last executing test programs: 2m12.286836621s ago: executing program 2 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x337, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 2m12.220116192s ago: executing program 2 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}], 0x1}}], 0x1, 0x4004040) 2m12.194398453s ago: executing program 2 (id=1119): timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c0000000400000004000000070000000000", @ANYRESHEX=r0, @ANYBLOB="0301000000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="030000008000"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x5}, {0x2}, {0x6, 0x0, 0x0, 0x400}]}) timer_create(0x0, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000100)={'system_u:object_r:depmod_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x4}, 0x56) 2m11.33269033s ago: executing program 2 (id=1153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18004, &(0x7f0000000400), 0x3, 0x4cd, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) 2m11.165122263s ago: executing program 2 (id=1157): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x8, 0x0, 0x0, 'queue1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x0, 0xc, 0x0, 'queue0\x00'}) 2m10.893150208s ago: executing program 2 (id=1162): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2m10.892896698s ago: executing program 32 (id=1162): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2m1.050673232s ago: executing program 1 (id=1401): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="754d03fb28147770b7080000000000007b8af8ff0000bb3544ad2b0000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000380)={[], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@euid_lt={'euid<', r7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*.\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r9) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m0.956342833s ago: executing program 1 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2m0.929245424s ago: executing program 1 (id=1403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) 2m0.928540134s ago: executing program 1 (id=1404): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 2m0.829126975s ago: executing program 1 (id=1405): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @loopback}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) 2m0.55996949s ago: executing program 1 (id=1407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000285000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000600)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x90) r5 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180900000000000000000000000100001812", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fffffff, 0x2}, 0x4192}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000b7080000000000007b8af8ff40629c04bfa21c00000000000702000000b70400bf0000000100000095f578bfc6"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r2}, 0x38) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 2m0.55959361s ago: executing program 33 (id=1407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000285000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000600)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x90) r5 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180900000000000000000000000100001812", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fffffff, 0x2}, 0x4192}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000b7080000000000007b8af8ff40629c04bfa21c00000000000702000000b70400bf0000000100000095f578bfc6"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r2}, 0x38) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 11.369325149s ago: executing program 4 (id=3129): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = gettid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) connect$vsock_stream(r6, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) 10.326460135s ago: executing program 4 (id=3136): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r8, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) pipe(&(0x7f0000000300)) 10.250580176s ago: executing program 4 (id=3139): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x200c0800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006fa3b9e289d30cf1", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 8.347770135s ago: executing program 4 (id=3154): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80000, 0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r4, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000440)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4040051}, 0x8d0) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1800) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='c\x90T{\xff\x9b\b\x00\xd0\xf5\x84\xd4\x80\x1a\xa0]h\xea~\xd9\xfe\x14\x06\x7fP\xd8\x0eh\xf8\xf7V\x91\xe0n\xfd\xc8\x7f\xaf\xba\xd24\x00n_\xdb\xabv2\x9c\x15u\x100x0}) syz_emit_ethernet(0xac, 0x0, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14010000160001040000000000000000e0000001000000000000000000000000ff010000000000000000000000000001ab13a6979d621eb1830c8e192e00000fd100000002020000000c0000", @ANYRES32=0x0, @ANYBLOB="ac1e010100000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a000000940000000000000000000000ad04000014000e00ff0200000000000000000000000000010800160002000000"], 0x114}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0, 0x2890}, 0x1, 0x0, 0x0, 0x4004050}, 0x4040804) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 8.02812421s ago: executing program 4 (id=3159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0xa, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4e59, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r8 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r8, 0x12) openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCEXCL(r11, 0x540c) ioctl$TIOCGICOUNT(r11, 0x545d, 0x0) 4.769807309s ago: executing program 6 (id=3180): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) fcntl$getown(r0, 0x9) move_mount(0xffffffffffffffff, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./bus\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$eJzs3c1uG+fVAOBDWY4VfYARfC2CwHWciZOFDTgySSUyhCwKlhrJk1AkMUMFNroogtgujMhJETdArS7SbNJ20UvoItveRO6h6K7XkH1XVTHDH/1Yol1bEQP3eQhzXs6cmffMkODRS3OGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABErb1Wrzdq0cm6W7eS47XX8t7mlOXj7X13YDKl34ha+S8WFuK14azXfrq3+NXy7nJcHD66GAvlZCF2/u/VV97/yfzceP0pCZ2Kh492Pv14e/vuF7NOZEY20m5W9LLN1kaaZEUvWV1ZqV+/uV4k61knLW4Xg3Qzaedpa9DLkyvtq0ljdXU5SZdu97a6G2utTjqeeeOdZr2+knyw1E9bedHrXv9gqWjfzDqdrLtRxZSLy5gbya8/zz/MBskgbW0myb3723eXn5RkGdR4mqDmk4Ka9Waz0Wg2Gyvvrb53o16fb9YX4sCM+iFxYJWkXp8fv2jjleFr+6mP9T7/eJaV+MHMlXd//3L0hMYfpj+zJ/PGDSdgblT/oxNZdGMrbkVy5K0da5FHLzaPWT7yXcTvq8b1dGq/Zf1eGNX/cZV/bW/xhfLu8sLo0aXj6v8xuZze7WE8ip34ND6O7diOu/HFzDM63dtGpNGNLIroRRab0armJKM5SazGSqxEPX4VN2M9ikhiPbLoRBpF3I4iBpFWr6h25JFGKwbRizySuBLtuBpJNGI1VmM5kkhjKW5HL7aiGxuxFq1qK/fifnXcl6fkOAlqPE1Qc0rQqJiXL7zK/GN/ENTr86NlR9X/G5P6/9eqPjx8+zSrFDN1Ztw4uTdveE674/ofu7v/3i3NOiMAAADgpNWqT99rl16aPF7POukvZ5wVAAAAcJKqrzJdLCdny9brUSvH//W9gJdmlxsAAABwMmpxafQpwGK8MWyNz4SqG/sDAADAi6H6//9L5WSxbM2NZg/H/2NzM0oOAAAAOBF/2rvG/k4ceY3dol8O/+cjovZ1/9bbtQetMq714MxwvTOHtzhYv1A7P9pINVmZHz1qpxdro6tfTi6C+f1ocu9J1/qv5fnZ501g75OMN+8Mp3cmS6peFtezTrrU7nXeb0SrdX5ukN4afPnZ/d9FlL3/ubt5vhb37m/fXfrk8+07VS5fl1v5+sHoirC1/yKX38brw5jXz8Vje7wTtbPViRijfheH/db37/9oX8a79PJT9PnNOOby4nC6eHD/F8o+G0vH7f1i7dxo/efa82/GwW9deWs4OSKL5pQsqmPR3H/8Dx2Lp8oi3joui/OTLJbHWezG+MqYB7NYfs4sAGbl3qQKHay7Zyf1/7G6+wzvcqdT3b+JK8OYKxeqN9b5C0fUlfqRdWX3zKEa++zV7W9xdRhzdRx8XI0t9/kvk34bVb/flit8e2y/RWd8QB78Jq7PPdp5534Ve/ezZnN5pf5uvf5eM85WuzGalJn+a+Fwpi+H2gPwP+1y9f3/ab+xc3TEmb3SXHs33iynP9s3qi5r0qTi/f/klIKl+CQ+j+24E9eqsw0i4o2j+13cdxrCtbg8SvboUevivl94uXb8qG5f7Phvl6eJHf68DAC8SC4/oQ5P6v/4t/jGEVUJHY7dr+0bdy/sjbtjNMI8VMunj47313IA4IeR5t/XFgd/rOXlg8bqaqM1uJkmea/9YZJnaxtpknUHad6+2epupEk/7w167V6nbHyUraVFUmz1+718kKz38qTfK7JbP4+skyajn34v0s1Wd5C1i34nbRVp0u51B632IFnLinbS3/pFJyu+2t3dLVcu+mk7W8/arUHW6yZFbytvp0tJUqTpKPBmmifZWtodZOtZ2ewm/Tw7F/nt5KNeZ2szTdbSop1n/UEvr7IZ95V118/lm9Vml2Z9sAHgR+Lho51PP97evvvF0Y2FOHZR1fjn9NWHjVnvIwBw0LQq/di3zwAAAAAAAAAAAAAAgJl4wvl/z96oHZozFxE/VF8vXGP3q1Ppa3yCx+yenTM/kgP+eOPbfXOSE9zyyxHxo9jBA41zjy+a8RsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzhPwEAAP//ONRIwg==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0xa, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}}, 0x0) membarrier(0x10, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 3.304319621s ago: executing program 0 (id=3190): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) acct(&(0x7f0000000040)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)}, 0x61) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)=""/105, 0x69}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000004000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000002b00), 0x2, 0x0) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) 3.303695681s ago: executing program 6 (id=3191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x88c}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xfffffffe, 0x100000}, 0x0, &(0x7f0000000140)) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x69, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x2, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xdb, {{0x5}, {0x5, 0x24, 0x0, 0xda}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9b08, 0x10, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x40, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x80, 0x400}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x2a}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x87, 0x74d5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xf8, 0xe2, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xb, 0x8, 0x1b}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x8, 0xe, 0x9, 0x8, 0x4}, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="c7a30000009aef520d7e280a9d081239c0807300d6763876ad09ea9bbeab3d1c43edb3a4fad808b443d630040e06fb6276efd23e662991c8a1249da455e8cfd2b53028c4410e9dac4cd721f3e204b6cc1e29ca4f9254f9cfdb20da2209dd0000b2c91eb720fd850c"], 0x8, [{0x9f, &(0x7f0000000580)=@string={0x9f, 0x3, "9c690965a2f8c0297183cfaabd9aaf5e485ab76414ef19db5534b429881b03ee197743b5e80a660f3f927dfca8785f262b5fdc972672804156464915d7fe9a0659b0711041d9c4491dcbfb58a2cbcdc4b3cb9c590f84db831bdf5a8bda9c4af2f7af84cbec311a4da51c2ceb7715fea1b978886122118dadc86c2f4d35979283d7f2f1a49ed90187d1c506915657f3b49e5fc999714f147791c31a72fb"}}, {0x53, &(0x7f0000000640)=@string={0x53, 0x3, "99080685cbdbcfe6706f3c4b591ed6f06d9acb85a1bb7f359667f780c9d0a7d4526f59319f7b12e639df8cc4c5f33123eed3b23bcf47c0e0d1a23cce2e3fa6d78e4aaa4f3c702fa84cbde9f1567b6c0dfa"}}, {0x6b, &(0x7f00000006c0)=@string={0x6b, 0x3, "240b4d8bb7371fa75fe6ced95472dbad288322e6ddff07659722bffad77c02134c0cf90d818f9826375e7a9b3d3290cc719339b3e455cf9b369d97f972a3f6491d02d41b85fb8df9003cd5212ce91c7f145dcbcb5de592267d16aaa6d2158b3b809877476cc6ba1d2f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x441}}]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xa, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r4, r4, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000900)={0x4, @remote, 0x4e22, 0x2, 'wlc\x00', 0x2, 0x9, 0x3}, 0x2c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x4, 0x8, 0x0, 0x69b, 0xfb}) clock_getres(0x6, 0x0) 3.30249377s ago: executing program 5 (id=3192): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054dc2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5b60c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb69746679cb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d5879029a15b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fe1def93902c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69a6875e1925ff7ccbeb5191d297320abbecfbc69024fff3127a8f4755d7d15798fe83747b9cb0afb337d338c9db09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x2}, 0x94) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_SRC_VNI={0x8}]}, 0x38}}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='host1x_channel_submit_complete\x00', r5}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 3.208931122s ago: executing program 0 (id=3194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="e1301b6e95a0ed6d1c6fb323f5cea13020ace392e05db1148b0915f0b916912d60025a5375b271309344d176dc12d4ddd48748d782c10ef4a61b37e4d7aa98fd9dd11650a8ffdc617a01f92e0b3725d48ed75f6512c4294ab1ed53fceb85c58177b5149faaef6183b649a2cbcb4c1db4389052c20c4e3a53db0ff49d53e83c63b1d85acbd5256ffe3aef77f8f01eace89d43fb638f4781377120c25ba54f25cd", @ANYBLOB="25faae954ba13bc2ff9367c1b905cc45fab034b74cc4ff362901da8d3a3f6d9f5f82d47e8cc061fa05345c724b754441827d5e38030000008ecd65ebbd3b575b92244bddd13705a4c9e3b74670b43c37cdfce5ea3bc27fc44c97528eb56dd8ff93b4d00c931612dc8c245ec9ff74c0d6519187a321ee490128a1242958f5c06bb61174f130a1a6b7813160fe4aa73d5e90c2ef09a6087fbc5a32743f45212ad2782364e4fbe55c3bf392f6015228"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa180000000000dc05369436b7705125953448400f8ffffffb702000007ffe400b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x6}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0d4}, 0xc0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0xb) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffb}, 0x18) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.68206574s ago: executing program 6 (id=3195): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read(r0, &(0x7f00000001c0)=""/60, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c85c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002440)={'ip6_vti0\x00', &(0x7f00000023c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x9, 0xe, @loopback, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7800, 0x8, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000002a80)={'syztnl2\x00', 0x0, 0x4, 0x22, 0xe, 0x7fffffff, 0x18, @private0, @mcast2, 0x8000, 0xd327b5e577427d66, 0x51f9, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002b80)={'sit0\x00', &(0x7f0000002b40)={'syztnl2\x00', 0x0, 0x8, 0x50, 0x83, 0xab, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010100, {[@generic={0x88, 0x7, "9c68713653"}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00', r9, 0x0, 0x8000}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000"], 0xfc}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX=r7], 0x270}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32, @ANYBLOB="080003"], 0x80}}, 0x8000) 2.573801522s ago: executing program 6 (id=3196): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 2.443088433s ago: executing program 3 (id=3197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000800000000000000000000000000850000000e0000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) acct(0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) removexattr(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000140)=""/67) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000080000000000"], &(0x7f0000001b80)='syzkaller\x00', 0xdeb, 0x0, 0x0, 0x41100, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) timer_settime(0x0, 0x1, 0x0, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 2.093012499s ago: executing program 0 (id=3198): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xa, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000300)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [{@seclabel}, {@fsname={'fsname', 0x3d, '$-{'}}, {@obj_user}, {@uid_lt}], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000009c0)={[{@grpquota}, {@stripe={'stripe', 0x3d, 0x8}}, {@dioread_nolock}, {@nobarrier}]}, 0x2, 0x7a8, &(0x7f0000002040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) mincore(&(0x7f0000411000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/67) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.626570646s ago: executing program 3 (id=3199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x80090) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x8}, 0x4b}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200090c0000000004000000000000030006000000000002000000ffffffff000000000000000002000100000000000000000001000020030005000000000002000000ac1414aa00000000000000000100150000000000010014"], 0x60}, 0x1, 0x7}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="150a00000000000000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @empty, @local, {[], @ndisc_ra}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r10, 0x25, &(0x7f00000000c0)) close(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000040)) 1.553411067s ago: executing program 5 (id=3200): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000000000000}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000181a0000e8b3b88ef529eb6ee649c127edec900d53fcf2974ebd5e7f5954108628c2b19289f2824e82e8ea0cb815f4853877d4dc8da86ac4d0b4c20e2f7edc60fea5ea6eeab02f2eb84c1b4bb208b5f5c1404be54ba0238e6b3b44ff161c8d4233cbe50e0e0d648ff8bda1c9c20f5da1ee0d48364e0a058ef85bdc1bd82959362c9b589ae281a3da61b48dfe1bba2f0e99df5845cbda6a5d32f9ced28687a25fb7b9cb19cf236ab96b1893c0", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={0xffffffffffffffff, 0x0, 0x62, 0x1046, &(0x7f0000000240)="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", &(0x7f00000022c0)=""/4103, 0x80000000, 0x0, 0x1c, 0x2, &(0x7f0000000080)="1da6a8c52c6f6ada3360b5a3d3e382aeb49cc0ba8bfe12ea5a5ccd47", &(0x7f0000000180)="46fc", 0x4, 0x0, 0xc}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) lstat(&(0x7f0000000200)='./file0\x00', 0x0) unshare(0x22020600) 1.432851699s ago: executing program 0 (id=3201): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d5648c1d82a145dd6415ad67039417a73d8512f05ddb80fb359dac5afc9a43f182c63ca1ee2410f5eea28095ba11cca5d7c7e353e4065669139c82624a3ddf037d814dc859ca5c25e5634beca63fb3e70a55b1077dad76610e983f07b838140253dd262e02bdf34549661325f46583855df014a2bd752c90f081a82aef5520f5ce2446eddad7fef6d484ec68d22f8e123d878cc6fa7ec0e4b55d5f6cbbce2d5f7a5a9e89ca60cfb2b2a9f64f226b7bd9113fc2e61521a24433e7900214552a7a7d5120f2dba9509cef", @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f00000004c0)={[{@test_dummy_encryption_v1}, {@nolazytime}, {}]}, 0x1, 0x77e, &(0x7f0000002f00)="$eJzs3c1rHOUfAPDvbJKmTfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBLSJ4EVQ8CHrp2Zd68+rLVf8LD2KpmhYrghKZzUyzbTZpEpNsdT8fmOzzzMzmeb77zMuzOw8zAXSt4fRPIeJwRLybRAxm85OI6GumeiNOrqx3a2mxnE5JLC+//EvSXOfm0mI5Wt6TOphlHo6Ib96KOFJYW259fmGqVK1WZrP8aGP6wmh9fuHo+enSZGWyMnN8bHz82ImnThzfuVh/+37h0LX3Xnj885N/vPnQ1Xe+TeJkHMqWtcaxU4ZjOPtM+tKP8A7P73RhHZZ0ugJsS7pr9qzs5XE4BqOnmQIA/stej4hlAKDLJM7/ANBl8t8Bbi4tlvOps79I7K3rz0XE/pX48+ubK0t6s2t2+5vXQQduJitXRv5c/eCGdqD84Yj4+MtXP02n2KXrkADtvHE5Is4ODa89/idrxixs1RMbLNuXvQ7fNd/xD/bOV2n/5+l2/b/C7f5PtPZ/Mv1t9t3tuOf+f2AHCtlA2v97tmVs262W+DNDPVnuf80+X19y7ny1kh7b/h8RI9HXn+bHNihj5MZfN9Zb1tr/+/X91z5Jy09fV9co/NTbf+d7JkqN0j+JudX1yxGP9LaLP7nd/kmb9k/nnd5kGS8+8/ZH6y1L40/jzae18Uc2Oml3LF+JeKxt+6+OaEs2HJ842twcRvONoo0vfvhwYL3yW9s/ndLy8+8CeyFt/4GN4x9KWsdr1rdexndXBr9eb9m942+//e9LXmmm837EpVKjMTsWsS95ae38Y6vvzfP5+mn8I4+23/832v7T74RnNxl/77WfP9t+/LsrjX9iS+2/mhhcM6d94uqtqZ71yt9c+483UyPZnM0c/zZTr+1tzQAAAAAAAAAAAAAAAAAAAAAAAACwdYWIOBRJoXg7XSgUiyvP8H4wBgrVWr1x5FxtbmYims/KHoq+Qn6ry8GW+6GOZffDz/PH7so/GREPRMQH/QeS/D6KEx2OHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByB9d5/n/qx/7mS39nawgA7Ir9na4AALDnnP8BoPs4/wNA93H+B4Du4/wPAN3H+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/n1psZzmJy7Oz03VLh6dqNSnitNz5WK5NnuhOFmrTVYrxXJt+l7/r1qrXRiPmblLo41KvTFan184M12bm2mcOT9dmqycqfTtSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1+YWpUrVamZXYRmL5/qhG5xM92eZ0v9RnTxPJ/VGNHU50+MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C/xdwAAAP//7qQqjw==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x3800}, {}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x1ff}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x767c4148}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x3, 0x0, 0x80000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {0xfeb, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x6}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x5}], [{0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x3}, {0x9f6acee820ff84a1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x5, 0x9463d21cb8c2d83b}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18117700229ac44badb611f2e59afff613fa11018fa31c1ea0dec82ea350bae402918fe2e6945241f9a49a4a80", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0x81d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x6, 0x9, [0x30d2, 0x0, 0x8001, 0x7]}}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe45) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.396125359s ago: executing program 5 (id=3202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000005000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2], 0x50) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) ioctl$SG_IO(r7, 0x2285, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r9) keyctl$link(0x8, r9, r9) 1.144642103s ago: executing program 5 (id=3203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000007200)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2000d054) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c00002ab50b0c38103d1a495534001000030425bd70000000000000000000d79962b6e738b58e449c8f393156e8924900000000000000091bea29c5dc0b684549f88cf86d4f2e35d5d17f1307b0d8e64d90764a3452f831cc04ccc2e8a28b7f02d2150233e98411c4a234c6b2853316d18cf496eaff6acfc50814a172a1fb758dc8ce14e28300000000000000000000000072e8d126aeae6cb86151965da9e59d49ed9dc4d6829ca90afeb7b3fe483b76d6b18f78e52a558216caae0ad0bc0d1999e12d5a3a8bb350b96f9b13f4f4ff9cbea61ddc403321f7433dab97a92cdf", @ANYRES32=r3, @ANYBLOB="00050000000000000a000100aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid}]}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000000), &(0x7f00000005c0)=r12}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x940c, 0x3002, 0x388, 0x2c0, 0x480, 0x3d8, 0x3d8, 0x480, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x328, 0x388, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x36, 0x0, [{0x4, 0x0, 0x8, 0x40}, {0x8, 0x2, 0x2, 0x6}, {0xbc80, 0x1, 0x1, 0xa}, {0x0, 0x5, 0xfc, 0x1}, {0xd7e, 0x8, 0xff}, {0x2, 0x80, 0x4, 0x2}, {0x6, 0xda, 0x10}, {0x0, 0xea, 0xd, 0x1}, {0x7, 0x8, 0xd, 0x4f}, {0x7, 0x2, 0x3, 0x4}, {0x2, 0x7, 0x80, 0x101}, {0x5, 0xe, 0xe, 0x86a7}, {0x7ff, 0x7f, 0x48, 0x6}, {0x3ff, 0xfb, 0x1, 0xbf7}, {0xc92, 0x5, 0x6c, 0x8}, {0x8, 0x9, 0x8, 0x8}, {0x7, 0x9, 0x93, 0x2}, {0x7, 0x5, 0x6, 0xfc}, {0x4, 0x1, 0x2}, {0x0, 0x3, 0x1}, {0x8000, 0x3, 0x1b, 0x9}, {0xd6c3, 0x10, 0x0, 0x7}, {0x4a, 0x7, 0x5, 0x6d}, {0xfff8, 0x5, 0x8, 0x3}, {0x6, 0x2, 0x0, 0x40}, {0x0, 0x7f, 0x8, 0x1}, {0xce4, 0xbe, 0x2, 0xfa90}, {0x9, 0x7f, 0xfe, 0x8000}, {0x7, 0x9, 0x1}, {0x4, 0x65, 0x0, 0x800}, {0x2, 0x0, 0x39, 0x8}, {0x9dfb, 0xb, 0x34, 0x1}, {0xdb5, 0x3, 0x0, 0x10001}, {0xe, 0xff, 0x7}, {0x3ff, 0x62, 0xf5, 0xfffffffc}, {0x6, 0x0, 0x7, 0x10000}, {0x6, 0x2, 0xd}, {0x9, 0x0, 0xa, 0xda}, {0xfffc, 0x5, 0x0, 0x7a6}, {0x3ff, 0x2, 0x9, 0xbb}, {0xe, 0x0, 0x3, 0x7}, {0x4, 0x7, 0xd0, 0x5}, {0xc, 0x0, 0x1, 0x6}, {0x6, 0x7f, 0x2, 0x6}, {0x7, 0x5, 0x2, 0x1}, {0x9, 0x5, 0x1, 0x3}, {0xffff, 0x4, 0x9, 0xfffffff9}, {0x8, 0x13, 0x64, 0x3}, {0x4, 0xfb, 0xf, 0x3}, {0xfffd, 0x1, 0x0, 0xae}, {0x4, 0xfa, 0x7}, {0x6, 0x7a, 0x0, 0x9}, {0x2, 0x5, 0x9, 0x8d}, {0xe, 0xf4, 0x0, 0xa2}, {0xfff7, 0x8, 0x6, 0xcd}, {0xc3c2, 0x2c, 0x9, 0x1}, {0xd, 0x71, 0x3, 0x9}, {0x6, 0x4, 0x6, 0x5}, {0x1ff, 0x5, 0xae, 0x6}, {0x2, 0x6, 0xd2, 0x6}, {0xf, 0x7, 0x10, 0x8}, {0x1, 0x5, 0x8a, 0x933}, {0x64b, 0xa, 0x7}, {0x3, 0x3, 0x8}], {0x6}}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x3}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='sched\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x800) 916.974836ms ago: executing program 5 (id=3204): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000200)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x3d0, 0x0, 0x4a0, 0x2d8, 0x4a0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x821, 0x2000}, 0x2c) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='security.selinux\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x2}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000200)={0x9, 0x3, 0x8000}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) 871.293137ms ago: executing program 3 (id=3205): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x37, 0x41, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1000000, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="014100"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffe4000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x126f, &(0x7f0000002880)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x5606, 0xff) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r8, 0x0, 0x0) close(r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigaction(0x9, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 853.994738ms ago: executing program 6 (id=3206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000280)=0x14) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1900000000000000000000000080073616fc8415b7050f9c5ef454704dcd98e3d83f11cb2fbc40eeb81d9a621d0bc5981c91d7399f5a3a1fcd739656f809703770f332b7ff"], 0x48) open(0x0, 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0), &(0x7f0000000280)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xffffffffffffffe2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r5) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 624.986201ms ago: executing program 3 (id=3207): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0xfe, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0x80000004}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000004a0019062c097000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="ffffff7f14000100fc00"/24], 0x30}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x4, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0xfd, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001080)="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", 0x0, 0x1, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r6, 0x2000, 0x0) sendto$l2tp(r6, &(0x7f0000000400)="eb7f02cfb484a5308528f10d30b6658ef363cc5809cd8828c8f23e294fb1291bde81f7401e836c9d2c5c0a9efc52d24def5fba9b02e49c8d65d98b6d70e74579641248cb21528f586569cadf3005d7d929a2760ac291ba0e24851d6c7980c9d6655320e3d5b25bb4e29d322c214c1a47082adef2b86eb6c35fb1e7b2aa9af1246a66ae53902f20802c98459123b7515ae92381058db6b26bf0ed75", 0x9b, 0x20000000, &(0x7f0000000080)={0x2, 0x0, @remote, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001380)='task\x00') fchdir(r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r8, r8, 0x0, 0xb) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) 529.812302ms ago: executing program 0 (id=3208): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x37, 0x41, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1000000, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="014100"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffe4000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x126f, &(0x7f0000002880)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0xff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r7, 0x0, 0x0) close(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigaction(0x9, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 424.549604ms ago: executing program 3 (id=3209): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000003c0)={[{@i_version}, {@mblk_io_submit}, {@norecovery}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0b0400000000000000000200000148000480240001800b000100736f636b65740000140002800800024000000003080001400000000220000180080001006e61740014000280080005400000000308000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000c8e37e000000000a"], 0x9c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6, 0xfffffffffffffffd}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRESOCT], 0x6c}}, 0x48c0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 324.878805ms ago: executing program 0 (id=3210): r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0xfffffffffffffff5}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x1e1240) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="809e9feac733d23c17d5c7bb8a45eece26aed347d4600be5996ecfc61ea8dc378f4d369b6de4c552e0f5b234cb45f5bb5dacad404aa3ef09bf3234b8c33f777de5dc98c933c36c81f7cbe7edd76cdadda72f212e168274"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, 0x0, 0x0) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) gettid() syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0xa, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000000)=ANY=[], 0x80) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 183.686518ms ago: executing program 3 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x8164, 0x10000, 0x2, 0x1, 0x8, 0x200, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xea9}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0xff}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20008840) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "0900410000000008ea6e"}]}}}], 0x20}, 0x20002800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5, 0x0, 0x7}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000018000000000000002900000036"], 0x30}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46826000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800b9a9", @ANYRES16=r8, @ANYBLOB="00012bbd7000fbdbdf250b0000001400018008000b00736970000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x2000c090) syz_usb_connect(0x6, 0x79c, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x0) 9.04734ms ago: executing program 5 (id=3212): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x21, r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/22, 0x16}], 0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da94904b1c0749ecca89ca140c5c267e9822e707ea0dc66272945640b05297be0a84604caf0703fd3b5803e531542c8c6d303e18f8373b722afbefaf1380208e5753e4fe6f77009406b2ec46341d95c12d7796fe9259618b31c2d9a5f9639af3a49539e7b23a0af684dd8af328cbdb39cc86b4358ebf", 0xc0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r6, 0x0, 0x0, 0x0, 0x0, 0x1}]) 0s ago: executing program 6 (id=3213): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @empty}}}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r3, 0x0, 0xffffffbf) read$snapshot(r3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8c55, &(0x7f0000000600)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usbip_server_init(0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) kernel console output (not intermixed with test programs): ] : renamed from lo [ 84.861956][ T7794] loop6: detected capacity change from 0 to 512 [ 84.869200][ T7794] ext4: Unknown parameter 'smackfshat' [ 84.888661][ T7800] netlink: 'syz.5.1822': attribute type 6 has an invalid length. [ 84.924382][ T7798] syzkaller0: entered promiscuous mode [ 84.930043][ T7798] syzkaller0: entered allmulticast mode [ 85.175356][ T7834] ref_ctr increment failed for inode: 0x2b1 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881047abc80 [ 85.186961][ T7833] uprobe: syz.5.1839:7833 failed to unregister, leaking uprobe [ 85.274291][ T7844] syz_tun: entered allmulticast mode [ 85.281962][ T7843] syz_tun: left allmulticast mode [ 85.292785][ T7846] SELinux: Context  is not valid (left unmapped). [ 85.431341][ T7872] loop4: detected capacity change from 0 to 128 [ 85.438217][ T7872] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.450671][ T7872] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.518329][ T7878] loop5: detected capacity change from 0 to 1764 [ 85.599540][ T7890] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 85.630402][ T7896] netlink: 'syz.3.1868': attribute type 4 has an invalid length. [ 85.643277][ T7896] netlink: 'syz.3.1868': attribute type 4 has an invalid length. [ 85.673777][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.684656][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.693588][ T7901] loop5: detected capacity change from 0 to 512 [ 85.700364][ T7901] ext4: Unknown parameter 'smackfshat' [ 85.794357][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1873'. [ 85.843213][ T7914] loop6: detected capacity change from 0 to 1024 [ 85.863037][ T7914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.884745][ T7922] loop5: detected capacity change from 0 to 2048 [ 85.892112][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.909421][ T7922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 85.940515][ T7928] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.035098][ T7931] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.052249][ T7931] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.064849][ T7931] EXT4-fs (loop5): This should not happen!! Data will be lost [ 86.064849][ T7931] [ 86.074578][ T7931] EXT4-fs (loop5): Total free blocks count 0 [ 86.080600][ T7931] EXT4-fs (loop5): Free/Dirty block details [ 86.086499][ T7931] EXT4-fs (loop5): free_blocks=2415919104 [ 86.092304][ T7931] EXT4-fs (loop5): dirty_blocks=2336 [ 86.097635][ T7931] EXT4-fs (loop5): Block reservation details [ 86.103638][ T7931] EXT4-fs (loop5): i_reserved_data_blocks=146 [ 86.136824][ T7216] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 86.270609][ T7956] pim6reg1: entered promiscuous mode [ 86.276149][ T7956] pim6reg1: entered allmulticast mode [ 86.337022][ T7964] loop5: detected capacity change from 0 to 512 [ 86.345761][ T7964] ext4: Unknown parameter 'smackfshat' [ 86.376412][ T7968] 9p: Unknown Cache mode or invalid value r [ 86.546552][ T7988] sd 0:0:1:0: device reset [ 86.587286][ T7993] loop5: detected capacity change from 0 to 512 [ 86.594106][ T7993] ext4: Unknown parameter 'smackfshat' [ 86.657445][ T7999] loop4: detected capacity change from 0 to 1024 [ 86.671904][ T7999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.693621][ T8005] loop6: detected capacity change from 0 to 512 [ 86.704281][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 86.717616][ T7999] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 86.722736][ T8007] pim6reg1: entered promiscuous mode [ 86.730982][ T8007] pim6reg1: entered allmulticast mode [ 86.746608][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.758759][ T8005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 86.767401][ T8005] System zones: 1-12 [ 86.772861][ T8005] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.1916: corrupted in-inode xattr: invalid ea_ino [ 86.795554][ T8005] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1916: couldn't read orphan inode 15 (err -117) [ 86.814815][ T8005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.846769][ T8014] pim6reg1: entered promiscuous mode [ 86.852161][ T8014] pim6reg1: entered allmulticast mode [ 86.877415][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.186412][ T8038] loop4: detected capacity change from 0 to 512 [ 87.195055][ T8038] ext4: Unknown parameter 'smackfshat' [ 87.427413][ T8056] loop5: detected capacity change from 0 to 1024 [ 87.465382][ T8056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.534364][ T8056] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 87.651153][ T6072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.696913][ T8072] loop5: detected capacity change from 0 to 512 [ 87.713831][ T8072] ext4: Unknown parameter 'smackfshat' [ 87.903366][ T8080] tap0: tun_chr_ioctl cmd 1074025680 [ 88.069322][ T8109] pim6reg1: entered promiscuous mode [ 88.075022][ T8109] pim6reg1: entered allmulticast mode [ 88.344947][ T8138] loop6: detected capacity change from 0 to 512 [ 88.353912][ T8138] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1966: casefold flag without casefold feature [ 88.367760][ T8138] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1966: couldn't read orphan inode 15 (err -117) [ 88.394390][ T8138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.485958][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 88.485976][ T29] audit: type=1400 audit(88.465:3514): avc: denied { ioctl } for pid=8136 comm="syz.0.1965" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.725898][ T3376] IPVS: starting estimator thread 0... [ 88.746839][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.783902][ T29] audit: type=1400 audit(88.765:3515): avc: denied { getopt } for pid=8171 comm="syz.3.1977" lport=54222 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.868471][ T8163] IPVS: using max 2544 ests per chain, 127200 per kthread [ 88.992988][ T29] audit: type=1400 audit(88.975:3516): avc: denied { sqpoll } for pid=8182 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.249589][ T29] audit: type=1400 audit(89.235:3517): avc: denied { write } for pid=8194 comm="syz.5.1985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.423568][ T8203] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1986'. [ 89.533274][ T29] audit: type=1400 audit(89.515:3518): avc: denied { sys_module } for pid=8206 comm="syz.0.1990" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.907510][ T8220] syzkaller0: entered promiscuous mode [ 89.913347][ T8220] syzkaller0: entered allmulticast mode [ 90.021670][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1995'. [ 90.031697][ T29] audit: type=1400 audit(90.015:3519): avc: denied { mount } for pid=8229 comm="syz.3.1996" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 90.079385][ T29] audit: type=1400 audit(90.015:3520): avc: denied { search } for pid=8229 comm="syz.3.1996" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.101829][ T29] audit: type=1400 audit(90.015:3521): avc: denied { search } for pid=8229 comm="syz.3.1996" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.123340][ T29] audit: type=1400 audit(90.015:3522): avc: denied { read open } for pid=8229 comm="syz.3.1996" path="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.228190][ T8237] loop5: detected capacity change from 0 to 128 [ 90.300745][ T29] audit: type=1401 audit(90.285:3523): op=setxattr invalid_context="" [ 90.475403][ T8266] loop4: detected capacity change from 0 to 2048 [ 90.505256][ T8266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 90.670941][ T8271] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.686791][ T8271] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 682 with max blocks 1646 with error 28 [ 90.699735][ T8271] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.699735][ T8271] [ 90.710220][ T8271] EXT4-fs (loop4): Total free blocks count 0 [ 90.716407][ T8271] EXT4-fs (loop4): Free/Dirty block details [ 90.722522][ T8271] EXT4-fs (loop4): free_blocks=2415919104 [ 90.728522][ T8271] EXT4-fs (loop4): dirty_blocks=2336 [ 90.733933][ T8271] EXT4-fs (loop4): Block reservation details [ 90.740627][ T8271] EXT4-fs (loop4): i_reserved_data_blocks=146 [ 90.948568][ T7199] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 90.973564][ T8292] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 91.305962][ T8314] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 91.314499][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2030'. [ 91.359183][ T8316] loop6: detected capacity change from 0 to 128 [ 91.376176][ T8316] FAT-fs (loop6): Directory bread(block 162) failed [ 91.395165][ T8316] FAT-fs (loop6): Directory bread(block 163) failed [ 91.418372][ T8316] FAT-fs (loop6): Directory bread(block 164) failed [ 91.425087][ T8316] FAT-fs (loop6): Directory bread(block 165) failed [ 91.454317][ T8316] FAT-fs (loop6): Directory bread(block 166) failed [ 91.470781][ T8316] FAT-fs (loop6): Directory bread(block 167) failed [ 91.485058][ T8316] FAT-fs (loop6): Directory bread(block 168) failed [ 91.501351][ T8316] FAT-fs (loop6): Directory bread(block 169) failed [ 91.527786][ T8316] FAT-fs (loop6): Directory bread(block 162) failed [ 91.542433][ T8316] FAT-fs (loop6): Directory bread(block 163) failed [ 91.561135][ T8316] syz.6.2031: attempt to access beyond end of device [ 91.561135][ T8316] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 91.593483][ T8316] syz.6.2031: attempt to access beyond end of device [ 91.593483][ T8316] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 91.761446][ T8331] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 91.781666][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 91.819560][ T8339] loop6: detected capacity change from 0 to 1024 [ 91.826652][ T8339] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 91.836553][ T8339] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 91.848401][ T8339] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 91.861178][ T8339] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.2050: unexpected bad inode w/o EXT4_IGET_BAD [ 91.901024][ T8339] EXT4-fs (loop6): no journal found [ 91.906450][ T8339] EXT4-fs (loop6): can't get journal size [ 91.921329][ T8339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.945092][ T8339] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.2050: Abort forced by user [ 91.962714][ T8339] EXT4-fs (loop6): Remounting filesystem read-only [ 91.969883][ T8339] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 91.994328][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.065549][ T8357] loop6: detected capacity change from 0 to 128 [ 92.134243][ T8360] loop6: detected capacity change from 0 to 2048 [ 92.150470][ T8360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.311822][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.352355][ T8372] loop6: detected capacity change from 0 to 512 [ 92.355257][ T8370] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 92.362621][ T8372] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2053: bg 0: block 131: padding at end of block bitmap is not set [ 92.383455][ T8372] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 92.394090][ T8372] EXT4-fs (loop6): 1 truncate cleaned up [ 92.401059][ T8372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.488873][ T8377] syzkaller0: entered promiscuous mode [ 92.494494][ T8377] syzkaller0: entered allmulticast mode [ 92.922529][ T8400] netlink: 'syz.3.2063': attribute type 6 has an invalid length. [ 93.209123][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.865317][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 93.865330][ T29] audit: type=1400 audit(93.845:3833): avc: denied { ioctl } for pid=8410 comm="syz.6.2068" path="socket:[21479]" dev="sockfs" ino=21479 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.895980][ T8411] syzkaller0: entered promiscuous mode [ 93.895999][ T8411] syzkaller0: entered allmulticast mode [ 93.898035][ T8413] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 93.916196][ T8414] loop4: detected capacity change from 0 to 512 [ 93.942828][ T8414] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2067: iget: bad i_size value: 38620345925642 [ 93.956222][ T8414] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2067: couldn't read orphan inode 15 (err -117) [ 93.970238][ T8414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.055698][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.055749][ T8427] netlink: 'syz.6.2073': attribute type 1 has an invalid length. [ 94.086740][ T8427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.108746][ T29] audit: type=1400 audit(94.075:3834): avc: denied { create } for pid=8429 comm="syz.5.2074" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.130173][ T29] audit: type=1400 audit(94.075:3835): avc: denied { write } for pid=8429 comm="syz.5.2074" name="file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.153295][ T29] audit: type=1400 audit(94.075:3836): avc: denied { open } for pid=8429 comm="syz.5.2074" path="/200/file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.176364][ T29] audit: type=1400 audit(94.075:3837): avc: denied { ioctl } for pid=8429 comm="syz.5.2074" path="/200/file0" dev="tmpfs" ino=1053 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.223633][ T29] audit: type=1326 audit(94.195:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 94.247702][ T29] audit: type=1326 audit(94.195:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 94.271321][ T29] audit: type=1326 audit(94.195:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 94.294525][ T29] audit: type=1326 audit(94.195:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 94.326210][ T8427] bond1 (unregistering): Released all slaves [ 94.345164][ T8444] loop4: detected capacity change from 0 to 512 [ 94.352736][ T8444] EXT4-fs: Ignoring removed oldalloc option [ 94.359554][ T8444] EXT4-fs: inline encryption not supported [ 94.375337][ T29] audit: type=1400 audit(94.355:3842): avc: denied { unlink } for pid=6072 comm="syz-executor" name="file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.411233][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2081'. [ 94.423451][ T8444] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.434346][ T8444] EXT4-fs (loop4): 1 truncate cleaned up [ 94.442152][ T8444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.497240][ T8454] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 94.540793][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.610721][ T8461] loop4: detected capacity change from 0 to 1024 [ 94.646308][ T8461] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 94.657318][ T8461] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 94.684659][ T8461] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 94.700963][ T8461] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.2084: unexpected bad inode w/o EXT4_IGET_BAD [ 94.753511][ T8461] EXT4-fs (loop4): no journal found [ 94.759544][ T8461] EXT4-fs (loop4): can't get journal size [ 94.796417][ T8461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.849484][ T8461] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2084: Abort forced by user [ 94.890716][ T8461] EXT4-fs (loop4): Remounting filesystem read-only [ 94.897374][ T8461] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.923469][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.946644][ T8476] ALSA: seq fatal error: cannot create timer (-19) [ 95.085128][ T8494] SELinux: syz.6.2097 (8494) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 95.124670][ T8498] loop6: detected capacity change from 0 to 512 [ 95.143865][ T8498] EXT4-fs (loop6): 1 orphan inode deleted [ 95.150916][ T8498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.164418][ T7203] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 1 [ 95.178284][ T8502] loop4: detected capacity change from 0 to 4096 [ 95.195484][ T8502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.222074][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.239911][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.713304][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2107'. [ 96.166158][ T8535] bond_slave_1: mtu less than device minimum [ 96.296438][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2124'. [ 96.313075][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2124'. [ 96.376172][ T8562] macvtap0: entered promiscuous mode [ 96.382923][ T8562] macvtap0: left promiscuous mode [ 96.597145][ T8584] syzkaller0: entered promiscuous mode [ 96.602853][ T8584] syzkaller0: entered allmulticast mode [ 97.113702][ T8650] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2168'. [ 97.426219][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 97.692861][ T8699] macvtap0: entered promiscuous mode [ 97.698952][ T8699] macvtap0: left promiscuous mode [ 98.291487][ T8728] syzkaller0: entered allmulticast mode [ 98.738540][ T8762] Falling back ldisc for ttyS3. [ 98.864120][ T8773] SELinux: syz.5.2226 (8773) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.902246][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 98.902261][ T29] audit: type=1400 audit(98.885:4446): avc: denied { read write } for pid=6745 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.922777][ T8778] macvtap0: entered promiscuous mode [ 98.946035][ T29] audit: type=1400 audit(98.895:4447): avc: denied { open } for pid=8777 comm="syz.6.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 98.964659][ T29] audit: type=1400 audit(98.895:4448): avc: denied { execmem } for pid=8772 comm="syz.5.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 98.974598][ T8778] macvtap0: left promiscuous mode [ 98.983208][ T29] audit: type=1400 audit(98.895:4449): avc: denied { create } for pid=8772 comm="syz.5.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 98.983237][ T29] audit: type=1400 audit(98.895:4450): avc: denied { mounton } for pid=8772 comm="syz.5.2226" path="mnt:[4026533480]" dev="nsfs" ino=4026533480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 98.983262][ T29] audit: type=1400 audit(98.925:4451): avc: denied { prog_load } for pid=8775 comm="syz.3.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.983331][ T29] audit: type=1326 audit(98.925:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 98.983428][ T29] audit: type=1326 audit(98.925:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 98.983454][ T29] audit: type=1326 audit(98.925:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 98.983559][ T29] audit: type=1326 audit(98.925:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 99.279186][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2232'. [ 101.512627][ T8901] netlink: 'syz.6.2285': attribute type 4 has an invalid length. [ 101.526743][ T8901] netlink: 'syz.6.2285': attribute type 4 has an invalid length. [ 101.593123][ T8909] syzkaller0: entered promiscuous mode [ 101.599248][ T8909] syzkaller0: entered allmulticast mode [ 101.619845][ T1034] IPVS: starting estimator thread 0... [ 101.626454][ T8907] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 101.711148][ T8922] syzkaller0: entered promiscuous mode [ 101.716855][ T8922] syzkaller0: entered allmulticast mode [ 101.723168][ T8915] IPVS: using max 2544 ests per chain, 127200 per kthread [ 102.677721][ T8974] binfmt_misc: register: failed to install interpreter file ./file2 [ 103.018460][ T9007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2323'. [ 103.909530][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 103.909546][ T29] audit: type=1400 audit(103.895:5205): avc: denied { read write } for pid=6745 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.977693][ T29] audit: type=1400 audit(103.925:5206): avc: denied { execmem } for pid=9061 comm="syz.5.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.999639][ T29] audit: type=1400 audit(103.945:5207): avc: denied { create } for pid=9064 comm="syz.6.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 104.019991][ T29] audit: type=1400 audit(103.945:5208): avc: denied { read write } for pid=9064 comm="syz.6.2349" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.044305][ T29] audit: type=1400 audit(103.945:5209): avc: denied { prog_load } for pid=9064 comm="syz.6.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.063120][ T29] audit: type=1400 audit(103.955:5210): avc: denied { read write } for pid=6745 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.088652][ T29] audit: type=1400 audit(104.075:5211): avc: denied { prog_load } for pid=9066 comm="syz.6.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.107441][ T29] audit: type=1400 audit(104.075:5212): avc: denied { write } for pid=9051 comm="syz.0.2343" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 104.134009][ T29] audit: type=1400 audit(104.075:5213): avc: denied { prog_load } for pid=9066 comm="syz.6.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.154403][ T29] audit: type=1400 audit(104.075:5214): avc: denied { map_create } for pid=9061 comm="syz.5.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.271202][ T9082] netlink: 'syz.3.2354': attribute type 13 has an invalid length. [ 104.333464][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.341035][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.381551][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.393701][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.422294][ T9082] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.431775][ T9082] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.441025][ T9082] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.450066][ T9082] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.889149][ T9123] wg2: left promiscuous mode [ 104.893822][ T9123] wg2: left allmulticast mode [ 104.907056][ T9123] wg2: entered promiscuous mode [ 104.912102][ T9123] wg2: entered allmulticast mode [ 105.806269][ T9141] syzkaller0: entered allmulticast mode [ 106.046804][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.054700][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.190699][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.216466][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.294304][ T9162] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.305793][ T9162] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.315849][ T9162] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.326861][ T9162] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.846331][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'. [ 106.852428][ T9206] netlink: 'syz.6.2401': attribute type 3 has an invalid length. [ 106.872786][ T9206] netlink: 'syz.6.2401': attribute type 3 has an invalid length. [ 106.913572][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'. [ 106.991803][ T9209] syzkaller0: entered allmulticast mode [ 107.223362][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.238356][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.242369][ T9230] netlink: 'syz.4.2412': attribute type 16 has an invalid length. [ 107.253781][ T9230] netlink: 'syz.4.2412': attribute type 17 has an invalid length. [ 107.289149][ T9230] lo: left allmulticast mode [ 107.327369][ T9230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.366301][ T9232] syzkaller0: entered promiscuous mode [ 107.373672][ T9232] syzkaller0: entered allmulticast mode [ 107.586856][ T9267] netlink: 'syz.4.2430': attribute type 27 has an invalid length. [ 107.635657][ T9267] wg2: left promiscuous mode [ 107.641472][ T9267] wg2: left allmulticast mode [ 107.665785][ T9267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.676338][ T9267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.703768][ T9267] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.713076][ T9267] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.722703][ T9267] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.732264][ T9267] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.875233][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 107.901452][ T9283] bridge0: port 3(macvlan2) entered blocking state [ 107.908884][ T9283] bridge0: port 3(macvlan2) entered disabled state [ 107.925475][ T9283] macvlan2: entered allmulticast mode [ 107.930937][ T9283] bridge0: entered allmulticast mode [ 107.938605][ T9283] macvlan2: left allmulticast mode [ 107.943792][ T9283] bridge0: left allmulticast mode [ 108.347997][ T9312] netlink: 'syz.5.2449': attribute type 3 has an invalid length. [ 108.348232][ T9313] netlink: 'syz.4.2448': attribute type 13 has an invalid length. [ 108.357504][ T9312] netlink: 'syz.5.2449': attribute type 3 has an invalid length. [ 108.918764][ T29] kauditd_printk_skb: 935 callbacks suppressed [ 108.918775][ T29] audit: type=1326 audit(108.905:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf94cf58e7 code=0x7ffc0000 [ 108.948906][ T29] audit: type=1326 audit(108.905:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf94c9ab19 code=0x7ffc0000 [ 108.972528][ T29] audit: type=1326 audit(108.905:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faf94cfe929 code=0x7ffc0000 [ 109.001889][ T29] audit: type=1326 audit(108.915:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf94cf58e7 code=0x7ffc0000 [ 109.025708][ T29] audit: type=1326 audit(108.915:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf94c9ab19 code=0x7ffc0000 [ 109.049296][ T29] audit: type=1326 audit(108.915:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faf94cfe929 code=0x7ffc0000 [ 109.072944][ T29] audit: type=1326 audit(108.925:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf94cf58e7 code=0x7ffc0000 [ 109.077345][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2457'. [ 109.096458][ T29] audit: type=1326 audit(108.925:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf94c9ab19 code=0x7ffc0000 [ 109.129803][ T29] audit: type=1326 audit(108.925:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faf94cfe929 code=0x7ffc0000 [ 109.152714][ T29] audit: type=1326 audit(108.935:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf94cf58e7 code=0x7ffc0000 [ 109.464246][ T9356] netlink: 'syz.6.2465': attribute type 13 has an invalid length. [ 109.687875][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.696016][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.900185][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.936098][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.040728][ T9356] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.049914][ T9356] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.059617][ T9356] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.068686][ T9356] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.253184][ T9372] SET target dimension over the limit! [ 110.309851][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 110.798298][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2486'. [ 112.159555][ T9446] $H: renamed from bond0 [ 112.165646][ T9446] $H: entered promiscuous mode [ 112.170797][ T9446] bond_slave_0: entered promiscuous mode [ 112.176514][ T9446] bond_slave_1: entered promiscuous mode [ 112.322080][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'. [ 112.335992][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'. [ 112.872835][ T9482] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 112.889490][ T9482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.903648][ T9482] vlan0: entered allmulticast mode [ 112.909243][ T9482] bond2: entered allmulticast mode [ 113.217434][ T9514] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2538'. [ 113.226602][ T9514] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2538'. [ 113.948773][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 113.948788][ T29] audit: type=1400 audit(113.935:6845): avc: denied { map_create } for pid=9543 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.002030][ T29] audit: type=1400 audit(113.935:6846): avc: denied { prog_load } for pid=9539 comm="syz.0.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.020645][ T29] audit: type=1400 audit(113.965:6847): avc: denied { prog_load } for pid=9543 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.039748][ T29] audit: type=1400 audit(113.965:6848): avc: denied { create } for pid=9543 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 114.060320][ T29] audit: type=1400 audit(113.965:6849): avc: denied { create } for pid=9543 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 114.081264][ T29] audit: type=1400 audit(113.965:6850): avc: denied { append } for pid=9543 comm="syz.3.2551" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 114.104227][ T29] audit: type=1400 audit(113.975:6851): avc: denied { read write } for pid=6745 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.220209][ T29] audit: type=1400 audit(114.015:6852): avc: denied { prog_load } for pid=9548 comm="syz.3.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.241535][ T29] audit: type=1400 audit(114.015:6853): avc: denied { map_create } for pid=9548 comm="syz.3.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.261937][ T29] audit: type=1400 audit(114.015:6854): avc: denied { prog_load } for pid=9548 comm="syz.3.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.131810][ T9610] SELinux: syz.3.2577 (9610) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 115.813817][ T9648] netlink: 'syz.5.2593': attribute type 4 has an invalid length. [ 115.838203][ T9648] netlink: 'syz.5.2593': attribute type 4 has an invalid length. [ 119.157748][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 119.157766][ T29] audit: type=1400 audit(119.115:7525): avc: denied { map_create } for pid=9780 comm="syz.0.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.188311][ T29] audit: type=1400 audit(119.125:7526): avc: denied { prog_load } for pid=9780 comm="syz.0.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.207479][ T29] audit: type=1400 audit(119.125:7527): avc: denied { create } for pid=9780 comm="syz.0.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 119.317798][ T29] audit: type=1400 audit(119.295:7528): avc: denied { map_create } for pid=9782 comm="syz.3.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.336999][ T29] audit: type=1400 audit(119.295:7529): avc: denied { prog_load } for pid=9782 comm="syz.3.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.355472][ T29] audit: type=1400 audit(119.295:7530): avc: denied { prog_load } for pid=9782 comm="syz.3.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.697843][ T29] audit: type=1400 audit(119.675:7531): avc: denied { execmem } for pid=9787 comm="syz.5.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 119.767731][ T29] audit: type=1400 audit(119.685:7532): avc: denied { create } for pid=9790 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 119.787783][ T29] audit: type=1400 audit(119.685:7533): avc: denied { create } for pid=9790 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 119.808002][ T29] audit: type=1400 audit(119.735:7534): avc: denied { map_create } for pid=9787 comm="syz.5.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.944071][ T9803] team0 (unregistering): Port device team_slave_0 removed [ 119.962770][ T9803] team0 (unregistering): Port device team_slave_1 removed [ 119.992674][ T9805] veth3: entered promiscuous mode [ 119.997779][ T9805] veth3: entered allmulticast mode [ 120.303795][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 120.313098][ T9829] hsr_slave_0: left promiscuous mode [ 120.318874][ T9829] hsr_slave_1: left promiscuous mode [ 120.663614][ T9848] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2674'. [ 120.927625][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 120.929328][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 120.962899][ T9870] loop4: detected capacity change from 0 to 512 [ 120.985836][ T9870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.337211][ T9888] random: crng reseeded on system resumption [ 121.974154][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.998057][ T9904] loop4: detected capacity change from 0 to 512 [ 122.120322][ T9904] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.187192][ T9908] loop6: detected capacity change from 0 to 1024 [ 122.209117][ T9904] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2689: corrupted in-inode xattr: overlapping e_value [ 122.335279][ T9908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.356272][ T9904] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2689: couldn't read orphan inode 15 (err -117) [ 122.376629][ T9904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.392067][ T9908] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: comm syz.6.2690: lblock 0 mapped to illegal pblock 0 (length 5) [ 122.405853][ T9908] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 122.418830][ T9908] EXT4-fs (loop6): This should not happen!! Data will be lost [ 122.418830][ T9908] [ 122.442262][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.476542][ T6745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.020235][ T9931] syz.5.2696 (9931): attempted to duplicate a private mapping with mremap. This is not supported. [ 123.162450][ T9934] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.437954][ T9936] Falling back ldisc for ttyS3. [ 123.446535][ T9940] loop6: detected capacity change from 0 to 1024 [ 123.469470][ T9940] EXT4-fs: Ignoring removed orlov option [ 123.475717][ T9940] EXT4-fs: Ignoring removed bh option [ 123.482222][ T9940] EXT4-fs: Mount option(s) incompatible with ext2 [ 123.494113][ T9942] tipc: Enabled bearer , priority 0 [ 123.585098][ T9943] syzkaller0: entered promiscuous mode [ 123.590713][ T9943] syzkaller0: entered allmulticast mode [ 123.634019][ T9942] tipc: Resetting bearer [ 123.640784][ T9941] tipc: Resetting bearer [ 123.652296][ T9941] tipc: Disabling bearer [ 124.577572][ T9960] netlink: 'syz.6.2706': attribute type 4 has an invalid length. [ 124.615204][ T9955] loop4: detected capacity change from 0 to 1024 [ 124.664704][ T9960] netlink: 'syz.6.2706': attribute type 4 has an invalid length. [ 124.692880][ T9955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.799695][ T9955] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: comm syz.4.2704: lblock 0 mapped to illegal pblock 0 (length 5) [ 124.824120][ T9955] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 124.829923][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 124.836471][ T9955] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.836471][ T9955] [ 124.845328][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 124.855781][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 124.855795][ T29] audit: type=1400 audit(124.805:7799): avc: denied { create } for pid=9973 comm="syz.0.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.889792][ T29] audit: type=1400 audit(124.805:7800): avc: denied { connect } for pid=9973 comm="syz.0.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.910090][ T9971] tipc: Started in network mode [ 124.914955][ T9971] tipc: Node identity 8e65b638df77, cluster identity 4711 [ 124.923285][ T9971] tipc: Enabled bearer , priority 0 [ 124.931255][ T9971] syzkaller0: entered promiscuous mode [ 124.936843][ T9971] syzkaller0: entered allmulticast mode [ 124.951684][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 125.013738][ T9971] tipc: Resetting bearer [ 125.045164][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 125.054215][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 125.063509][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 125.065248][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.073718][ T9969] tipc: Resetting bearer [ 125.110468][ T9969] tipc: Disabling bearer [ 125.400510][ T29] audit: type=1400 audit(125.385:7801): avc: denied { create } for pid=9985 comm="syz.3.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.484829][ T29] audit: type=1400 audit(126.465:7802): avc: denied { create } for pid=10004 comm="syz.5.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.509985][T10005] __nla_validate_parse: 3 callbacks suppressed [ 126.510001][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 126.523388][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 126.601429][T10005] hsr_slave_0: left promiscuous mode [ 126.607565][T10005] hsr_slave_1: left promiscuous mode [ 127.831544][T10019] loop4: detected capacity change from 0 to 2048 [ 127.866453][ T29] audit: type=1400 audit(127.845:7803): avc: denied { bind } for pid=10016 comm="syz.0.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.885551][ T29] audit: type=1400 audit(127.845:7804): avc: denied { name_bind } for pid=10016 comm="syz.0.2723" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 127.891558][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 127.906935][ T29] audit: type=1400 audit(127.845:7805): avc: denied { node_bind } for pid=10016 comm="syz.0.2723" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 127.917414][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2724'. [ 127.949484][ T29] audit: type=1400 audit(127.875:7806): avc: denied { create } for pid=10025 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.968638][ T29] audit: type=1400 audit(127.875:7807): avc: denied { ioctl } for pid=10025 comm="syz.0.2726" path="socket:[28013]" dev="sockfs" ino=28013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.992731][ T29] audit: type=1400 audit(127.875:7808): avc: denied { bind } for pid=10025 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.024915][T10019] loop4: p1 < > p4 [ 128.029777][T10019] loop4: p4 size 8388608 extends beyond EOD, truncated [ 128.098066][T10028] loop6: detected capacity change from 0 to 2048 [ 128.144951][T10028] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz.6.2727: iget: bad extended attribute block 281474976710655 [ 128.165150][T10028] EXT4-fs (loop6): get root inode failed [ 128.171135][T10028] EXT4-fs (loop6): mount failed [ 128.415202][T10053] veth0_to_team: left promiscuous mode [ 128.420858][T10053] veth0_to_team: left allmulticast mode [ 128.689990][T10063] hub 6-0:1.0: USB hub found [ 128.694677][T10063] hub 6-0:1.0: 8 ports detected [ 128.736313][ T1034] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 128.744078][ T1034] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 128.752191][ T1034] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 128.838490][ T1034] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 128.935587][T10067] loop6: detected capacity change from 0 to 8192 [ 128.969472][T10075] tipc: Enabled bearer , priority 0 [ 128.994880][T10075] syzkaller0: entered promiscuous mode [ 129.000677][T10075] syzkaller0: entered allmulticast mode [ 129.038639][T10075] tipc: Resetting bearer [ 129.047178][T10072] tipc: Resetting bearer [ 129.128973][T10072] tipc: Disabling bearer [ 129.148758][T10074] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.201600][T10074] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.206793][T10079] loop4: detected capacity change from 0 to 128 [ 129.233162][T10079] vfat: Unknown parameter '' [ 129.272786][T10074] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.285780][T10079] 9pnet: Could not find request transport: rdmam G7=÷5Žm?-]5T: [ 129.387244][T10074] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.625702][T10086] loop4: detected capacity change from 0 to 1024 [ 129.678515][T10086] EXT4-fs: Ignoring removed orlov option [ 129.689417][T10074] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.719633][T10086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.775879][T10074] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.864878][T10074] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.876146][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 129.876159][ T29] audit: type=1400 audit(129.855:7876): avc: denied { create } for pid=10094 comm="syz.6.2748" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.945673][T10074] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.976697][ T29] audit: type=1400 audit(129.955:7877): avc: denied { unlink } for pid=6745 comm="syz-executor" name="file0" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.160815][ T29] audit: type=1400 audit(130.145:7878): avc: denied { ioctl } for pid=10099 comm="syz.5.2749" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.194457][ T29] audit: type=1400 audit(130.175:7879): avc: denied { create } for pid=10098 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.330366][ T29] audit: type=1400 audit(130.195:7880): avc: denied { lock } for pid=10098 comm="+}[@" path="socket:[27642]" dev="sockfs" ino=27642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 130.362822][ T29] audit: type=1326 audit(130.335:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 130.366586][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.385248][ T29] audit: type=1326 audit(130.335:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 130.416194][ T29] audit: type=1326 audit(130.345:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 130.439566][ T29] audit: type=1326 audit(130.345:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 130.462494][ T29] audit: type=1326 audit(130.345:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76b1dce929 code=0x7ffc0000 [ 130.463834][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.540707][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.606850][T10117] netlink: 'syz.4.2753': attribute type 39 has an invalid length. [ 130.704081][T10126] loop4: detected capacity change from 0 to 1024 [ 130.714022][T10126] EXT4-fs: Ignoring removed orlov option [ 130.719904][T10126] EXT4-fs: Ignoring removed bh option [ 130.732867][T10126] EXT4-fs: Mount option(s) incompatible with ext2 [ 130.817175][T10131] netlink: 'syz.0.2755': attribute type 10 has an invalid length. [ 132.433740][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2776'. [ 134.033527][T10202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10202 comm=syz.4.2781 [ 134.046279][T10202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10202 comm=syz.4.2781 [ 134.606878][T10210] loop4: detected capacity change from 0 to 8192 [ 134.679151][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2784'. [ 134.808102][T10210] loop4: p1 < > p2 p4 [ 134.812307][T10210] loop4: partition table partially beyond EOD, truncated [ 134.841228][T10210] loop4: p1 start 408832 is beyond EOD, truncated [ 134.848017][T10210] loop4: p2 size 8388352 extends beyond EOD, truncated [ 135.374614][T10219] loop4: detected capacity change from 0 to 764 [ 135.381446][T10226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2785'. [ 135.393664][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 135.393708][ T29] audit: type=1400 audit(135.375:8049): avc: denied { read } for pid=10225 comm="syz.6.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.418836][ T29] audit: type=1400 audit(135.375:8050): avc: denied { write } for pid=10225 comm="syz.6.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.439510][ T29] audit: type=1400 audit(135.425:8051): avc: denied { mount } for pid=10218 comm="syz.4.2786" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 135.508332][T10219] Symlink component flag not implemented [ 135.514651][T10219] Symlink component flag not implemented [ 135.530343][T10230] pimreg: entered allmulticast mode [ 135.555632][ T29] audit: type=1400 audit(135.445:8052): avc: denied { setopt } for pid=10225 comm="syz.6.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.573527][T10219] Symlink component flag not implemented (129) [ 135.582990][T10219] Symlink component flag not implemented (6) [ 135.590734][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2789'. [ 135.640928][ T29] audit: type=1400 audit(135.575:8053): avc: denied { create } for pid=10231 comm="syz.0.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.660213][ T29] audit: type=1400 audit(135.625:8054): avc: denied { read } for pid=10225 comm="syz.6.2788" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.682991][ T29] audit: type=1400 audit(135.625:8055): avc: denied { open } for pid=10225 comm="syz.6.2788" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.733111][ T29] audit: type=1400 audit(135.715:8056): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 135.777581][ T29] audit: type=1326 audit(135.745:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 135.800826][ T29] audit: type=1326 audit(135.745:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 135.849442][T10238] loop4: detected capacity change from 0 to 512 [ 135.883364][T10238] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.916033][T10238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 135.942578][T10238] System zones: 1-12 [ 135.955555][T10238] EXT4-fs (loop4): 1 truncate cleaned up [ 135.968486][T10238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.022342][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.030681][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.038271][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.045700][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.053164][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.061299][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.068739][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.076185][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.083636][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.091832][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.099379][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.106860][ T1034] hid-generic 0000:0000:0000.0007: reserved main item tag 0xd [ 136.114483][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.121975][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.130046][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.137586][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.145128][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.152657][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.160755][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.168350][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.176103][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.183555][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.191708][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.199237][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.206628][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.214399][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.224392][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 136.290619][ T1034] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.328147][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.336843][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.365173][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.430827][T10255] loop4: detected capacity change from 0 to 1024 [ 136.456143][T10255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.479687][T10255] netlink: 'syz.4.2796': attribute type 10 has an invalid length. [ 136.493118][T10255] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 136.647747][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2797'. [ 136.657479][T10268] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 136.916958][T10255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 136.943382][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2799'. [ 136.953654][T10255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.966495][T10255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 136.966495][T10255] [ 136.976955][T10255] EXT4-fs (loop4): Total free blocks count 0 [ 136.984392][T10255] EXT4-fs (loop4): Free/Dirty block details [ 136.990783][T10255] EXT4-fs (loop4): free_blocks=68451041280 [ 136.997107][T10255] EXT4-fs (loop4): dirty_blocks=16416 [ 137.003132][T10255] EXT4-fs (loop4): Block reservation details [ 137.009714][T10255] EXT4-fs (loop4): i_reserved_data_blocks=1026 [ 137.040120][ T7170] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 137.422168][T10299] vhci_hcd: invalid port number 96 [ 137.427426][T10299] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 137.572030][T10305] netlink: 'syz.6.2812': attribute type 10 has an invalid length. [ 137.588800][T10305] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.667027][T10310] openvswitch: netlink: Message has 6 unknown bytes. [ 138.022231][T10316] hub 8-0:1.0: USB hub found [ 138.027145][T10316] hub 8-0:1.0: 8 ports detected [ 138.222806][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 138.252549][T10320] bond0: (slave bond_slave_0): Releasing backup interface [ 138.311521][T10322] loop4: detected capacity change from 0 to 128 [ 138.421750][T10322] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.478168][T10320] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 138.548003][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.603113][T10326] loop4: detected capacity change from 0 to 512 [ 138.666518][T10326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.706734][T10326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.722201][T10334] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 138.730433][T10334] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 138.772639][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2820'. [ 138.957929][T10346] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.981644][T10340] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.2817: corrupted inode contents [ 139.081592][T10340] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.2817: mark_inode_dirty error [ 139.308584][T10340] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.2817: corrupted inode contents [ 139.366021][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 139.382954][T10340] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.2817: mark_inode_dirty error [ 139.397492][T10340] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.2817: mark inode dirty (error -117) [ 139.400576][T10349] macvtap1: entered promiscuous mode [ 139.415555][T10349] team0: entered promiscuous mode [ 139.423089][T10340] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 139.438793][T10349] team_slave_0: entered promiscuous mode [ 139.444605][T10349] team_slave_1: entered promiscuous mode [ 139.450526][T10349] macvtap1: entered allmulticast mode [ 139.455900][T10349] team0: entered allmulticast mode [ 139.468353][T10349] team_slave_0: entered allmulticast mode [ 139.474236][T10349] team_slave_1: entered allmulticast mode [ 139.481902][T10349] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 139.650654][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.796805][T10357] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2827'. [ 140.400128][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 140.400142][ T29] audit: type=1400 audit(140.385:8318): avc: denied { read write } for pid=10373 comm="syz.0.2842" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.435931][ T29] audit: type=1400 audit(140.385:8319): avc: denied { open } for pid=10373 comm="syz.0.2842" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.471273][ T29] audit: type=1400 audit(140.455:8320): avc: denied { setopt } for pid=10373 comm="syz.0.2842" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.516881][ T29] audit: type=1326 audit(140.495:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.540459][ T29] audit: type=1326 audit(140.495:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.574497][ T29] audit: type=1326 audit(140.525:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.598544][ T29] audit: type=1326 audit(140.525:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.621887][ T29] audit: type=1326 audit(140.525:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.645964][ T29] audit: type=1326 audit(140.525:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.670095][ T29] audit: type=1326 audit(140.525:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.6.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 140.699700][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'. [ 140.718953][T10380] chnl_net:caif_netlink_parms(): no params data found [ 140.751449][T10387] 9pnet_fd: Insufficient options for proto=fd [ 140.910977][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2835'. [ 140.966925][T10402] loop9: detected capacity change from 0 to 7 [ 140.974131][T10402] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.982097][T10402] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.989945][T10402] loop9: unable to read partition table [ 140.995697][T10402] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 140.995697][T10402] ) failed (rc=-5) [ 141.325139][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2843'. [ 141.460547][T10411] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10411 comm=syz.5.2845 [ 141.473172][T10411] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10411 comm=syz.5.2845 [ 141.704852][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.719191][T10425] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 141.727204][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.835809][T10429] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.835830][T10429] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 141.880688][T10433] $H: renamed from bond0 (while UP) [ 141.903016][T10433] $H: entered promiscuous mode [ 141.908807][T10433] bond_slave_0: entered promiscuous mode [ 141.914714][T10433] bond_slave_1: entered promiscuous mode [ 142.421201][T10466] loop4: detected capacity change from 0 to 2048 [ 142.458428][T10466] loop4: p1 < > p4 [ 142.508460][T10466] loop4: p4 size 8388608 extends beyond EOD, truncated [ 142.792863][T10473] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 142.882735][T10476] netlink: 'syz.5.2867': attribute type 13 has an invalid length. [ 142.917198][T10473] SELinux: failed to load policy [ 142.995105][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.002358][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.160065][T10476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.180813][T10476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.237499][T10476] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.246421][T10476] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.255138][T10476] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.264084][T10476] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.365671][T10485] netlink: 'syz.5.2871': attribute type 8 has an invalid length. [ 143.515886][T10489] futex_wake_op: syz.6.2873 tries to shift op by 32; fix this program [ 143.711346][T10500] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 143.717884][T10500] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.725753][T10500] vhci_hcd vhci_hcd.0: Device attached [ 143.733182][T10501] vhci_hcd: connection closed [ 143.733358][ T7200] vhci_hcd: stop threads [ 143.742650][ T7200] vhci_hcd: release socket [ 143.747232][ T7200] vhci_hcd: disconnect device [ 143.824762][T10509] loop4: detected capacity change from 0 to 128 [ 143.869159][T10509] loop9: detected capacity change from 0 to 7 [ 143.875912][T10509] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.884218][T10509] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.893144][T10509] loop9: unable to read partition table [ 143.899264][T10509] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 143.899264][T10509] U) failed (rc=-5) [ 144.811146][T10536] loop4: detected capacity change from 0 to 512 [ 144.842839][T10536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.878503][T10536] EXT4-fs (loop4): 1 truncate cleaned up [ 144.898110][T10536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.007776][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.175518][T10553] SELinux: syz.0.2894 (10553) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.431531][T10562] futex_wake_op: syz.3.2895 tries to shift op by -1; fix this program [ 145.472600][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 145.472615][ T29] audit: type=1400 audit(145.455:8728): avc: denied { write } for pid=10555 comm="syz.3.2895" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 145.586997][T10565] loop4: detected capacity change from 0 to 512 [ 145.683863][T10565] EXT4-fs (loop4): 1 orphan inode deleted [ 145.690409][T10565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.780035][ T29] audit: type=1400 audit(145.765:8729): avc: denied { create } for pid=10563 comm="syz.4.2898" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.801639][T10565] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.2898: iget: bad i_size value: 360287970189639690 [ 145.839386][ T7188] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 145.849199][ T7188] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 1 [ 145.904655][ T29] audit: type=1326 audit(145.885:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 145.928384][ T29] audit: type=1326 audit(145.885:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 145.956775][ T29] audit: type=1326 audit(145.915:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 145.980444][ T29] audit: type=1326 audit(145.915:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 146.003398][ T29] audit: type=1326 audit(145.915:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 146.027902][ T29] audit: type=1326 audit(146.005:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 146.231196][ T29] audit: type=1326 audit(146.215:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 146.255465][T10565] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.2898: iget: bad i_size value: 360287970189639690 [ 146.410237][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.732098][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2902'. [ 146.754147][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2902'. [ 146.902864][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.932442][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.897174][T10611] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 147.903730][T10611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.911195][T10611] vhci_hcd vhci_hcd.0: Device attached [ 147.942348][T10612] vhci_hcd: connection closed [ 147.942503][ T7200] vhci_hcd: stop threads [ 147.952937][ T7200] vhci_hcd: release socket [ 147.957362][ T7200] vhci_hcd: disconnect device [ 148.116301][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'. [ 148.125966][T10615] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 148.134005][T10615] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2912'. [ 148.234238][T10624] wg2: entered promiscuous mode [ 148.239629][T10624] wg2: entered allmulticast mode [ 148.609516][T10635] netlink: 'syz.0.2917': attribute type 8 has an invalid length. [ 148.623837][T10635] mmap: syz.0.2917 (10635): VmData 167489536 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 149.354645][T10655] bridge_slave_0: left allmulticast mode [ 149.361225][T10655] bridge_slave_0: left promiscuous mode [ 149.367031][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.375759][T10655] bridge_slave_1: left allmulticast mode [ 149.381624][T10655] bridge_slave_1: left promiscuous mode [ 149.387450][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.399212][T10655] bond0: (slave bond_slave_0): Releasing backup interface [ 149.412474][T10655] bond0: (slave bond_slave_1): Releasing backup interface [ 149.415905][T10657] 9pnet_fd: Insufficient options for proto=fd [ 149.428453][T10655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.441222][T10655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.600127][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2928'. [ 150.321393][T10690] netlink: 'syz.5.2934': attribute type 3 has an invalid length. [ 150.492507][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 150.492521][ T29] audit: type=1400 audit(668.476:9180): avc: denied { create } for pid=10705 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.518992][ T29] audit: type=1400 audit(668.476:9181): avc: denied { bind } for pid=10705 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.555201][T10706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10706 comm=syz.0.2940 [ 150.579737][T10712] netlink: 'syz.3.2942': attribute type 4 has an invalid length. [ 150.592119][ T29] audit: type=1400 audit(668.536:9182): avc: denied { read } for pid=10705 comm="syz.0.2940" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.615345][ T29] audit: type=1400 audit(668.536:9183): avc: denied { open } for pid=10705 comm="syz.0.2940" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.640977][ T29] audit: type=1326 audit(668.556:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.6.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 150.664031][ T29] audit: type=1326 audit(668.556:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.6.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 150.687067][ T29] audit: type=1400 audit(668.556:9186): avc: denied { sqpoll } for pid=10711 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.736974][T10717] SET target dimension over the limit! [ 150.761678][ T29] audit: type=1326 audit(668.626:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.6.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 150.785073][ T29] audit: type=1326 audit(668.626:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.6.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 150.808530][ T29] audit: type=1326 audit(668.626:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.6.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42043ad290 code=0x7ffc0000 [ 151.218139][T10736] : renamed from vlan1 [ 151.446557][T10741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10741 comm=syz.6.2952 [ 151.818001][T10754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=10754 comm=syz.5.2955 [ 151.834309][T10753] netlink: 'syz.6.2956': attribute type 83 has an invalid length. [ 151.865991][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2958'. [ 151.875236][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2958'. [ 151.957733][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2953'. [ 152.213277][T10767] bridge_slave_0: left allmulticast mode [ 152.219171][T10767] bridge_slave_0: left promiscuous mode [ 152.225235][T10767] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.236982][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'. [ 152.253523][T10767] bridge_slave_1: left allmulticast mode [ 152.259343][T10767] bridge_slave_1: left promiscuous mode [ 152.265412][T10767] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.282839][T10767] bond0: (slave bond_slave_0): Releasing backup interface [ 152.294550][T10767] bond0: (slave bond_slave_1): Releasing backup interface [ 152.309578][T10767] team_slave_0: left promiscuous mode [ 152.315279][T10767] team_slave_0: left allmulticast mode [ 152.335857][T10767] team0: Port device team_slave_0 removed [ 152.343737][T10767] team_slave_1: left promiscuous mode [ 152.349406][T10767] team_slave_1: left allmulticast mode [ 152.357240][T10767] team0: Port device team_slave_1 removed [ 152.366338][T10767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.375691][T10767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.385455][T10772] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.426534][T10775] ALSA: seq fatal error: cannot create timer (-19) [ 152.721943][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2970'. [ 152.868557][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.877377][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.419877][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 153.429587][T10813] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 153.437335][T10813] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2974'. [ 153.740603][T10822] tipc: Enabled bearer , priority 0 [ 153.750483][T10822] tipc: Disabling bearer [ 153.956310][T10831] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.970871][T10831] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 153.982076][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'. [ 154.042797][T10835] 9pnet: Could not find request transport: t[p [ 154.169421][T10838] infiniband syz!: set down [ 154.173975][T10838] infiniband syz!: added team_slave_0 [ 154.185597][T10838] RDS/IB: syz!: added [ 154.190137][T10838] smc: adding ib device syz! with port count 1 [ 154.196421][T10838] smc: ib device syz! port 1 has pnetid [ 154.686561][T10861] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2988'. [ 155.556954][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 155.556970][ T29] audit: type=1400 audit(673.536:9648): avc: denied { mac_admin } for pid=10878 comm="syz.4.2994" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.587136][T10879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2994'. [ 155.619193][ T29] audit: type=1400 audit(673.596:9649): avc: denied { create } for pid=10881 comm="syz.3.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.639663][ T29] audit: type=1400 audit(673.596:9650): avc: denied { connect } for pid=10881 comm="syz.3.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.659362][ T29] audit: type=1400 audit(673.606:9651): avc: denied { create } for pid=10880 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.702433][ T29] audit: type=1400 audit(673.626:9652): avc: denied { ioctl } for pid=10880 comm="syz.5.2995" path="socket:[31531]" dev="sockfs" ino=31531 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.728265][ T29] audit: type=1400 audit(673.646:9653): avc: denied { setopt } for pid=10880 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.747782][ T29] audit: type=1400 audit(673.646:9654): avc: denied { bind } for pid=10880 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.767963][ T29] audit: type=1400 audit(673.646:9655): avc: denied { map } for pid=10880 comm="syz.5.2995" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.791964][ T29] audit: type=1400 audit(673.646:9656): avc: denied { read write } for pid=10880 comm="syz.5.2995" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.817119][ T29] audit: type=1400 audit(673.676:9657): avc: denied { create } for pid=10886 comm="syz.4.2996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.272247][T10910] syzkaller1: entered promiscuous mode [ 156.277894][T10910] syzkaller1: entered allmulticast mode [ 156.710823][T10913] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.719202][T10913] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.727391][T10913] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.735712][T10913] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.763496][T10914] vhci_hcd: invalid port number 96 [ 156.768826][T10914] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 156.777152][T10913] vxlan0: entered promiscuous mode [ 156.994681][T10923] vlan0: entered allmulticast mode [ 156.999906][T10923] $H: entered allmulticast mode [ 157.005029][T10923] bond_slave_0: entered allmulticast mode [ 157.010774][T10923] bond_slave_1: entered allmulticast mode [ 157.330157][T10928] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.337600][T10928] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 157.645277][T10931] __nla_validate_parse: 2 callbacks suppressed [ 157.645297][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3008'. [ 158.993911][T10965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=10965 comm=syz.0.3017 [ 159.257111][T10968] vhci_hcd: invalid port number 23 [ 159.550745][T10984] vhci_hcd: invalid port number 96 [ 159.556018][T10984] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 159.787158][T10994] ALSA: seq fatal error: cannot create timer (-19) [ 160.637855][ T29] kauditd_printk_skb: 3960 callbacks suppressed [ 160.637869][ T29] audit: type=1400 audit(1191.534:13618): avc: denied { read } for pid=11008 comm="syz.6.3028" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.668394][ T29] audit: type=1400 audit(1191.534:13619): avc: denied { open } for pid=11008 comm="syz.6.3028" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.693056][ T29] audit: type=1400 audit(1191.534:13620): avc: denied { ioctl } for pid=11008 comm="syz.6.3028" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.813952][T11019] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=11019 comm=syz.4.3029 [ 161.039240][ T29] audit: type=1400 audit(1191.754:13621): avc: denied { ioctl } for pid=11012 comm="syz.0.3039" path="socket:[33020]" dev="sockfs" ino=33020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.475368][ T29] audit: type=1400 audit(1192.254:13622): avc: denied { setopt } for pid=11023 comm="syz.0.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.494780][ T29] audit: type=1400 audit(1192.254:13623): avc: denied { write } for pid=11023 comm="syz.0.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.838326][ T29] audit: type=1400 audit(1192.694:13624): avc: denied { write } for pid=11030 comm="wg1" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 161.860360][ T29] audit: type=1400 audit(1192.704:13625): avc: denied { setopt } for pid=11030 comm="wg1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.043898][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 162.115278][ T29] audit: type=1326 audit(1193.034:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.4.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 162.138564][ T29] audit: type=1326 audit(1193.034:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.4.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 162.190692][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 162.199665][T11034] netlink: 'syz.4.3034': attribute type 30 has an invalid length. [ 162.270704][T11034] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.279027][T11034] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.287269][T11034] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.295507][T11034] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.386885][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 162.395934][T11034] netlink: 'syz.4.3034': attribute type 30 has an invalid length. [ 162.570403][T11042] vhci_hcd: invalid port number 96 [ 162.575564][T11042] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 162.657077][T11028] wg2: left promiscuous mode [ 162.661765][T11028] wg2: left allmulticast mode [ 162.683735][T11028] wg2: entered promiscuous mode [ 162.688862][T11028] wg2: entered allmulticast mode [ 163.192602][T11054] hub 6-0:1.0: USB hub found [ 163.243020][T11054] hub 6-0:1.0: 8 ports detected [ 163.266261][T11056] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 163.312766][T11064] syzkaller0: entered promiscuous mode [ 163.318379][T11064] syzkaller0: entered allmulticast mode [ 163.444037][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'. [ 163.456128][T11093] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.464479][T11093] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.472742][T11093] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.480990][T11093] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.497184][T11101] vhci_hcd: invalid port number 96 [ 163.502737][T11101] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.519897][T11093] vxlan0: entered promiscuous mode [ 163.552428][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3048'. [ 163.567679][T11104] hsr_slave_0 (unregistering): left promiscuous mode [ 164.125698][T11146] xt_CT: No such helper "pptp" [ 164.375665][T11204] netlink: 'syz.0.3055': attribute type 4 has an invalid length. [ 164.383558][T11204] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3055'. [ 164.399476][T11204] : renamed from bond0 [ 164.716082][T11231] hub 8-0:1.0: USB hub found [ 164.722280][T11231] hub 8-0:1.0: 8 ports detected [ 165.568242][T11255] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.568242][T11255] program syz.0.3063 not setting count and/or reply_len properly [ 165.656352][T11255] 9pnet: Could not find request transport: Xd [ 165.784756][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 165.784787][ T29] audit: type=1400 audit(1196.764:14429): avc: denied { create } for pid=11259 comm="syz.4.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.878605][T11264] sd 0:0:1:0: device reset [ 165.887696][T11260] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 165.913024][ T29] audit: type=1400 audit(1196.804:14430): avc: denied { connect } for pid=11259 comm="syz.4.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.933700][ T29] audit: type=1400 audit(1196.854:14431): avc: denied { ioctl } for pid=11263 comm="syz.5.3066" path="socket:[33394]" dev="sockfs" ino=33394 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.941770][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 165.958353][ T29] audit: type=1400 audit(1196.864:14432): avc: denied { read } for pid=11261 comm="syz.3.3065" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.958387][ T29] audit: type=1400 audit(1196.864:14433): avc: denied { open } for pid=11261 comm="syz.3.3065" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.958426][ T29] audit: type=1400 audit(1196.874:14434): avc: denied { relabelto } for pid=11259 comm="syz.4.3064" name="634" dev="tmpfs" ino=3337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 165.958569][ T29] audit: type=1400 audit(1196.874:14435): avc: denied { associate } for pid=11259 comm="syz.4.3064" name="634" dev="tmpfs" ino=3337 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 165.958598][ T29] audit: type=1400 audit(1196.884:14436): avc: denied { ioctl } for pid=11261 comm="syz.3.3065" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.011062][ T29] audit: type=1400 audit(1196.974:14437): avc: denied { read } for pid=11259 comm="syz.4.3064" path="socket:[33381]" dev="sockfs" ino=33381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 166.128145][T11264] futex_wake_op: syz.5.3066 tries to shift op by 144; fix this program [ 166.140234][ T29] audit: type=1400 audit(1197.124:14438): avc: denied { ioctl } for pid=11259 comm="syz.4.3064" path="socket:[33381]" dev="sockfs" ino=33381 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 166.846820][T11284] program syz.3.3073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.856410][T11284] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 166.884213][T11290] netlink: 'syz.4.3075': attribute type 10 has an invalid length. [ 166.892702][T11290] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3075'. [ 166.904871][T11290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3075'. [ 167.208485][T11301] hub 9-0:1.0: USB hub found [ 167.213322][T11301] hub 9-0:1.0: 8 ports detected [ 167.379520][T11308] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 167.406071][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3079'. [ 167.596497][T11316] Invalid ELF header magic: != ELF [ 167.963271][T11322] sd 0:0:1:0: device reset [ 167.997464][T11324] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.359479][T11322] futex_wake_op: syz.0.3082 tries to shift op by 144; fix this program [ 168.632500][T11335] 9pnet_fd: Insufficient options for proto=fd [ 168.642492][T11338] syzkaller1: entered promiscuous mode [ 168.648151][T11338] syzkaller1: entered allmulticast mode [ 168.958547][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3088'. [ 169.493380][T11344] xt_hashlimit: size too large, truncated to 1048576 [ 169.501159][T11344] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 169.693140][T11349] vlan2: entered allmulticast mode [ 169.698603][T11349] : entered allmulticast mode [ 169.732429][T11351] vhci_hcd: invalid port number 23 [ 170.186741][T11364] netlink: 'syz.4.3094': attribute type 3 has an invalid length. [ 170.451101][ T1034] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 170.458577][ T1034] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 170.466208][ T1034] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 170.484543][ T1034] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 170.502227][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.511239][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.792611][T11391] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 170.792611][T11391] program syz.4.3104 not setting count and/or reply_len properly [ 170.811503][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 170.811519][ T29] audit: type=1326 audit(1201.801:14991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.4.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 170.844731][ T29] audit: type=1326 audit(1201.801:14992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.4.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 171.066707][ T29] audit: type=1326 audit(1202.041:14993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.4.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 171.152565][ T29] audit: type=1326 audit(1202.071:14994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.4.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 171.175937][ T29] audit: type=1326 audit(1202.071:14995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.4.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04340e929 code=0x7ffc0000 [ 171.246842][T11397] batadv_slave_0: entered promiscuous mode [ 171.266115][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3106'. [ 171.289046][T11398] netlink: 'syz.4.3105': attribute type 1 has an invalid length. [ 171.296246][ T29] audit: type=1400 audit(1202.241:14996): avc: denied { lock } for pid=11396 comm="syz.5.3106" path="socket:[32754]" dev="sockfs" ino=32754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 171.296806][T11398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3105'. [ 171.321518][ T29] audit: type=1400 audit(1202.261:14997): avc: denied { read } for pid=11394 comm="syz.4.3105" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.352835][T11397] batadv_slave_0 (unregistering): left promiscuous mode [ 171.360358][T11397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.439574][T11403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.457819][T11403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.292613][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3111'. [ 173.350081][T11421] vhci_hcd: invalid port number 96 [ 173.355258][T11421] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 173.392986][ T29] audit: type=1326 audit(1204.361:14998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.6.3112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42043ae929 code=0x0 [ 173.428319][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 173.453214][ T7202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.551618][ T7202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.628667][ T7202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.669811][ T29] audit: type=1326 audit(1204.641:14999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.0.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf94cfe929 code=0x7ffc0000 [ 173.693569][ T29] audit: type=1326 audit(1204.641:15000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.0.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf94cfe929 code=0x7ffc0000 [ 173.857894][ T7202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.885033][T11443] pim6reg: entered allmulticast mode [ 173.898526][T11443] pim6reg: left allmulticast mode [ 173.919200][T11442] vhci_hcd: invalid port number 96 [ 173.924390][T11442] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 173.949595][T11444] netlink: 'syz.5.3126': attribute type 10 has an invalid length. [ 173.971216][T11444] team0: Port device dummy0 added [ 173.977227][ T7202] bridge_slave_0: left allmulticast mode [ 173.983910][ T7202] bridge_slave_0: left promiscuous mode [ 173.989993][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.991258][T11444] netlink: 'syz.5.3126': attribute type 10 has an invalid length. [ 174.120887][ T7202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.133285][ T7202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.172987][ T7202] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 174.200542][ T7202] bond0 (unregistering): Released all slaves [ 174.227660][ T7202] bond1 (unregistering): Released all slaves [ 174.250150][T11444] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.261151][T11444] team0: Failed to send options change via netlink (err -105) [ 174.269973][T11444] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.285247][T11444] team0: Port device dummy0 removed [ 174.319778][T11444] dummy0: entered promiscuous mode [ 174.328043][T11444] $H: (slave dummy0): Enslaving as an active interface with an up link [ 174.371908][ T7202] tipc: Disabling bearer [ 174.376929][ T7202] tipc: Disabling bearer [ 174.382187][ T7202] tipc: Left network mode [ 174.445976][ T7202] hsr_slave_0: left promiscuous mode [ 174.462193][ T7202] hsr_slave_1: left promiscuous mode [ 174.470240][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.478359][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.500630][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.508792][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.524613][ T7202] veth1_macvtap: left promiscuous mode [ 174.539037][ T7202] veth0_macvtap: left promiscuous mode [ 174.548017][ T7202] veth1_vlan: left promiscuous mode [ 174.563500][ T7202] veth0_vlan: left promiscuous mode [ 174.643155][T11474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3121'. [ 174.674555][T11471] kernel profiling enabled (shift: 17) [ 174.738798][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 174.746345][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 174.914905][T11480] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 175.045459][T11485] netlink: 'syz.3.3125': attribute type 13 has an invalid length. [ 175.115675][T11486] 9pnet_virtio: no channels available for device 127.0.0.1 [ 175.123493][T11486] netlink: 'syz.0.3127': attribute type 13 has an invalid length. [ 175.241097][T11486] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.249585][T11486] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.259303][T11486] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.268918][T11486] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.338805][T11492] xt_hashlimit: max too large, truncated to 1048576 [ 175.583271][T11499] block device autoloading is deprecated and will be removed. [ 175.665004][T11499] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 175.859626][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 175.861075][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 175.861089][ T29] audit: type=1326 audit(1206.841:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 175.869207][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 175.882260][ T29] audit: type=1326 audit(1206.861:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 175.930639][ T29] audit: type=1326 audit(1206.861:15284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 175.953802][ T29] audit: type=1326 audit(1206.861:15285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 175.976890][ T29] audit: type=1326 audit(1206.861:15286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 176.000084][ T29] audit: type=1326 audit(1206.861:15287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42043ae929 code=0x7ffc0000 [ 176.024781][ T29] audit: type=1400 audit(1206.881:15289): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=3331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.047086][ T29] audit: type=1400 audit(1206.881:15290): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop0" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.069960][ T29] audit: type=1400 audit(1206.881:15291): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.092863][ T29] audit: type=1400 audit(1206.881:15292): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=613 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.150677][T11505] loop0: detected capacity change from 0 to 512 [ 176.162114][T11505] ext4: Unknown parameter 'smackfshat' [ 176.338295][T11524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3140'. [ 176.347380][T11524] x_tables: ip_tables: udp match: only valid for protocol 17 [ 176.376694][T11522] netlink: 'syz.5.3135': attribute type 1 has an invalid length. [ 176.384596][T11522] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3135'. [ 176.430032][T11531] netlink: 'syz.3.3141': attribute type 7 has an invalid length. [ 176.477592][T11534] netlink: 'syz.0.3143': attribute type 3 has an invalid length. [ 176.500436][T11534] loop0: detected capacity change from 0 to 512 [ 176.509451][T11534] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.559644][T11534] EXT4-fs (loop0): 1 truncate cleaned up [ 176.622600][T11534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.677943][T11519] xt_CT: No such helper "pptp" [ 176.700075][T11534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.883998][T11553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11553 comm=syz.5.3145 [ 177.056807][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3145'. [ 177.137544][T11555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11555 comm=syz.5.3145 [ 177.235980][T11559] loop0: detected capacity change from 0 to 512 [ 177.242709][T11559] ext4: Unknown parameter 'smackfshat' [ 177.293433][T11554] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.358691][T11554] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.448329][T11554] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.459026][T11561] random: crng reseeded on system resumption [ 177.518845][T11563] IPVS: Error connecting to the multicast addr [ 177.546151][T11521] wg2: entered promiscuous mode [ 177.551347][T11521] wg2: entered allmulticast mode [ 177.569497][T11554] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.606349][T11565] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.614408][T11565] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.626804][T11567] loop0: detected capacity change from 0 to 512 [ 177.652771][T11554] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.669478][T11567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.683698][T11554] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.706093][T11554] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.725611][T11554] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.792569][T11573] netlink: 'syz.6.3153': attribute type 27 has an invalid length. [ 177.896715][T11573] veth3: left promiscuous mode [ 177.901641][T11573] veth3: left allmulticast mode [ 177.909016][T11573] team0: left allmulticast mode [ 177.913897][T11573] team0: left promiscuous mode [ 177.918923][T11573] macvtap1: left promiscuous mode [ 177.924027][T11573] macvtap1: left allmulticast mode [ 177.940335][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.950974][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 177.951004][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 177.951035][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 177.959144][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 178.079033][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.141555][T11575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.205705][T11580] netlink: 'syz.3.3152': attribute type 21 has an invalid length. [ 178.355997][T11586] netlink: 'syz.5.3155': attribute type 7 has an invalid length. [ 178.414707][T11589] geneve1: entered promiscuous mode [ 178.429096][T11589] geneve1 (unregistering): left promiscuous mode [ 178.508165][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.692519][T11608] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.701445][T11610] blktrace: Concurrent blktraces are not allowed on loop10 [ 178.717176][T11608] netlink: 'syz.3.3161': attribute type 13 has an invalid length. [ 178.737600][T11610] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 178.874859][T11619] GUP no longer grows the stack in syz.3.3164 (11619): 200000004000-200000008000 (200000002000) [ 178.885423][T11619] CPU: 1 UID: 0 PID: 11619 Comm: syz.3.3164 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 178.885515][T11619] Tainted: [W]=WARN [ 178.885522][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.885536][T11619] Call Trace: [ 178.885545][T11619] [ 178.885553][T11619] __dump_stack+0x1d/0x30 [ 178.885593][T11619] dump_stack_lvl+0xe8/0x140 [ 178.885664][T11619] dump_stack+0x15/0x1b [ 178.885682][T11619] __get_user_pages+0x199d/0x1fb0 [ 178.885789][T11619] ? __rcu_read_unlock+0x4f/0x70 [ 178.885810][T11619] get_user_pages_remote+0x1dc/0x7a0 [ 178.885849][T11619] __access_remote_vm+0x156/0x560 [ 178.885876][T11619] access_remote_vm+0x32/0x40 [ 178.885898][T11619] proc_pid_cmdline_read+0x30f/0x6a0 [ 178.885934][T11619] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 178.886054][T11619] vfs_readv+0x3fb/0x690 [ 178.886081][T11619] __x64_sys_preadv+0xfd/0x1c0 [ 178.886099][T11619] x64_sys_call+0x1503/0x2fb0 [ 178.886117][T11619] do_syscall_64+0xd2/0x200 [ 178.886146][T11619] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.886213][T11619] ? clear_bhb_loop+0x40/0x90 [ 178.886231][T11619] ? clear_bhb_loop+0x40/0x90 [ 178.886250][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.886269][T11619] RIP: 0033:0x7f76b1dce929 [ 178.886285][T11619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.886374][T11619] RSP: 002b:00007f76b0437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 178.886391][T11619] RAX: ffffffffffffffda RBX: 00007f76b1ff5fa0 RCX: 00007f76b1dce929 [ 178.886402][T11619] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000e [ 178.886413][T11619] RBP: 00007f76b1e50b39 R08: 0000000000000200 R09: 0000000000000000 [ 178.886427][T11619] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 178.886439][T11619] R13: 0000000000000000 R14: 00007f76b1ff5fa0 R15: 00007ffdde3bf7b8 [ 178.886459][T11619] [ 179.235124][T11624] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.247439][T11624] IPVS: Unknown mcast interface: vcan0 [ 179.344242][T11629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.391379][T11629] siw: device registration error -23 [ 180.544922][T11650] __nla_validate_parse: 7 callbacks suppressed [ 180.545002][T11650] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3171'. [ 180.561437][T11650] netlink: 'syz.6.3171': attribute type 9 has an invalid length. [ 180.569339][T11650] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3171'. [ 180.578458][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3171'. [ 180.630431][T11651] hub 1-0:1.0: USB hub found [ 180.635102][T11651] hub 1-0:1.0: 8 ports detected [ 180.711504][T11654] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3172'. [ 180.764900][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 180.822614][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 180.858439][T11660] IPVS: Error connecting to the multicast addr [ 181.066057][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.087551][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.173659][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3176'. [ 181.839477][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 181.839494][ T29] audit: type=1400 audit(1212.821:15621): avc: denied { listen } for pid=11686 comm="syz.3.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.878916][T11687] lo speed is unknown, defaulting to 1000 [ 181.884816][T11687] lo speed is unknown, defaulting to 1000 [ 181.894131][ T29] audit: type=1400 audit(1212.851:15622): avc: denied { accept } for pid=11686 comm="syz.3.3179" lport=32947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.914960][ T29] audit: type=1326 audit(1212.851:15623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.930132][T11691] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3181'. [ 181.938209][ T29] audit: type=1326 audit(1212.851:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.938237][ T29] audit: type=1326 audit(1212.851:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.938263][ T29] audit: type=1326 audit(1212.851:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.938289][ T29] audit: type=1326 audit(1212.851:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.938392][ T29] audit: type=1326 audit(1212.851:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.938416][ T29] audit: type=1326 audit(1212.851:15629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 181.938442][ T29] audit: type=1326 audit(1212.851:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737deee929 code=0x7ffc0000 [ 182.114515][T11687] lo speed is unknown, defaulting to 1000 [ 182.121601][T11687] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 182.131291][T11687] lo speed is unknown, defaulting to 1000 [ 182.137601][T11687] lo speed is unknown, defaulting to 1000 [ 182.144718][T11687] lo speed is unknown, defaulting to 1000 [ 182.158191][T11687] lo speed is unknown, defaulting to 1000 [ 182.200434][T11687] lo speed is unknown, defaulting to 1000 [ 182.206667][T11687] lo speed is unknown, defaulting to 1000 [ 182.297840][T11704] Invalid ELF header magic: != ELF [ 182.364425][T11704] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.449900][T11704] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.501168][T11706] lo speed is unknown, defaulting to 1000 [ 182.574499][T11704] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.735427][T11704] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.756918][T11714] netlink: 'syz.3.3186': attribute type 4 has an invalid length. [ 182.764787][T11714] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3186'. [ 182.782755][T11714] : renamed from $H [ 182.951873][T11704] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.015204][T11704] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.080866][T11704] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.159130][T11704] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.204004][T11700] syz.6.3180 (11700) used greatest stack depth: 5904 bytes left [ 183.274602][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.294573][T11736] random: crng reseeded on system resumption [ 183.330100][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.364845][T11747] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.391520][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 183.449692][T11747] wireguard0: entered promiscuous mode [ 183.474554][T11755] siw: device registration error -23 [ 183.662607][T11771] xt_hashlimit: max too large, truncated to 1048576 [ 184.408146][T11798] Falling back ldisc for ttyS3. [ 185.302556][T11843] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.302556][T11843] program +}[@ not setting count and/or reply_len properly [ 185.444495][T11846] netlink: 'syz.0.3201': attribute type 21 has an invalid length. [ 185.485717][T11829] lo speed is unknown, defaulting to 1000 [ 185.576354][T11848] xt_bpf: check failed: parse error [ 185.767816][T11854] SELinux: failed to load policy [ 185.918817][T11858] __nla_validate_parse: 3 callbacks suppressed [ 185.918834][T11858] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3206'. [ 186.081181][T11867] SELinux: failed to load policy [ 186.178296][T11869] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.186577][T11869] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.194821][T11869] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.203702][T11869] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.212154][T11869] geneve2: entered promiscuous mode [ 186.217458][T11869] geneve2: entered allmulticast mode [ 186.226882][T11869] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.235934][T11869] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.244416][T11869] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.253161][T11869] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.511495][T11875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.543154][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 186.553630][T11875] IPVS: Unknown mcast interface: vcan0 [ 186.577078][T11880] netlink: 'syz.5.3212': attribute type 13 has an invalid length. [ 186.585814][T11880] netlink: 'syz.5.3212': attribute type 17 has an invalid length. [ 186.593673][T11880] netlink: 'syz.5.3212': attribute type 27 has an invalid length. [ 186.605138][T11881] netlink: 'syz.0.3210': attribute type 4 has an invalid length. [ 186.646372][T11879] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 186.653001][T11879] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.660679][T11879] vhci_hcd vhci_hcd.0: Device attached [ 186.714176][T11882] vhci_hcd: connection closed [ 186.714508][ T7199] vhci_hcd: stop threads [ 186.723470][ T7199] vhci_hcd: release socket [ 186.728007][ T7199] vhci_hcd: disconnect device [ 186.743140][T11884] ================================================================== [ 186.751965][T11884] BUG: KCSAN: data-race in do_sendfile / do_sendfile [ 186.758768][T11884] [ 186.761196][T11884] write to 0xffff888104721eb0 of 8 bytes by task 11880 on cpu 0: [ 186.769002][T11884] do_sendfile+0x44d/0x650 [ 186.773424][T11884] __x64_sys_sendfile64+0x105/0x150 [ 186.778641][T11884] x64_sys_call+0xb39/0x2fb0 [ 186.783251][T11884] do_syscall_64+0xd2/0x200 [ 186.787769][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.793669][T11884] [ 186.795996][T11884] write to 0xffff888104721eb0 of 8 bytes by task 11884 on cpu 1: [ 186.803818][T11884] do_sendfile+0x44d/0x650 [ 186.808345][T11884] __x64_sys_sendfile64+0x105/0x150 [ 186.813570][T11884] x64_sys_call+0xb39/0x2fb0 [ 186.818167][T11884] do_syscall_64+0xd2/0x200 [ 186.822785][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.828693][T11884] [ 186.831025][T11884] value changed: 0x0000000000000000 -> 0x0000000000000abb [ 186.838317][T11884] [ 186.840654][T11884] Reported by Kernel Concurrency Sanitizer on: [ 186.847095][T11884] CPU: 1 UID: 0 PID: 11884 Comm: syz.5.3212 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 186.861257][T11884] Tainted: [W]=WARN [ 186.865065][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.875209][T11884] ================================================================== [ 187.438221][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 187.438235][ T29] audit: type=1400 audit(1218.421:16035): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1