_splice_read+0xc2/0x660 [ 240.974866][T10806] copy_splice_read+0xc2/0x660 [ 240.974958][T10806] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 240.975013][T10806] splice_direct_to_actor+0x290/0x680 [ 240.975039][T10806] ? __pfx_direct_splice_actor+0x10/0x10 [ 240.975067][T10806] do_splice_direct+0xda/0x150 [ 240.975086][T10806] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 240.975110][T10806] do_sendfile+0x380/0x650 [ 240.975167][T10806] __x64_sys_sendfile64+0x105/0x150 [ 240.975195][T10806] x64_sys_call+0x2bb0/0x2ff0 [ 240.975216][T10806] do_syscall_64+0xd2/0x200 [ 240.975255][T10806] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.975293][T10806] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.975384][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.975405][T10806] RIP: 0033:0x7f5f29f9ec29 [ 240.975422][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.975498][T10806] RSP: 002b:00007f5f289de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 240.975521][T10806] RAX: ffffffffffffffda RBX: 00007f5f2a1e6090 RCX: 00007f5f29f9ec29 [ 240.975584][T10806] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 240.975595][T10806] RBP: 00007f5f289de090 R08: 0000000000000000 R09: 0000000000000000 [ 240.975689][T10806] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 240.975705][T10806] R13: 00007f5f2a1e6128 R14: 00007f5f2a1e6090 R15: 00007fff11557ad8 [ 240.975727][T10806] [ 241.557215][T10802] ================================================================== [ 241.565343][T10802] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 241.572676][T10802] [ 241.575004][T10802] read to 0xffff888119c57540 of 4 bytes by task 10807 on cpu 1: [ 241.582658][T10802] atime_needs_update+0x25f/0x3e0 [ 241.587711][T10802] touch_atime+0x4a/0x340 [ 241.592050][T10802] shmem_file_read_iter+0x477/0x540 [ 241.597263][T10802] copy_splice_read+0x43f/0x660 [ 241.602146][T10802] splice_direct_to_actor+0x290/0x680 [ 241.607538][T10802] do_splice_direct+0xda/0x150 [ 241.612310][T10802] do_sendfile+0x380/0x650 [ 241.616842][T10802] __x64_sys_sendfile64+0x105/0x150 [ 241.622088][T10802] x64_sys_call+0x2bb0/0x2ff0 [ 241.626789][T10802] do_syscall_64+0xd2/0x200 [ 241.631331][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.637274][T10802] [ 241.639605][T10802] write to 0xffff888119c57540 of 4 bytes by task 10802 on cpu 0: [ 241.647336][T10802] touch_atime+0x1e8/0x340 [ 241.651771][T10802] shmem_file_read_iter+0x477/0x540 [ 241.656985][T10802] copy_splice_read+0x43f/0x660 [ 241.661849][T10802] splice_direct_to_actor+0x290/0x680 [ 241.667332][T10802] do_splice_direct+0xda/0x150 [ 241.672136][T10802] do_sendfile+0x380/0x650 [ 241.676578][T10802] __x64_sys_sendfile64+0x105/0x150 [ 241.681803][T10802] x64_sys_call+0x2bb0/0x2ff0 [ 241.686510][T10802] do_syscall_64+0xd2/0x200 [ 241.691037][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.696958][T10802] [ 241.699289][T10802] value changed: 0x009e9e16 -> 0x01373496 [ 241.705010][T10802] [ 241.707346][T10802] Reported by Kernel Concurrency Sanitizer on: [ 241.713509][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.0.2238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.723330][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.733485][T10802] ==================================================================