last executing test programs: 1m17.70839924s ago: executing program 3 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0xb17b}]}}}]}, 0x3c}}, 0x0) 1m16.782612543s ago: executing program 3 (id=2392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x3}}, 0x2e) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x7ffc, 0x400251}, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000051c0), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000005280)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x97a3}, 0x18) syz_io_uring_setup(0xbc3, 0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x18) 1m16.688956492s ago: executing program 3 (id=2394): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETA(r2, 0x5405, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c01b2645c24430c0ac41c7d66e66540f564160000800000da078fd39f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 1m15.622413969s ago: executing program 3 (id=2405): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES64, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=""/200, 0xc8, 0x0, &(0x7f0000000680)=""/211, 0xd3}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@tracing={r0, 0x1}}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000840)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x4, 0x0, 0x40, 0x74}, {0x5, 0x8, 0x6, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_getres(0x6, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0) r2 = gettid() r3 = syz_clone3(&(0x7f0000000600)={0x80002200, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigaction(0x16, &(0x7f0000000540)={0x0, 0x80000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000004c0)) listen(0xffffffffffffffff, 0x20) tkill(r2, 0x16) capget(&(0x7f00000005c0)={0x20071026, r3}, &(0x7f0000000780)={0x8, 0x5ab9, 0x5fd8, 0xb7, 0x8000, 0x5}) close(0x3) 1m15.335613577s ago: executing program 3 (id=2410): socket$unix(0x1, 0x1, 0x0) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0xfffffffffffffd22) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8007ca, &(0x7f0000000680)={[{@delalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m14.257259744s ago: executing program 3 (id=2419): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x20}}, 0x4000054) 59.160385132s ago: executing program 32 (id=2419): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x20}}, 0x4000054) 3.662435104s ago: executing program 0 (id=3040): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "ff0100", 0x4d, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4e23, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x1, 0x1, 0x75, 0x0, @val=0x80}, "00718c601c4b2710f0b4f03d707ec8d06e0a85d2d6f7e078582820c8a06d675b5d5c73a468d969b269ef4465d109a1c150141c1aee65f3f9e2c24db6d7"}}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000d656da"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x1}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x40802, 0x0) vmsplice(r10, &(0x7f0000000640)=[{&(0x7f00000004c0)="10017996c44bea7b581e49b27055421c47b4b606d4d8dd900a4df00c1eef", 0x1e}], 0x1, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) 2.653017915s ago: executing program 0 (id=3049): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.412128809s ago: executing program 2 (id=3053): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x60}, 0x20) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xc}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xe}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0), 0x6, 0x51c, &(0x7f0000000700)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 1.862681754s ago: executing program 5 (id=3059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='xen_mmu_release_ptpage\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x16, 0x23, 0x10009c, 0xfffffffffffffffe}) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400"], 0x48) 1.735958926s ago: executing program 5 (id=3062): lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x0, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000240)=""/204) close_range(r2, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x1000, 0x55, &(0x7f0000002880)="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", &(0x7f00000000c0)=""/85, 0x80, 0x0, 0x1000, 0x5d, &(0x7f0000003880)="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", &(0x7f0000000340)="f17b2420c19a90c9b7dc64da8e469b39d701cff848e8c8950098d44b3d676b6eff91e7bc14b28917b3e779a61a002d78f1b79af70997517ecfb34781c212644849764ae9ac7da0efdcb282a82a68b628f13ae967bc19885bb346e56bf3", 0x2, 0x0, 0x404f}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x2, 0x1, 0x3, 0x3, 0xbb}, 0x10) close(r11) socket(0x3, 0xa, 0x75a5) 1.663990924s ago: executing program 0 (id=3063): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000000)=0x3e, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r6}, 0x18) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b03000000000000200012800b00010067656e6576250000100002800600054e0600000000060200"], 0x40}}, 0x40800) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1b, 0x80000003, @loopback, 0x80000001}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x0, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4eb010018000000002a5632eb5ffc4b99"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) close_range(r3, 0xffffffffffffffff, 0x400000000000000) socket$igmp(0x2, 0x3, 0x2) 1.663424914s ago: executing program 1 (id=3064): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x6000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x890) io_uring_enter(r3, 0x1b96, 0x106a, 0x22, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 1.614624009s ago: executing program 5 (id=3065): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122009000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002800100"/28], 0x48) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000000000000000000000000000009e810e97ff3ae03d6a4bff7eaa9fe8c93f22c832835514ebdc0093c3223372d202d67a22e7dc372beecce2d92ea783e9e318d08cea8b97508f2676d08594d0fddf62b207560c2b70e405a006f6ba70bb57ccd4c69c7e8349e5be3d4e409aa3264a2dcf284f080e"], 0x50) 1.613605399s ago: executing program 0 (id=3066): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x4, &(0x7f0000000640)=[{0x0, 0x2, 0xee, 0x800}, {0xbb0a, 0x9, 0x1, 0xa6}, {0xe0, 0xf1, 0x2, 0xfffffffb}, {0x9, 0xb, 0x9, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) name_to_handle_at(r8, &(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0xb, 0xfffffffffffffffa, 0x101, 0x1, 0x6, 0xfb}}, &(0x7f0000000600), 0x200) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000140000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0003009078001809c400050200002300000000000002d58838068b91000000"], 0xfd6c) 1.607908379s ago: executing program 2 (id=3067): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x100280, 0x40000000318, 0x0, 0x1, 0xfffffffffffffffe, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1, 0x0, 0x0, 0x48080}, 0x48080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0xffffffffffffff08) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r0], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x28020480) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x4, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xff7f000000000000, 0x0) 1.191132501s ago: executing program 5 (id=3069): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x8, 0x81) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000240)) r3 = semget$private(0x0, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) semop(r3, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5, 0x800}, {0x4, 0x6f, 0x800}], 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r7) 1.150664065s ago: executing program 5 (id=3071): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x622}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x1f, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r2, r5, 0x8f5, 0x100000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x7, '\x00', 0x0, r4, 0x4, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) get_robust_list(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 954.308515ms ago: executing program 4 (id=3074): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400080, 0xb0) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x80000000}], 0x4c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 861.240994ms ago: executing program 4 (id=3075): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2) unshare(0x8000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) unshare(0x2c020400) r4 = creat(0x0, 0x64) write$cgroup_type(r4, &(0x7f0000000000), 0xd4ba103) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 803.03099ms ago: executing program 1 (id=3076): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x80, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x40, 0x2, 0x6}, {0x2, 0x9, 0x6, 0x5}, {0xffff, 0x6, 0x7, 0x7}, {0x8, 0x4, 0x3, 0x3}]}) r1 = getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) keyctl$setperm(0x5, r4, 0x33152000) keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000280)={0x4, 0x800, 0x3}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="0200260a06e781c8236c84a158000243b63517900688f5cd0af096bd2f25bec19c3943414fcac855b42882314a76af19f3745a03c22bb8279363f99d0d1eb4717de32149048706a736e2290ced724e04592ab0f9135bc8918a7d393368b22a6796f25fc69249bd550fab2b09fb655dde10e9d1c5430e9dfcff743b38c735a4a948281c1f80c48f0f83d5113b11910d43fd252ca487a00e41b2d8138a76afa05f71adf2c8b39bf3d4d36ac22a44c1802ab57bbf976edc3cab9e99d319a4a9c6fb0861b1"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe42}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xf}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044801}, 0x4040000) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffb, 0xfffffffc}, 0x0) sendfile(r8, r8, 0x0, 0x800000009) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 758.104124ms ago: executing program 1 (id=3077): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x4, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) connect$inet(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) epoll_create1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 757.429104ms ago: executing program 0 (id=3078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x8400, &(0x7f0000001480)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES8], 0x0, 0x688, &(0x7f0000000100)="$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") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e21, @local}}, 0xa0d, 0x7fffffff, 0x8, 0x6}, &(0x7f0000000080)=0x98) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0x10, 0x2, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000100030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) recvmsg$can_bcm(r7, &(0x7f00000012c0)={&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000c00)=""/203, 0xcb}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/115, 0x73}, {&(0x7f0000000dc0)=""/97, 0x61}, {&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/110, 0x6e}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/116, 0x74}], 0xa, &(0x7f0000001200)=""/163, 0xa3}, 0x81) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x2) fcntl$setlease(r7, 0x400, 0x1) 756.934554ms ago: executing program 1 (id=3079): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019340)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2000000}, 0x18) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 712.331449ms ago: executing program 2 (id=3080): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 711.323509ms ago: executing program 2 (id=3081): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122009000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002800100"/28], 0x48) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000000000000000000000000000009e810e97ff3ae03d6a4bff7eaa9fe8c93f22c832835514ebdc0093c3223372d202d67a22e7dc372beecce2d92ea783e9e318d08cea8b97508f2676d08594d0fddf62b207560c2b70e405a006f6ba70bb57ccd4c69c7e8349e5be3d4e409aa3264a2dcf284f080e"], 0x50) 687.001841ms ago: executing program 4 (id=3082): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@struct={0xc, 0x8, 0x0, 0x4, 0x1, 0x8, [{0x10, 0x4, 0x9}, {0x1, 0x0, 0x7c7}, {0x3, 0x0, 0x13a}, {0xf, 0x5, 0xf9}, {0x10, 0x5, 0x27}, {0x3, 0x2, 0x435}, {0xe, 0x1, 0x1}, {0x8, 0x1, 0x9}]}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x100}, {0xa, 0x2, 0xcfb}, {0x9, 0x800}, {0x6, 0x6, 0x81}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x5998}}, @float={0x4, 0x0, 0x0, 0x10, 0x8}, @func={0xf1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000b00)=""/4086, 0xff, 0xff6, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x4, 0x4, 0x2, 0xe002, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value=r0}, 0x50) creat(&(0x7f0000000840)='./mnt\x00', 0x12) r1 = getpgid(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) syz_open_dev$vcsu(&(0x7f00000007c0), 0xd, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r5 = syz_pidfd_open(r1, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) r9 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x768, 0x3, 0xffffffff, 0xa}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0), 0x2000000}, 0x20) 636.685496ms ago: executing program 4 (id=3083): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c9200, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) open_tree(r3, &(0x7f00000001c0)='./file0\x00', 0x100) ppoll(&(0x7f0000000300)=[{r5}], 0x2b, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @loopback}, r7, 0x4040099d}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 635.562796ms ago: executing program 0 (id=3084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x8000000000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000280)=0xbe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xe200, 0x0) close(0xffffffffffffffff) 589.697691ms ago: executing program 4 (id=3085): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES64], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0xe, &(0x7f0000000440)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000019340000000c0000000400000002000084fdffffff0a00000002000000e26900000100000005000000040000000000000000000001050000002000000000"], 0x0, 0x58}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r5], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x28, 0x3, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0xa8e, 0x0, 0x1ff}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) 291.275161ms ago: executing program 5 (id=3086): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x6000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x890) io_uring_enter(r3, 0x1b96, 0x106a, 0x22, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 290.249041ms ago: executing program 1 (id=3096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8001, 0x8001, @empty, 0x1}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x9, 0x9f, 0x5, 0xdd3f, 0x2, 0xc, 0x4a, 0x101}, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r3], 0x20, 0x2000a8c0}, 0xff0f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 207.683339ms ago: executing program 1 (id=3087): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x11, r0, 0x180000000) gettid() r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="d80000001800010000000000000000000a000000d7da1c8f86e27230d707f84c8ca58f26b94476ba5c9344fce766926870946dbbf21ca365bbfb9deb8c910f740f524b89b74fd617ce18b957e0e6895d1e5917352970acd78a9a2877352496c3b6183afff5d6562f696fd8067990f40966931fb668c8616c479f4a2ad226ea4605613ce14696249441b42ad2050293bff5d390fbdef95698fa7336fdeb55a67e3a1a1ba5d5cf1b1bb119d33647a6b3cccd139e8a62bb92dc804bdbb520d178969a6e3f8e49dfcb16eaa00c00088008000c00", @ANYRES32=r3, @ANYBLOB="2cefecc94812579abfd03ad2474d90b700"/32], 0xd8}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 206.611389ms ago: executing program 4 (id=3098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYRES8=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 117.131988ms ago: executing program 2 (id=3088): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400080, 0xb0) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x80000000}], 0x4c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 0s ago: executing program 2 (id=3089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) io_setup(0x3f, &(0x7f0000000140)=0x0) r4 = timerfd_create(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x4, r4, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x40006, 0x4, 0xfffffff, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8, 0x0, 0x10000001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) kernel console output (not intermixed with test programs): 9467 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 163.198090][ T29] audit: type=1326 audit(1763058022.972:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 163.221695][ T29] audit: type=1326 audit(1763058022.972:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 163.245707][ T29] audit: type=1326 audit(1763058022.972:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 163.301192][ T9466] lo speed is unknown, defaulting to 1000 [ 163.307775][ T9466] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.724026][ T9472] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 163.808338][ T9465] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 164.808357][ T9493] loop3: detected capacity change from 0 to 512 [ 164.871268][ T9493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.888910][ T9495] tipc: Enabled bearer , priority 0 [ 164.906347][ T9495] syzkaller0: entered promiscuous mode [ 164.911914][ T9495] syzkaller0: entered allmulticast mode [ 164.935980][ T9495] tipc: Resetting bearer [ 164.976100][ T9494] tipc: Resetting bearer [ 164.984669][ T9494] tipc: Disabling bearer [ 165.010628][ T9493] siw: device registration error -23 [ 165.106046][ T9503] syzkaller0: entered promiscuous mode [ 165.111608][ T9503] syzkaller0: entered allmulticast mode [ 165.185372][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.306335][ T9509] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 165.409797][ T9514] loop4: detected capacity change from 0 to 512 [ 165.425999][ T9514] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 165.456239][ T9514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 165.470265][ T9514] System zones: 1-12 [ 165.479547][ T9514] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2272: corrupted in-inode xattr: e_value size too large [ 165.509065][ T9514] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2272: couldn't read orphan inode 15 (err -117) [ 165.526652][ T9514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.559607][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.003238][ T9525] loop4: detected capacity change from 0 to 1024 [ 166.012915][ T9525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.043061][ T9525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.112979][ T9535] loop3: detected capacity change from 0 to 164 [ 166.158458][ T9535] lo speed is unknown, defaulting to 1000 [ 166.244260][ T9535] ip6_vti0 speed is unknown, defaulting to 1000 [ 166.306712][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.338377][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.121231][ T9560] netlink: 'syz.0.2286': attribute type 27 has an invalid length. [ 167.135286][ T9560] wg2: left allmulticast mode [ 167.142507][ T9560] veth2: left allmulticast mode [ 167.147715][ T9560] ip6gre1: left allmulticast mode [ 167.153071][ T9560] ip6gre2: left allmulticast mode [ 167.158195][ T9560] veth6: left allmulticast mode [ 167.239738][ T9560] veth9: left promiscuous mode [ 167.266807][ T3410] lo speed is unknown, defaulting to 1000 [ 167.272672][ T3410] syz0: Port: 1 Link DOWN [ 167.292546][ T9561] lo speed is unknown, defaulting to 1000 [ 167.299164][ T9561] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.522708][ T9562] 8021q: adding VLAN 0 to HW filter on device $H [ 167.554520][ T9562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.577523][ T3396] lo speed is unknown, defaulting to 1000 [ 167.583390][ T3396] syz0: Port: 1 Link ACTIVE [ 167.700250][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 167.700297][ T29] audit: type=1400 audit(1763058027.472:10284): avc: denied { create } for pid=9569 comm="syz.0.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.729760][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 167.738804][ T9570] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2288'. [ 167.747952][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 167.756842][ T9570] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2288'. [ 167.784007][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 168.066586][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.213468][ T9578] lo speed is unknown, defaulting to 1000 [ 168.219620][ T9578] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.611837][ T9580] lo speed is unknown, defaulting to 1000 [ 168.618200][ T9580] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.843050][ T9580] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.856569][ T9580] bond2 (unregistering): Released all slaves [ 168.951940][ T9585] loop4: detected capacity change from 0 to 512 [ 169.211384][ T9585] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.226352][ T9587] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 169.239936][ T9589] loop2: detected capacity change from 0 to 512 [ 169.251532][ T9585] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2291: bad orphan inode 131083 [ 169.262911][ T9585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.291630][ T29] audit: type=1400 audit(1763058029.062:10285): avc: denied { cpu } for pid=9590 comm="syz.3.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.315831][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.325844][ T9589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.356083][ T9589] siw: device registration error -23 [ 169.361091][ T9601] tipc: Enabling of bearer rejected, failed to enable media [ 169.431339][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.450303][ T29] audit: type=1400 audit(1763058029.222:10286): avc: denied { connect } for pid=9598 comm="syz.4.2296" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.487111][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 169.487122][ T9618] netlink: 'syz.2.2299': attribute type 3 has an invalid length. [ 169.503915][ T29] audit: type=1400 audit(1763058029.222:10287): avc: denied { write } for pid=9598 comm="syz.4.2296" laddr=fe80::b85c:acff:fe0e:1d79 lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.684639][ T29] audit: type=1400 audit(1763058029.462:10288): avc: denied { bind } for pid=9628 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.706864][ T29] audit: type=1400 audit(1763058029.482:10289): avc: denied { listen } for pid=9628 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.726737][ T29] audit: type=1400 audit(1763058029.482:10290): avc: denied { read } for pid=9628 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.819268][ T9636] blktrace: Concurrent blktraces are not allowed on loop2 [ 169.902152][ T29] audit: type=1400 audit(1763058029.672:10291): avc: denied { read write } for pid=9642 comm="syz.3.2309" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.926696][ T29] audit: type=1400 audit(1763058029.672:10292): avc: denied { open } for pid=9642 comm="syz.3.2309" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.974571][ T29] audit: type=1400 audit(1763058029.732:10293): avc: denied { sqpoll } for pid=9642 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.154275][ T9656] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.166713][ T9656] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 170.197408][ T9656] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 170.624755][ T9684] loop2: detected capacity change from 0 to 128 [ 170.658369][ T9686] loop4: detected capacity change from 0 to 1024 [ 170.665572][ T9686] EXT4-fs: Ignoring removed orlov option [ 170.673394][ T9686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.881177][ T9700] loop2: detected capacity change from 0 to 1024 [ 170.897440][ T9700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.068359][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.140422][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.170334][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 171.328833][ T9716] loop4: detected capacity change from 0 to 512 [ 171.570624][ T9727] netlink: 'syz.1.2335': attribute type 4 has an invalid length. [ 171.578515][ T9727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2335'. [ 171.604454][ T9727] .`: renamed from $H [ 171.609871][ T9729] loop4: detected capacity change from 0 to 512 [ 171.623472][ T9729] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2336: error while reading EA inode 32 err=-116 [ 171.644908][ T9729] EXT4-fs (loop4): Remounting filesystem read-only [ 171.651787][ T9729] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 171.757838][ T9729] EXT4-fs (loop4): 1 orphan inode deleted [ 171.772122][ T9733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.781979][ T9729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.796374][ T9733] batman_adv: batadv0: Removing interface: vxlan0 [ 171.845998][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.002463][ T9742] loop3: detected capacity change from 0 to 1024 [ 172.025692][ T9742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.123255][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.156763][ T9746] loop3: detected capacity change from 0 to 1024 [ 172.194251][ T9746] EXT4-fs: Ignoring removed nobh option [ 172.199877][ T9746] EXT4-fs: Ignoring removed bh option [ 172.253928][ T9746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.308702][ T9754] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 172.311203][ T9758] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.315261][ T9754] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.315336][ T9754] vhci_hcd vhci_hcd.0: Device attached [ 172.327688][ T9758] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 172.352288][ T9759] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2341: Allocating blocks 385-513 which overlap fs metadata [ 172.354379][ T9758] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 172.367940][ T9759] EXT4-fs (loop3): pa ffff88810055d540: logic 16, phys. 129, len 24 [ 172.382494][ T9759] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 172.412938][ T9754] loop2: detected capacity change from 0 to 2048 [ 172.446423][ T9754] Alternate GPT is invalid, using primary GPT. [ 172.452956][ T9754] loop2: p2 p3 p7 [ 172.468836][ T9754] blktrace: Concurrent blktraces are not allowed on loop2p2 [ 172.484182][ T9755] vhci_hcd: connection closed [ 172.484554][ T3723] vhci_hcd: stop threads [ 172.493576][ T3723] vhci_hcd: release socket [ 172.498055][ T3723] vhci_hcd: disconnect device [ 172.523774][ T3426] vhci_hcd: vhci_device speed not set [ 172.654483][ T9771] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 172.688325][ T9774] netlink: 'syz.0.2348': attribute type 10 has an invalid length. [ 172.769922][ T9775] lo speed is unknown, defaulting to 1000 [ 172.776483][ T9775] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.996037][ T9775] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.144503][ T9775] bond2 (unregistering): Released all slaves [ 173.160148][ T9774] $H: (slave dummy0): Enslaving as an active interface with an up link [ 173.304692][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.425267][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 173.434215][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 173.485184][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2356'. [ 173.511530][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'. [ 173.556506][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 173.556524][ T29] audit: type=1326 audit(1763058033.332:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 173.659548][ T29] audit: type=1326 audit(1763058033.362:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 173.683033][ T29] audit: type=1326 audit(1763058033.362:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 173.707368][ T29] audit: type=1326 audit(1763058033.362:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 173.731128][ T29] audit: type=1326 audit(1763058033.362:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 173.755577][ T29] audit: type=1326 audit(1763058033.362:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 173.779192][ T29] audit: type=1326 audit(1763058033.362:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 173.803769][ T29] audit: type=1326 audit(1763058033.362:10513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.1.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 174.635812][ T9800] syzkaller0: entered promiscuous mode [ 174.641455][ T9800] syzkaller0: entered allmulticast mode [ 174.657398][ T9803] lo speed is unknown, defaulting to 1000 [ 174.663582][ T9803] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.664521][ T9806] loop2: detected capacity change from 0 to 512 [ 174.707905][ T9806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2360: error while reading EA inode 32 err=-116 [ 174.737920][ T9806] EXT4-fs (loop2): Remounting filesystem read-only [ 174.807513][ T9806] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 174.826386][ T9806] EXT4-fs (loop2): 1 orphan inode deleted [ 174.836856][ T9806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.890872][ T9817] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2363'. [ 174.900244][ T9817] 0{X: renamed from gretap0 [ 174.907758][ T9817] 0{X: entered allmulticast mode [ 174.915655][ T9817] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 175.024235][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.046838][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'. [ 175.087750][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'. [ 175.315496][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 175.324434][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 175.559647][ T29] audit: type=1400 audit(1763058035.332:10514): avc: denied { watch_reads } for pid=9836 comm="syz.4.2368" path="/495" dev="tmpfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 175.673760][ T9839] lo speed is unknown, defaulting to 1000 [ 175.680601][ T9839] ip6_vti0 speed is unknown, defaulting to 1000 [ 175.932438][ T9839] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 175.944625][ T9839] bond0 (unregistering): Released all slaves [ 176.194894][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'. [ 176.559880][ T9875] loop2: detected capacity change from 0 to 164 [ 176.572303][ T9871] loop4: detected capacity change from 0 to 1024 [ 176.598248][ T9871] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 176.607788][ T9871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.622958][ T29] audit: type=1400 audit(1763058036.392:10515): avc: denied { link } for pid=9869 comm="syz.4.2378" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.639570][ T9871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2378: bg 0: block 88: padding at end of block bitmap is not set [ 176.685989][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.745574][ T9891] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 176.755813][ T9891] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 176.763660][ T9891] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 176.771473][ T9891] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 176.779357][ T9891] netlink: 'syz.0.2384': attribute type 2 has an invalid length. [ 177.512492][ T9908] lo speed is unknown, defaulting to 1000 [ 177.519009][ T9908] ip6_vti0 speed is unknown, defaulting to 1000 [ 177.709801][ T9908] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 177.721587][ T9908] bond1 (unregistering): Released all slaves [ 178.317025][ T9933] lo speed is unknown, defaulting to 1000 [ 178.324334][ T9933] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.399820][ T9940] lo speed is unknown, defaulting to 1000 [ 178.407975][ T9940] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.748250][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 178.748288][ T29] audit: type=1400 audit(1763058038.522:10566): avc: denied { shutdown } for pid=9949 comm="syz.2.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.023164][ T9959] lo speed is unknown, defaulting to 1000 [ 179.029910][ T9959] ip6_vti0 speed is unknown, defaulting to 1000 [ 179.366909][ T9959] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 179.377992][ T9959] bond2 (unregistering): Released all slaves [ 179.608364][ T9973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.702266][ T9975] loop3: detected capacity change from 0 to 512 [ 179.716377][ T9975] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2410: EA inode hash validation failed [ 179.743933][ T9975] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.2410: corrupted inode contents [ 179.771642][ T9975] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.2410: mark_inode_dirty error [ 179.833859][ T9975] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.2410: corrupted inode contents [ 179.846286][ T9975] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.2410: mark_inode_dirty error [ 179.865165][ T9975] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.2410: mark inode dirty (error -117) [ 179.939155][ T9975] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 179.958441][ T29] audit: type=1400 audit(1763058039.692:10567): avc: denied { create } for pid=9970 comm="syz.2.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.014083][ T29] audit: type=1326 audit(1763058039.772:10568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 180.025045][ T9975] EXT4-fs (loop3): 1 orphan inode deleted [ 180.037694][ T29] audit: type=1326 audit(1763058039.772:10569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 180.066794][ T29] audit: type=1400 audit(1763058039.772:10570): avc: denied { create } for pid=9986 comm="syz.4.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.086527][ T29] audit: type=1400 audit(1763058039.772:10571): avc: denied { module_request } for pid=9986 comm="syz.4.2414" kmod="net-pf-10-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.094338][ T9975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.109803][ T29] audit: type=1400 audit(1763058039.782:10572): avc: denied { prog_load } for pid=9979 comm="syz.1.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.109835][ T29] audit: type=1400 audit(1763058039.782:10573): avc: denied { bpf } for pid=9979 comm="syz.1.2413" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.109865][ T29] audit: type=1400 audit(1763058039.782:10574): avc: denied { allowed } for pid=9979 comm="syz.1.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.109894][ T29] audit: type=1400 audit(1763058039.782:10575): avc: denied { create } for pid=9979 comm="syz.1.2413" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.285176][ T9998] lo speed is unknown, defaulting to 1000 [ 180.291426][ T9998] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.877335][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.908392][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.218313][T10031] lo speed is unknown, defaulting to 1000 [ 181.225418][T10031] ip6_vti0 speed is unknown, defaulting to 1000 [ 181.500573][T10031] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 181.512258][T10031] bond2 (unregistering): Released all slaves [ 181.726152][T10040] lo speed is unknown, defaulting to 1000 [ 181.733070][T10040] ip6_vti0 speed is unknown, defaulting to 1000 [ 182.288581][T10038] loop4: detected capacity change from 0 to 8192 [ 182.314664][T10044] __nla_validate_parse: 6 callbacks suppressed [ 182.314683][T10044] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 182.453264][T10052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2430'. [ 182.544520][T10055] syzkaller0: entered promiscuous mode [ 182.550231][T10055] syzkaller0: entered allmulticast mode [ 182.565723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.700256][T10065] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 182.812429][T10065] gretap0: entered promiscuous mode [ 182.857735][T10065] bond2: (slave gretap0): making interface the new active one [ 182.858086][T10065] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 182.887708][T10065] macvlan0: entered promiscuous mode [ 182.887732][T10065] macvlan0: entered allmulticast mode [ 182.888208][T10065] bond2: entered promiscuous mode [ 182.888538][T10065] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 182.889688][T10065] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.889764][T10065] bond2: left promiscuous mode [ 183.119974][T10079] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 183.405055][T10088] tmpfs: Unknown parameter 'context' [ 183.717200][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2449'. [ 183.758975][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 183.758989][ T29] audit: type=1326 audit(1763058043.532:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56a07e6567 code=0x7ffc0000 [ 183.790022][ T29] audit: type=1326 audit(1763058043.572:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a078b779 code=0x7ffc0000 [ 183.815156][ T29] audit: type=1326 audit(1763058043.572:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56a07e6567 code=0x7ffc0000 [ 183.838834][ T29] audit: type=1326 audit(1763058043.572:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a078b779 code=0x7ffc0000 [ 183.863249][ T29] audit: type=1326 audit(1763058043.572:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 183.887824][ T29] audit: type=1326 audit(1763058043.642:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56a07e6567 code=0x7ffc0000 [ 183.911471][ T29] audit: type=1326 audit(1763058043.642:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a078b779 code=0x7ffc0000 [ 183.935778][ T29] audit: type=1326 audit(1763058043.642:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 183.959314][ T29] audit: type=1326 audit(1763058043.662:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56a07e6567 code=0x7ffc0000 [ 183.983615][ T29] audit: type=1326 audit(1763058043.662:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a078b779 code=0x7ffc0000 [ 184.547253][T10121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.724897][T10133] lo speed is unknown, defaulting to 1000 [ 184.731376][T10133] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.969935][T10133] loop4: detected capacity change from 0 to 128 [ 185.022180][T10133] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.035257][T10133] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.352044][T10140] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.542194][T10140] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.567466][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.625343][T10140] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.045446][T10140] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.132940][T10156] lo speed is unknown, defaulting to 1000 [ 186.139749][T10156] ip6_vti0 speed is unknown, defaulting to 1000 [ 186.340344][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2466'. [ 186.375647][ T3684] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.396718][ T3684] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.405109][ T3684] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.413403][ T3684] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.465734][T10164] loop2: detected capacity change from 0 to 512 [ 186.551658][T10166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.552363][T10164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.585152][T10164] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.627749][T10164] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.2468: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 186.658804][T10164] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.2468: directory missing '.' [ 186.716454][T10176] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 186.775214][T10176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2472'. [ 186.806779][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.858811][T10194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2478'. [ 187.973707][T10203] loop4: detected capacity change from 0 to 128 [ 188.075509][T10210] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 188.083414][T10210] FAT-fs (loop4): Filesystem has been set read-only [ 188.130222][T10205] loop2: detected capacity change from 0 to 8192 [ 188.130475][T10210] syz.4.2481: attempt to access beyond end of device [ 188.130475][T10210] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 188.222973][T10210] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 188.230988][T10210] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 188.393913][T10210] syz.4.2481: attempt to access beyond end of device [ 188.393913][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.413800][T10210] syz.4.2481: attempt to access beyond end of device [ 188.413800][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.443844][T10210] syz.4.2481: attempt to access beyond end of device [ 188.443844][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.463864][T10210] syz.4.2481: attempt to access beyond end of device [ 188.463864][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.493843][T10210] syz.4.2481: attempt to access beyond end of device [ 188.493843][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.509209][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.513795][T10210] syz.4.2481: attempt to access beyond end of device [ 188.513795][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.544870][T10210] syz.4.2481: attempt to access beyond end of device [ 188.544870][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.545880][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.743905][T10210] syz.4.2481: attempt to access beyond end of device [ 188.743905][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.758170][T10210] syz.4.2481: attempt to access beyond end of device [ 188.758170][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.898244][T10220] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.911450][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 188.911469][ T29] audit: type=1326 audit(1763058048.682:11322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 188.912874][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 188.917831][ T29] audit: type=1326 audit(1763058048.682:11323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 188.975293][ T29] audit: type=1326 audit(1763058048.682:11324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 188.998974][ T29] audit: type=1326 audit(1763058048.682:11325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.022577][ T29] audit: type=1326 audit(1763058048.682:11326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.046937][ T29] audit: type=1326 audit(1763058048.682:11327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.070514][ T29] audit: type=1326 audit(1763058048.682:11328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.094843][ T29] audit: type=1326 audit(1763058048.682:11329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.118353][ T29] audit: type=1326 audit(1763058048.682:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.142770][ T29] audit: type=1326 audit(1763058048.682:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 189.301834][T10233] lo speed is unknown, defaulting to 1000 [ 189.308064][T10233] ip6_vti0 speed is unknown, defaulting to 1000 [ 190.121102][T10241] loop4: detected capacity change from 0 to 512 [ 190.137752][T10241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.184926][T10241] EXT4-fs (loop4): 1 truncate cleaned up [ 190.191150][T10241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.229339][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.275481][T10248] +: renamed from syzkaller0 [ 190.647472][T10261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.818469][T10256] .`: (slave dummy0): Releasing backup interface [ 190.912264][T10266] lo speed is unknown, defaulting to 1000 [ 190.919069][T10266] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.821812][T10274] netlink: 'syz.2.2504': attribute type 4 has an invalid length. [ 191.855965][T10265] dvmrp1: entered allmulticast mode [ 192.146545][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 192.262620][T10280] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 192.325340][T10283] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.360754][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 192.424929][T10285] loop2: detected capacity change from 0 to 1024 [ 192.445285][T10285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.468054][T10285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2510: bg 0: block 88: padding at end of block bitmap is not set [ 192.576698][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.871206][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 192.901745][T10294] loop4: detected capacity change from 0 to 764 [ 192.937211][T10294] Symlink component flag not implemented [ 192.942933][T10294] Symlink component flag not implemented [ 192.963981][T10294] Symlink component flag not implemented (129) [ 192.970216][T10294] Symlink component flag not implemented (6) [ 192.991789][T10294] rock: directory entry would overflow storage [ 192.998166][T10294] rock: sig=0x4f50, size=4, remaining=3 [ 193.003753][T10294] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 193.831386][T10312] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2519'. [ 194.150836][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 194.150855][ T29] audit: type=1326 audit(1763058053.912:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.181533][ T29] audit: type=1326 audit(1763058053.912:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.205820][ T29] audit: type=1326 audit(1763058053.912:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.230598][ T29] audit: type=1326 audit(1763058053.912:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.254963][ T29] audit: type=1326 audit(1763058053.962:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.348217][T10326] random: crng reseeded on system resumption [ 194.369064][T10326] netlink: 'syz.0.2525': attribute type 10 has an invalid length. [ 194.377700][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2525'. [ 194.408622][ T29] audit: type=1326 audit(1763058054.062:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.432351][ T29] audit: type=1326 audit(1763058054.062:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.456227][ T29] audit: type=1326 audit(1763058054.062:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.480052][ T29] audit: type=1326 audit(1763058054.062:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.503765][ T29] audit: type=1326 audit(1763058054.062:11589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 194.509929][T10326] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 194.559584][T10324] lo speed is unknown, defaulting to 1000 [ 194.565719][T10324] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.608599][T10328] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.620285][T10328] bond2 (unregistering): Released all slaves [ 194.771290][T10337] loop2: detected capacity change from 0 to 8192 [ 194.886630][T10348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2530'. [ 194.948312][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2531'. [ 195.056454][T10361] siw: device registration error -23 [ 195.434913][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 195.583587][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 195.838561][T10374] loop2: detected capacity change from 0 to 128 [ 196.043875][T10375] lo speed is unknown, defaulting to 1000 [ 196.050536][T10375] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.201848][T10375] chnl_net:caif_netlink_parms(): no params data found [ 196.257230][ T4035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.333313][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.340574][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.353618][T10375] bridge_slave_0: entered allmulticast mode [ 196.360462][T10375] bridge_slave_0: entered promiscuous mode [ 196.367140][T10392] netlink: 'syz.2.2540': attribute type 13 has an invalid length. [ 196.427072][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.434212][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.441559][T10375] bridge_slave_1: entered allmulticast mode [ 196.448265][T10375] bridge_slave_1: entered promiscuous mode [ 196.458582][ T3696] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.467927][ T3723] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.483400][ T3723] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.502141][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.512053][ T3723] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.522015][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.540919][ T3688] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.559540][T10375] team0: Port device team_slave_0 added [ 196.566955][T10375] team0: Port device team_slave_1 added [ 196.586253][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.593306][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.619750][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.631545][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.638533][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.664636][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.750515][ T3688] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.764451][T10375] hsr_slave_0: entered promiscuous mode [ 196.771071][T10375] hsr_slave_1: entered promiscuous mode [ 196.829123][ T3688] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.930460][ T3688] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.057634][T10375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.097321][T10375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.191095][ T3688] team0: Port device geneve1 removed [ 197.256076][ T3396] hid_parser_main: 8 callbacks suppressed [ 197.256093][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 197.275104][ T3396] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.595120][ T3688] $H (unregistering): Released all slaves [ 197.605812][ T3688] bond0 (unregistering): (slave veth5): Releasing active interface [ 197.615535][ T3688] bond0 (unregistering): Released all slaves [ 197.623399][T10375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.667056][T10375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.687829][ T3688] tipc: Disabling bearer [ 197.692813][ T3688] tipc: Disabling bearer [ 197.697928][ T3688] tipc: Disabling bearer [ 197.703023][ T3688] tipc: Left network mode [ 197.918168][ T3688] team0 (unregistering): Port device dummy0 removed [ 197.927767][T10448] xt_hashlimit: max too large, truncated to 1048576 [ 197.936119][T10448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.953165][T10375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.966443][T10375] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.977484][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.984595][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.997181][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.004277][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.079652][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.232993][T10375] veth0_vlan: entered promiscuous mode [ 198.242259][T10375] veth1_vlan: entered promiscuous mode [ 198.259341][T10375] veth0_macvtap: entered promiscuous mode [ 198.267589][T10375] veth1_macvtap: entered promiscuous mode [ 198.279332][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.294292][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.306536][ T3702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.318227][T10470] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 198.329438][ T3702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.350457][T10470] SELinux: Context system_u:object is not valid (left unmapped). [ 198.353666][ T3702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.378412][ T3702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.434970][T10475] loop2: detected capacity change from 0 to 2048 [ 198.445600][T10475] ext4: Unknown parameter 'euid<00000000000000000000' [ 198.451783][T10482] syzkaller0: entered promiscuous mode [ 198.458133][T10482] syzkaller0: entered allmulticast mode [ 198.461426][T10475] loop2: detected capacity change from 0 to 512 [ 198.470433][T10475] SELinux: security_context_str_to_sid (sta) failed with errno=-22 [ 198.487631][T10475] loop2: detected capacity change from 0 to 512 [ 198.517600][T10475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.530664][T10475] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.542348][T10485] lo speed is unknown, defaulting to 1000 [ 198.549804][T10485] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.578398][T10489] netlink: 'syz.0.2558': attribute type 10 has an invalid length. [ 198.590176][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.676014][T10489] ipvlan0: entered allmulticast mode [ 198.681469][T10489] veth0_vlan: entered allmulticast mode [ 198.811875][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2569'. [ 199.069375][T10538] smc: net device bond0 applied user defined pnetid SYZ2 [ 199.079108][T10538] smc: net device bond0 erased user defined pnetid SYZ2 [ 199.079250][T10537] loop5: detected capacity change from 0 to 2048 [ 199.106035][T10537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 199.157206][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 199.157221][ T29] audit: type=1326 audit(1763058058.932:12323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1eac46567 code=0x7ffc0000 [ 199.187284][ T29] audit: type=1326 audit(1763058058.942:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1eabeb779 code=0x7ffc0000 [ 199.210972][ T29] audit: type=1326 audit(1763058058.942:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 199.234693][ T29] audit: type=1326 audit(1763058058.962:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1eac46567 code=0x7ffc0000 [ 199.258520][ T29] audit: type=1326 audit(1763058058.962:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1eabeb779 code=0x7ffc0000 [ 199.282111][ T29] audit: type=1326 audit(1763058058.962:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1eac46567 code=0x7ffc0000 [ 199.305635][ T29] audit: type=1326 audit(1763058058.962:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1eabeb779 code=0x7ffc0000 [ 199.329237][ T29] audit: type=1326 audit(1763058058.962:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 199.353019][ T29] audit: type=1326 audit(1763058058.972:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1eac46567 code=0x7ffc0000 [ 199.376561][ T29] audit: type=1326 audit(1763058058.972:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1eabeb779 code=0x7ffc0000 [ 199.508070][T10537] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 199.523315][T10537] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 199.537099][T10537] EXT4-fs (loop5): This should not happen!! Data will be lost [ 199.537099][T10537] [ 199.546846][T10537] EXT4-fs (loop5): Total free blocks count 0 [ 199.552842][T10537] EXT4-fs (loop5): Free/Dirty block details [ 199.558836][T10537] EXT4-fs (loop5): free_blocks=2415919104 [ 199.565971][T10537] EXT4-fs (loop5): dirty_blocks=8208 [ 199.571301][T10537] EXT4-fs (loop5): Block reservation details [ 199.577403][T10537] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 199.598690][T10541] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 199.651844][T10547] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 199.749872][T10554] loop2: detected capacity change from 0 to 512 [ 199.756556][T10554] EXT4-fs: Ignoring removed nobh option [ 199.771490][T10554] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2581: corrupted inode contents [ 199.785987][T10554] EXT4-fs (loop2): Remounting filesystem read-only [ 199.794161][T10554] EXT4-fs (loop2): 1 truncate cleaned up [ 199.800484][T10554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.813144][T10554] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.857309][T10554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.892282][T10561] lo speed is unknown, defaulting to 1000 [ 199.899326][T10561] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.664564][T10574] loop5: detected capacity change from 0 to 128 [ 200.695850][T10574] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 201.039448][T10580] netlink: 'syz.0.2590': attribute type 4 has an invalid length. [ 201.188795][ T3396] lo speed is unknown, defaulting to 1000 [ 201.194700][ T3396] syz0: Port: 1 Link DOWN [ 201.337219][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2596'. [ 201.346261][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2596'. [ 201.355943][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2595'. [ 201.389401][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 201.786970][T10594] loop5: detected capacity change from 0 to 32768 [ 201.810673][T10607] siw: device registration error -23 [ 201.835808][T10594] loop5: p1 p2 p3 < p5 p6 p7 > [ 201.905226][T10594] loop5: p2 size 16775168 extends beyond EOD, truncated [ 201.916275][T10594] loop5: p5 start 4294970168 is beyond EOD, truncated [ 202.072028][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 202.082996][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 202.092943][T10614] hsr_slave_0: left promiscuous mode [ 202.101293][T10614] hsr_slave_1: left promiscuous mode [ 202.128440][T10618] loop5: detected capacity change from 0 to 512 [ 202.168844][T10625] netlink: 'syz.1.2605': attribute type 4 has an invalid length. [ 202.217830][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 202.389704][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 202.414843][ T3723] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.440004][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'. [ 202.449131][ T3723] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.457896][ T3723] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.467507][T10641] $H: (slave dummy0): Releasing backup interface [ 202.476689][T10641] batman_adv: batadv0: Adding interface: dummy0 [ 202.482958][T10641] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 202.502596][T10641] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 202.513051][ T3723] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.545080][T10643] $H: renamed from bond0 (while UP) [ 202.556093][T10643] $H: entered promiscuous mode [ 202.561171][T10643] bond_slave_0: entered promiscuous mode [ 202.566980][T10643] bond_slave_1: entered promiscuous mode [ 202.745392][T10659] loop5: detected capacity change from 0 to 128 [ 202.755486][T10659] netlink: 'syz.5.2617': attribute type 4 has an invalid length. [ 202.848512][T10672] loop2: detected capacity change from 0 to 128 [ 202.879572][T10675] xt_CT: No such helper "pptp" [ 202.889922][T10672] netlink: 'syz.2.2623': attribute type 4 has an invalid length. [ 203.762978][T10669] delete_channel: no stack [ 204.141529][T10721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10721 comm=syz.5.2639 [ 204.196167][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 204.196182][ T29] audit: type=1400 audit(1763058063.972:12707): avc: denied { append } for pid=10708 comm="syz.0.2635" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.229087][T10721] loop5: detected capacity change from 0 to 512 [ 204.235982][T10721] EXT4-fs: Ignoring removed i_version option [ 204.242175][T10721] EXT4-fs: Ignoring removed bh option [ 204.320926][ T29] audit: type=1326 audit(1763058064.092:12708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f56a07ef757 code=0x7ffc0000 [ 204.347668][T10718] loop4: detected capacity change from 0 to 8192 [ 204.388946][ T29] audit: type=1326 audit(1763058064.122:12709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56a07edf10 code=0x7ffc0000 [ 204.414759][ T29] audit: type=1326 audit(1763058064.122:12710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56a07ef2cb code=0x7ffc0000 [ 204.438942][ T29] audit: type=1326 audit(1763058064.132:12711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f56a07ee32a code=0x7ffc0000 [ 204.464578][ T29] audit: type=1326 audit(1763058064.132:12712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f56a07ee32a code=0x7ffc0000 [ 204.488744][ T29] audit: type=1326 audit(1763058064.132:12713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f56a07ede17 code=0x7ffc0000 [ 204.514699][ T29] audit: type=1326 audit(1763058064.132:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f56a07f0e6a code=0x7ffc0000 [ 204.539012][ T29] audit: type=1326 audit(1763058064.132:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56a07edf10 code=0x7ffc0000 [ 204.564856][ T29] audit: type=1326 audit(1763058064.132:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.4.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f56a07ee417 code=0x7ffc0000 [ 204.608683][T10721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.641210][T10721] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.676129][T10727] __nla_validate_parse: 1 callbacks suppressed [ 204.676167][T10727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 204.701972][T10729] loop2: detected capacity change from 0 to 512 [ 204.752141][T10729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.757462][T10721] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.2639: iget: bad i_size value: 2533274857506816 [ 204.764928][T10729] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.790560][T10732] loop4: detected capacity change from 0 to 128 [ 204.801293][T10732] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 204.806829][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.874817][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.886080][T10737] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2645'. [ 204.902654][T10740] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2646'. [ 204.912374][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2646'. [ 205.122917][T10748] netlink: 'syz.1.2657': attribute type 2 has an invalid length. [ 205.277274][T10765] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 205.303301][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 205.395060][T10778] tipc: Started in network mode [ 205.399975][T10778] tipc: Node identity 4, cluster identity 4711 [ 205.406235][T10778] tipc: Node number set to 4 [ 205.429960][T10780] lo speed is unknown, defaulting to 1000 [ 205.436639][T10780] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.069502][T10950] tipc: Started in network mode [ 207.075156][T10950] tipc: Node identity 4, cluster identity 4711 [ 207.081358][T10950] tipc: Node number set to 4 [ 207.136843][T10955] lo speed is unknown, defaulting to 1000 [ 207.156228][T10955] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.047347][T10976] lo speed is unknown, defaulting to 1000 [ 208.053927][T10976] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.213912][T10956] delete_channel: no stack [ 209.167810][T10991] loop2: detected capacity change from 0 to 128 [ 209.204905][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 209.204923][ T29] audit: type=1326 audit(1763058068.982:13302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393ebe6567 code=0x7ffc0000 [ 209.311108][ T29] audit: type=1326 audit(1763058069.012:13303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393eb8b779 code=0x7ffc0000 [ 209.334818][ T29] audit: type=1326 audit(1763058069.012:13304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393ebe6567 code=0x7ffc0000 [ 209.358508][ T29] audit: type=1326 audit(1763058069.012:13305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393eb8b779 code=0x7ffc0000 [ 209.382013][ T29] audit: type=1326 audit(1763058069.012:13306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 209.405610][ T29] audit: type=1326 audit(1763058069.012:13307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 209.429223][ T29] audit: type=1326 audit(1763058069.012:13308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 209.452837][ T29] audit: type=1326 audit(1763058069.012:13309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 209.476410][ T29] audit: type=1326 audit(1763058069.022:13310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 209.499999][ T29] audit: type=1326 audit(1763058069.022:13311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 209.663583][T10991] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.677922][T10991] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.720919][T10991] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2683: No space for directory leaf checksum. Please run e2fsck -D. [ 209.737787][T10991] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2683: checksumming directory block 0 [ 209.806118][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 209.869040][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.250162][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.265398][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.469938][T11042] SELinux: failed to load policy [ 210.562473][T11045] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2697'. [ 210.588986][T11045] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2697'. [ 210.676100][T11047] 9pnet_fd: Insufficient options for proto=fd [ 210.854060][T11055] 9pnet_fd: Insufficient options for proto=fd [ 210.891409][T11057] lo speed is unknown, defaulting to 1000 [ 210.897606][T11057] ip6_vti0 speed is unknown, defaulting to 1000 [ 210.941726][T11058] loop4: detected capacity change from 0 to 512 [ 210.949571][T11058] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 211.150886][T11070] vhci_hcd: invalid port number 0 [ 211.217836][T11070] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2705' sets config #0 [ 211.227322][T11070] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2705' sets config #1 [ 211.231751][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 211.423288][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.437405][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.540687][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 211.559376][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 211.570684][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 211.637202][T11091] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2724'. [ 211.835421][T11104] SET target dimension over the limit! [ 211.860141][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 211.870776][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 212.082221][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.089487][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.125499][T11098] $H: left promiscuous mode [ 212.130326][T11098] bond_slave_0: left promiscuous mode [ 212.137166][T11098] bond_slave_1: left promiscuous mode [ 212.218723][T11098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.229482][T11098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.277965][ T3738] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.288663][ T3738] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.300580][ T3738] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.310484][ T3738] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.346880][T11117] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.414810][T11121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.956160][T11134] loop5: detected capacity change from 0 to 512 [ 212.985359][T11134] ext4: Unknown parameter 'nouser_xattr' [ 213.165835][T11137] loop5: detected capacity change from 0 to 512 [ 213.175350][T11137] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 213.183483][T11137] EXT4-fs (loop5): orphan cleanup on readonly fs [ 213.196777][T11137] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 213.208453][T11137] EXT4-fs (loop5): Remounting filesystem read-only [ 213.215322][T11137] EXT4-fs (loop5): 1 truncate cleaned up [ 213.221581][ T3738] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.232169][ T3738] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.242944][ T3738] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 213.264746][T11137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.390041][T11145] 9p: Unknown access argument 00000000000000000000 : -22 [ 213.423346][T11150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.441290][T11150] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 213.450093][T11150] veth1_vlan: left promiscuous mode [ 213.455470][T11150] veth1_vlan: left allmulticast mode [ 213.461453][T11150] batman_adv: batadv0: Adding interface: veth1_vlan [ 213.469320][T11150] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.496837][T11128] delete_channel: no stack [ 213.501876][T11150] batman_adv: batadv0: Interface activated: veth1_vlan [ 213.554703][T11154] lo speed is unknown, defaulting to 1000 [ 213.561184][T11154] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.245325][T11162] netlink: 'syz.2.2737': attribute type 10 has an invalid length. [ 214.374661][T11162] bridge0: left allmulticast mode [ 214.381069][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 214.381183][ T29] audit: type=1326 audit(1763058074.152:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.387971][T11162] bridge0: entered allmulticast mode [ 214.411622][ T29] audit: type=1326 audit(1763058074.152:13481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.442799][ T29] audit: type=1326 audit(1763058074.192:13482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.442915][ T29] audit: type=1326 audit(1763058074.192:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.442954][ T29] audit: type=1326 audit(1763058074.192:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.443070][ T29] audit: type=1326 audit(1763058074.192:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.443112][ T29] audit: type=1326 audit(1763058074.192:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.443154][ T29] audit: type=1326 audit(1763058074.192:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.443197][ T29] audit: type=1326 audit(1763058074.202:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.443311][ T29] audit: type=1326 audit(1763058074.202:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393ebef6c9 code=0x7ffc0000 [ 214.447734][T11164] Cannot find add_set index 0 as target [ 214.550659][T11162] $H: (slave bridge0): Enslaving as an active interface with an up link [ 214.673909][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.195733][T11183] netlink: 'syz.5.2745': attribute type 4 has an invalid length. [ 215.221186][T11183] netlink: 'syz.5.2745': attribute type 4 has an invalid length. [ 215.346902][T11196] __nla_validate_parse: 1 callbacks suppressed [ 215.346922][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'. [ 215.363121][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.373516][T11196] hsr_slave_1 (unregistering): left promiscuous mode [ 215.381961][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.411484][T11199] hub 1-0:1.0: USB hub found [ 215.424363][T11199] hub 1-0:1.0: 8 ports detected [ 215.451408][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 215.570661][T11205] loop5: detected capacity change from 0 to 1024 [ 215.579791][ T3410] IPVS: starting estimator thread 0... [ 215.591777][T11209] netlink: 'syz.4.2753': attribute type 10 has an invalid length. [ 215.600363][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2753'. [ 215.604106][T11205] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.646895][T11217] tipc: Enabling of bearer rejected, failed to enable media [ 215.712543][T11205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.724819][T11210] IPVS: using max 2016 ests per chain, 100800 per kthread [ 215.734061][T11205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.772745][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.788331][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2758'. [ 215.862845][T11231] loop5: detected capacity change from 0 to 512 [ 215.869977][T11231] EXT4-fs: dax option not supported [ 216.344074][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 216.465520][T11243] vhci_hcd: invalid port number 96 [ 216.470762][T11243] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 216.513804][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2764'. [ 216.524342][T11247] IPVS: Error connecting to the multicast addr [ 216.533129][T11247] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2764'. [ 216.542963][T11247] 0{X: renamed from gretap0 [ 216.551284][T11247] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 217.138624][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'. [ 217.168866][T11271] netlink: 'syz.0.2771': attribute type 10 has an invalid length. [ 217.176976][T11271] batman_adv: batadv0: Removing interface: dummy0 [ 217.186402][T11271] netlink: 'syz.0.2771': attribute type 10 has an invalid length. [ 217.197427][T11271] $H: (slave dummy0): Enslaving as an active interface with an up link [ 217.229644][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2772'. [ 217.286369][T11273] hub 1-0:1.0: USB hub found [ 217.298480][T11273] hub 1-0:1.0: 8 ports detected [ 217.533429][T11287] tipc: Enabled bearer , priority 0 [ 217.540456][T11287] syzkaller0: entered promiscuous mode [ 217.540966][T11289] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 217.547772][T11287] syzkaller0: entered allmulticast mode [ 217.564168][T11287] tipc: Resetting bearer [ 217.570691][T11286] tipc: Resetting bearer [ 217.578857][T11286] tipc: Disabling bearer [ 217.753419][T11301] lo speed is unknown, defaulting to 1000 [ 217.761335][T11301] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.798065][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2783'. [ 217.850651][T11309] netlink: 'syz.5.2783': attribute type 10 has an invalid length. [ 217.860830][T11309] team0: Port device dummy0 added [ 217.867603][T11306] netlink: 'syz.5.2783': attribute type 10 has an invalid length. [ 217.878383][T11306] team0: Port device dummy0 removed [ 217.885951][T11306] $H: (slave dummy0): Enslaving as an active interface with an up link [ 217.920586][T11312] loop5: detected capacity change from 0 to 1024 [ 217.927631][T11312] EXT4-fs: Ignoring removed orlov option [ 217.937685][T11312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.984578][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.026044][T11316] team0 (unregistering): Failed to send options change via netlink (err -105) [ 218.043922][T11316] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 218.063998][T11316] team0 (unregistering): Port device team_slave_0 removed [ 218.079261][T11316] team0 (unregistering): Failed to send options change via netlink (err -105) [ 218.099418][T11316] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 218.111273][T11316] team0 (unregistering): Port device team_slave_1 removed [ 218.122270][T11318] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.136888][ T2967] IPVS: starting estimator thread 0... [ 218.192300][T11323] lo speed is unknown, defaulting to 1000 [ 218.216750][T11323] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.223835][T11321] IPVS: using max 2352 ests per chain, 117600 per kthread [ 218.267382][T11326] lo speed is unknown, defaulting to 1000 [ 218.332324][T11336] Cannot find add_set index 0 as target [ 218.351552][T11326] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.543373][T11349] SELinux: failed to load policy [ 219.485348][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 219.485365][ T29] audit: type=1326 audit(1763058079.262:13727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.542151][T11375] netlink: 'syz.5.2804': attribute type 21 has an invalid length. [ 219.591589][ T29] audit: type=1326 audit(1763058079.292:13728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.616975][ T29] audit: type=1326 audit(1763058079.292:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.640722][ T29] audit: type=1326 audit(1763058079.292:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.665136][ T29] audit: type=1326 audit(1763058079.292:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.688712][ T29] audit: type=1326 audit(1763058079.292:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.713162][ T29] audit: type=1326 audit(1763058079.292:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf02f6c9 code=0x7ffc0000 [ 219.737588][ T29] audit: type=1326 audit(1763058079.292:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9bf0315e7 code=0x7ffc0000 [ 219.761347][ T29] audit: type=1326 audit(1763058079.292:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa9bf03155c code=0x7ffc0000 [ 219.785834][ T29] audit: type=1326 audit(1763058079.292:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa9bf031494 code=0x7ffc0000 [ 219.905309][T11385] hub 1-0:1.0: USB hub found [ 219.910155][T11385] hub 1-0:1.0: 8 ports detected [ 219.949377][T11389] lo speed is unknown, defaulting to 1000 [ 219.968869][T11389] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.107112][T11394] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.517471][T11398] loop5: detected capacity change from 0 to 512 [ 220.536594][T11398] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2809: bg 0: block 248: padding at end of block bitmap is not set [ 220.641692][T11398] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2809: Failed to acquire dquot type 1 [ 220.675130][T11398] EXT4-fs (loop5): 1 truncate cleaned up [ 220.680864][T11406] lo speed is unknown, defaulting to 1000 [ 220.681232][T11398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.701985][T11406] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.724491][T11398] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.830182][T11415] lo speed is unknown, defaulting to 1000 [ 220.847460][T11415] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.947052][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.962622][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.973229][ T3688] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 1 [ 220.991066][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.204400][T11427] __nla_validate_parse: 5 callbacks suppressed [ 221.204419][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2817'. [ 221.387805][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 221.416763][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 221.513155][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2821'. [ 221.533900][T11438] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2821' sets config #0 [ 221.552236][T11438] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2821' sets config #1 [ 222.546612][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2830'. [ 222.632810][T11467] lo speed is unknown, defaulting to 1000 [ 222.656644][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 222.666331][T11467] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.844050][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'. [ 222.905363][T11482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2833'. [ 223.341940][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'. [ 224.093141][T11510] lo speed is unknown, defaulting to 1000 [ 224.146534][T11510] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.215662][T11513] netlink: 'syz.1.2843': attribute type 12 has an invalid length. [ 224.513095][T11528] futex_wake_op: +}[@ tries to shift op by -1; fix this program [ 224.546695][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.570853][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.604947][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.642002][T11515] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 224.668911][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.678120][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.685350][ T29] kauditd_printk_skb: 915 callbacks suppressed [ 224.685366][ T29] audit: type=1400 audit(1763058084.452:14649): avc: denied { mount } for pid=11531 comm="syz.2.2848" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.721239][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.728459][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.735141][T11515] wg1 speed is unknown, defaulting to 1000 [ 224.752754][ T29] audit: type=1326 audit(1763058084.522:14650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.796130][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2851'. [ 224.806750][ T29] audit: type=1326 audit(1763058084.522:14651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.830401][ T29] audit: type=1326 audit(1763058084.522:14652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.855528][ T29] audit: type=1326 audit(1763058084.522:14653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.879368][ T29] audit: type=1326 audit(1763058084.522:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.904403][ T29] audit: type=1326 audit(1763058084.522:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.928759][ T29] audit: type=1326 audit(1763058084.522:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.952438][ T29] audit: type=1326 audit(1763058084.522:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 224.977541][ T29] audit: type=1326 audit(1763058084.522:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eac4f6c9 code=0x7ffc0000 [ 225.041813][T11536] loop5: detected capacity change from 0 to 512 [ 225.103628][T11536] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 225.113802][T11536] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.120587][T11542] netlink: 'syz.0.2851': attribute type 10 has an invalid length. [ 225.129873][T11536] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2850: corrupted inode contents [ 225.149408][T11536] EXT4-fs (loop5): Remounting filesystem read-only [ 225.156174][T11536] EXT4-fs (loop5): 1 truncate cleaned up [ 225.167561][T11542] $H: (slave dummy0): Releasing backup interface [ 225.174473][ T3688] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 225.185118][ T3688] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 225.197832][ T3688] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 225.208454][T11536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.221366][T11536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.237917][T11547] netlink: 'syz.0.2851': attribute type 10 has an invalid length. [ 225.260492][T11536] lo speed is unknown, defaulting to 1000 [ 225.266816][T11536] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.306018][T11536] wg1 speed is unknown, defaulting to 1000 [ 225.427648][T11547] $H: (slave dummy0): Enslaving as an active interface with an up link [ 225.541909][T11560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.549963][T11560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.690514][T11567] syzkaller0: entered promiscuous mode [ 225.696304][T11567] syzkaller0: entered allmulticast mode [ 226.002849][T11571] lo speed is unknown, defaulting to 1000 [ 226.009534][T11571] ip6_vti0 speed is unknown, defaulting to 1000 [ 226.074798][T11571] wg1 speed is unknown, defaulting to 1000 [ 226.985697][T11577] lo speed is unknown, defaulting to 1000 [ 226.992110][T11577] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.055881][T11577] wg1 speed is unknown, defaulting to 1000 [ 227.102229][T11582] wg2: left allmulticast mode [ 227.288626][T11587] lo speed is unknown, defaulting to 1000 [ 227.294837][T11587] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.361325][T11587] wg1 speed is unknown, defaulting to 1000 [ 227.764411][T11588] lo speed is unknown, defaulting to 1000 [ 227.778548][T11588] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.899116][T11588] wg1 speed is unknown, defaulting to 1000 [ 228.025267][T11607] lo speed is unknown, defaulting to 1000 [ 228.031465][T11607] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.081540][T11607] wg1 speed is unknown, defaulting to 1000 [ 228.386732][T11621] .`: (slave bond_slave_0): Releasing backup interface [ 228.395759][T11621] .`: (slave bond_slave_1): Releasing backup interface [ 228.407125][T11621] bond1: (slave bridge4): Releasing backup interface [ 228.414812][T11621] bridge4: left promiscuous mode [ 228.420150][T11621] bridge4: left allmulticast mode [ 228.445210][T11621] bond2: (slave gretap0): Releasing active interface [ 228.520123][T11628] lo: left allmulticast mode [ 228.526465][T11628] tunl0: left allmulticast mode [ 228.531478][T11628] gre0: left allmulticast mode [ 228.536350][T11628] gretap0: left allmulticast mode [ 228.541514][T11628] erspan0: left allmulticast mode [ 228.546656][T11628] ip_vti0: left allmulticast mode [ 228.551745][T11628] ip6_vti0: left allmulticast mode [ 228.558481][T11628] sit0: left allmulticast mode [ 228.563409][T11628] ip6tnl0: left allmulticast mode [ 228.568558][T11628] ip6gre0: left allmulticast mode [ 228.573771][T11628] ip6gretap0: left allmulticast mode [ 228.579134][T11628] bridge0: left allmulticast mode [ 228.586041][T11628] vcan0: left allmulticast mode [ 228.590987][T11628] bond0: left allmulticast mode [ 228.596011][T11628] team0: left allmulticast mode [ 228.649444][T11628] dummy0: left allmulticast mode [ 228.656218][T11628] nlmon0: left allmulticast mode [ 228.661288][T11628] caif0: left allmulticast mode [ 228.666702][T11628] veth0: left allmulticast mode [ 228.671653][T11628] veth1: left allmulticast mode [ 228.676772][T11628] wg0: left allmulticast mode [ 228.681530][T11628] wg1: left allmulticast mode [ 228.708983][T11628] wg2: left promiscuous mode [ 228.713649][T11628] wg2: left allmulticast mode [ 228.729860][T11628] veth0_to_bridge: left allmulticast mode [ 228.735832][T11628] bridge_slave_0: left allmulticast mode [ 228.741707][T11628] veth1_to_bridge: left allmulticast mode [ 228.749082][T11628] bridge_slave_1: left allmulticast mode [ 228.754951][T11628] veth0_to_bond: left allmulticast mode [ 228.760748][T11628] bond_slave_0: left allmulticast mode [ 228.766369][T11628] veth1_to_bond: left allmulticast mode [ 228.772070][T11628] bond_slave_1: left allmulticast mode [ 228.779100][T11628] veth0_to_team: left allmulticast mode [ 228.784971][T11628] team_slave_0: left allmulticast mode [ 228.790614][T11628] veth0_to_batadv: left allmulticast mode [ 228.796461][T11628] batadv_slave_0: left allmulticast mode [ 228.802212][T11628] veth1_to_batadv: left allmulticast mode [ 228.809434][T11628] batadv_slave_1: left allmulticast mode [ 228.815168][T11628] xfrm0: left allmulticast mode [ 228.820230][T11628] veth0_to_hsr: left allmulticast mode [ 228.825821][T11628] hsr_slave_0: left allmulticast mode [ 228.831453][T11628] veth1_virt_wifi: left allmulticast mode [ 228.838589][T11628] veth0_virt_wifi: left allmulticast mode [ 228.844840][T11628] geneve0: left allmulticast mode [ 228.849982][T11628] geneve1: left allmulticast mode [ 228.855174][T11628] bridge1: left allmulticast mode [ 228.860351][T11628] bridge2: left allmulticast mode [ 228.866949][T11628] bridge3: left allmulticast mode [ 228.872102][T11628] bridge4: left allmulticast mode [ 228.877248][T11628] bridge5: left allmulticast mode [ 228.882434][T11628] bridge6: left allmulticast mode [ 228.887663][T11628] bond1: left allmulticast mode [ 228.892620][T11628] bridge7: left allmulticast mode [ 229.091148][T11653] netlink: 'syz.2.2882': attribute type 10 has an invalid length. [ 229.099067][T11653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2882'. [ 229.331776][T11657] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 229.331776][T11657] The task syz.0.2883 (11657) triggered the difference, watch for misbehavior. [ 229.437707][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2883'. [ 229.507923][T11646] $H: (slave bridge0): Releasing backup interface [ 229.516078][T11646] bridge0: left allmulticast mode [ 229.522641][T11646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.665378][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 230.189603][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 230.189639][ T29] audit: type=1326 audit(1763058089.962:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.230114][ T29] audit: type=1326 audit(1763058089.982:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.248033][T11677] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 230.255345][ T29] audit: type=1326 audit(1763058089.982:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.288079][ T29] audit: type=1326 audit(1763058089.982:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.312545][ T29] audit: type=1326 audit(1763058089.982:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.336306][ T29] audit: type=1326 audit(1763058089.992:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.361626][ T29] audit: type=1326 audit(1763058089.992:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.386675][ T29] audit: type=1326 audit(1763058089.992:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.410381][ T29] audit: type=1326 audit(1763058089.992:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.435586][ T29] audit: type=1326 audit(1763058089.992:15223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 230.595728][T11683] Set syz1 is full, maxelem 6117 reached [ 230.823660][T11696] lo speed is unknown, defaulting to 1000 [ 230.831892][T11696] ip6_vti0 speed is unknown, defaulting to 1000 [ 230.905279][T11696] wg1 speed is unknown, defaulting to 1000 [ 232.125702][T11712] lo speed is unknown, defaulting to 1000 [ 232.132433][T11712] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.201239][T11712] wg1 speed is unknown, defaulting to 1000 [ 233.557649][T11751] lo speed is unknown, defaulting to 1000 [ 233.583225][T11753] loop5: detected capacity change from 0 to 2048 [ 233.591696][T11751] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.627294][T11753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.663822][T11753] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.679485][T11751] wg1 speed is unknown, defaulting to 1000 [ 233.794313][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.808383][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.820838][T11753] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2911: bg 0: block 345: padding at end of block bitmap is not set [ 233.836994][T11753] EXT4-fs (loop5): Remounting filesystem read-only [ 233.851295][T11763] pim6reg: entered allmulticast mode [ 234.065164][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2911'. [ 234.110722][T11765] pim6reg: left allmulticast mode [ 235.030299][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.068285][T11783] netlink: 'syz.2.2920': attribute type 10 has an invalid length. [ 235.735608][T11799] netlink: 'syz.2.2924': attribute type 12 has an invalid length. [ 235.882749][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 235.918564][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 235.918978][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 235.925609][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 236.035694][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 236.035712][ T29] audit: type=1326 audit(1763058095.812:15963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.036787][ T29] audit: type=1326 audit(1763058095.812:15964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.037115][ T29] audit: type=1326 audit(1763058095.812:15965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.037378][ T29] audit: type=1326 audit(1763058095.812:15966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.037622][ T29] audit: type=1326 audit(1763058095.812:15967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.037895][ T29] audit: type=1326 audit(1763058095.812:15968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.038105][ T29] audit: type=1326 audit(1763058095.812:15969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.038364][ T29] audit: type=1326 audit(1763058095.812:15970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.038472][ T29] audit: type=1326 audit(1763058095.812:15971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.038675][ T29] audit: type=1326 audit(1763058095.812:15972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 236.722197][T11802] netlink: 'syz.0.2925': attribute type 3 has an invalid length. [ 236.870139][T11831] loop5: detected capacity change from 0 to 512 [ 236.899232][T11831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.921595][T11831] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 236.939449][T11838] SELinux: Context ׸X7dQYI{CpUhٻ r: is not valid (left unmapped). [ 236.975530][T11831] EXT4-fs (loop5): 1 truncate cleaned up [ 236.981700][T11831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.321224][T11850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2938'. [ 237.841874][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.902010][T11866] loop5: detected capacity change from 0 to 512 [ 237.944170][T11866] EXT4-fs: Ignoring removed i_version option [ 237.950312][T11866] EXT4-fs: Ignoring removed bh option [ 237.997172][T11866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.014971][T11866] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.305752][T11885] lo speed is unknown, defaulting to 1000 [ 238.312298][T11885] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.380607][T11885] wg1 speed is unknown, defaulting to 1000 [ 238.491169][T11889] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2946'. [ 238.520850][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 238.564360][T11890] netlink: 'syz.2.2945': attribute type 3 has an invalid length. [ 238.847143][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.952923][T11905] pim6reg: entered allmulticast mode [ 239.140575][T11915] lo speed is unknown, defaulting to 1000 [ 239.148076][T11915] ip6_vti0 speed is unknown, defaulting to 1000 [ 239.211584][T11915] wg1 speed is unknown, defaulting to 1000 [ 239.275876][T11916] lo speed is unknown, defaulting to 1000 [ 239.282331][T11916] ip6_vti0 speed is unknown, defaulting to 1000 [ 239.345640][T11916] wg1 speed is unknown, defaulting to 1000 [ 240.740067][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 240.749040][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 240.849471][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2954'. [ 241.043736][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 241.043754][ T29] audit: type=1326 audit(1763058100.812:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.151851][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2956'. [ 241.275176][T11925] 9p: Unknown access argument o: -22 [ 241.321945][ T29] audit: type=1326 audit(1763058100.852:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.346485][T11923] netem: change failed [ 241.351974][ T29] audit: type=1326 audit(1763058100.852:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.370440][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 241.375563][ T29] audit: type=1326 audit(1763058100.852:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.375625][ T29] audit: type=1326 audit(1763058100.862:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.375659][ T29] audit: type=1326 audit(1763058100.862:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.375734][ T29] audit: type=1326 audit(1763058100.862:16654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.375772][ T29] audit: type=1326 audit(1763058100.872:16655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.375809][ T29] audit: type=1326 audit(1763058100.872:16656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.375847][ T29] audit: type=1326 audit(1763058100.872:16657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f4da01f85 code=0x7ffc0000 [ 241.746295][T11935] lo speed is unknown, defaulting to 1000 [ 241.752461][T11935] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.792096][T11935] wg1 speed is unknown, defaulting to 1000 [ 243.053279][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'. [ 243.114456][T11990] can: request_module (can-proto-3) failed. [ 243.788791][T12013] SELinux: security_context_str_to_sid (0MX uVf^vNWHJ`T%B@uPˆ$WŶ\j}f2c?te-o\Nz~?PZ]1FeĹxlrփ5ʌ]nk 2JV6jj8qh2)DYgҒB)a&'BQ+nяϺ#?[ô;&ھA_"z) failed with errno=-22 [ 243.841862][T12014] No such timeout policy "syz1" [ 244.153265][T12019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=12019 comm=syz.1.2985 [ 244.408073][T12025] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2987'. [ 244.524337][T12023] lo speed is unknown, defaulting to 1000 [ 244.530551][T12023] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.571842][T12023] wg1 speed is unknown, defaulting to 1000 [ 244.758535][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2987'. [ 245.017332][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2989'. [ 245.079737][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2989'. [ 245.100397][T12036] loop5: detected capacity change from 0 to 2048 [ 245.324821][T12036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.399937][T12036] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.650256][T12032] netlink: 'syz.5.2989': attribute type 6 has an invalid length. [ 245.662878][T12032] syzkaller1: entered promiscuous mode [ 245.668440][T12032] syzkaller1: entered allmulticast mode [ 245.844216][T12049] netlink: 'syz.2.2993': attribute type 10 has an invalid length. [ 245.890804][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.900894][T12051] netlink: 'syz.1.2995': attribute type 3 has an invalid length. [ 245.945527][T12058] pim6reg: entered allmulticast mode [ 245.997708][T12058] loop5: detected capacity change from 0 to 2048 [ 246.037323][T12058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.049728][T12060] netlink: 'syz.0.2996': attribute type 5 has an invalid length. [ 246.058569][T12070] SELinux: security_context_str_to_sid (́r)]2 Kfg~(vqBװ.Z<@h̥ʢLuQ`,DIsQ#6%G7~dOՐpZ)p%i_Ād n肶xDg5z-I,MOxHYKIw&n }w16dLn̺͇; +LG, UzxQG [ 246.058569][T12070] ;>/jE(gCP) failed with errno=-22 [ 246.091716][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 246.091734][ T29] audit: type=1326 audit(1763058105.862:17441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.125222][T12058] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.138655][T12070] No such timeout policy "syz1" [ 246.139129][ T29] audit: type=1326 audit(1763058105.862:17442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.169922][ T29] audit: type=1326 audit(1763058105.862:17443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.193472][ T29] audit: type=1326 audit(1763058105.862:17444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.219099][ T29] audit: type=1326 audit(1763058105.862:17445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.242781][ T29] audit: type=1326 audit(1763058105.862:17446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.268395][ T29] audit: type=1326 audit(1763058105.862:17447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.292303][ T29] audit: type=1326 audit(1763058105.862:17448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.318106][ T29] audit: type=1326 audit(1763058105.862:17449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.341785][ T29] audit: type=1326 audit(1763058105.862:17450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2f4d9cf6c9 code=0x7ffc0000 [ 246.526642][T12074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.548006][T12073] pim6reg: left allmulticast mode [ 246.555425][T12074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.606980][T12074] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2994: bg 0: block 345: padding at end of block bitmap is not set [ 246.639747][T12074] EXT4-fs (loop5): Remounting filesystem read-only [ 247.365580][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.680583][T12112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12112 comm=syz.5.3008 [ 247.828685][T12118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.975491][T12122] netlink: 'syz.4.3014': attribute type 3 has an invalid length. [ 248.020458][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'. [ 248.054230][T12132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.086806][T12132] vlan0: entered allmulticast mode [ 248.092180][T12132] bond3: entered allmulticast mode [ 248.109333][T12138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3018'. [ 248.197467][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 248.217368][T12150] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3021'. [ 248.445018][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'. [ 248.785249][T12168] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 248.889896][T12170] loop5: detected capacity change from 0 to 1024 [ 248.900610][T12170] EXT4-fs: Ignoring removed orlov option [ 248.930603][T12170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.028721][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 249.043269][T12177] team0: Port device dummy0 removed [ 249.224619][T10375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.409239][T12183] pimreg: entered allmulticast mode [ 249.433535][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 249.460087][T12186] pimreg: left allmulticast mode [ 249.482019][T12180] lo speed is unknown, defaulting to 1000 [ 249.490763][T12185] bridge_slave_1: left allmulticast mode [ 249.496484][T12185] bridge_slave_1: left promiscuous mode [ 249.502243][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.580958][T12185] bridge_slave_0: left allmulticast mode [ 249.586725][T12185] bridge_slave_0: left promiscuous mode [ 249.592464][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.716947][T12180] lo speed is unknown, defaulting to 1000 [ 249.731087][T12184] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.738334][T12180] lo speed is unknown, defaulting to 1000 [ 249.895063][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3033'. [ 249.974048][T12190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12190 comm=syz.5.3033 [ 249.987172][T12184] wg1 speed is unknown, defaulting to 1000 [ 250.006319][T12180] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.027010][T12191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3033'. [ 250.062918][T12180] lo speed is unknown, defaulting to 1000 [ 250.124587][T12180] lo speed is unknown, defaulting to 1000 [ 250.176321][T12180] lo speed is unknown, defaulting to 1000 [ 250.217168][T12180] lo speed is unknown, defaulting to 1000 [ 250.255321][T12180] lo speed is unknown, defaulting to 1000 [ 250.289887][T12180] lo speed is unknown, defaulting to 1000 [ 250.702590][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 251.096638][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 251.096655][ T29] audit: type=1326 audit(1763058110.872:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.127292][ T29] audit: type=1326 audit(1763058110.872:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.151034][ T29] audit: type=1326 audit(1763058110.872:17932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.368564][ T29] audit: type=1326 audit(1763058110.952:17933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.394263][ T29] audit: type=1326 audit(1763058110.952:17934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.417983][ T29] audit: type=1326 audit(1763058110.952:17935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.430396][T12220] siw: device registration error -23 [ 251.444093][ T29] audit: type=1326 audit(1763058110.952:17936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56a07edf10 code=0x7ffc0000 [ 251.474636][ T29] audit: type=1326 audit(1763058110.952:17937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.480463][T12218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.499152][ T29] audit: type=1326 audit(1763058110.952:17938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 251.532184][ T29] audit: type=1326 audit(1763058110.952:17939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12215 comm="syz.4.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56a07ef6c9 code=0x7ffc0000 [ 252.476594][T12252] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.508759][T12251] loop5: detected capacity change from 0 to 8192 [ 252.540723][T12252] wg1 speed is unknown, defaulting to 1000 [ 252.549599][T12252] lo speed is unknown, defaulting to 1000 [ 252.602992][T12251] loop5: p2 p3 p4 [ 252.610232][T12251] loop5: p2 start 2936012800 is beyond EOD, truncated [ 252.617889][T12251] loop5: p3 start 1912602624 is beyond EOD, truncated [ 252.624704][T12251] loop5: p4 size 656640 extends beyond EOD, truncated [ 252.664406][T12251] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.722221][T12261] 9pnet_fd: Insufficient options for proto=fd [ 252.917190][T12265] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 253.256202][T12284] __nla_validate_parse: 7 callbacks suppressed [ 253.256220][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 253.289494][T12282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.376031][T12290] ip6_vti0 speed is unknown, defaulting to 1000 [ 253.433075][T12290] wg1 speed is unknown, defaulting to 1000 [ 253.440137][T12290] lo speed is unknown, defaulting to 1000 [ 253.752546][T12305] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.021474][T12319] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3074'. [ 254.089769][T12319] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3074'. [ 254.118826][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'. [ 254.271416][T12330] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.359914][T12330] wg1 speed is unknown, defaulting to 1000 [ 254.359970][T12335] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.368753][T12330] lo speed is unknown, defaulting to 1000 [ 254.482235][T12346] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.496121][T12335] wg1 speed is unknown, defaulting to 1000 [ 254.502840][T12335] lo speed is unknown, defaulting to 1000 [ 254.597778][T12346] wg1 speed is unknown, defaulting to 1000 [ 254.610783][T12346] lo speed is unknown, defaulting to 1000 [ 254.734423][T12357] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3087'. [ 254.874541][T12367] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3088'. [ 254.931952][T12367] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3088'. [ 255.075311][T12357] ================================================================== [ 255.083468][T12357] BUG: KCSAN: data-race in touch_atime / touch_atime [ 255.090208][T12357] [ 255.092540][T12357] write to 0xffff88811cd63258 of 4 bytes by task 12363 on cpu 0: [ 255.100258][T12357] touch_atime+0x1e8/0x340 [ 255.104695][T12357] shmem_file_read_iter+0x477/0x540 [ 255.109908][T12357] copy_splice_read+0x442/0x660 [ 255.114767][T12357] splice_direct_to_actor+0x290/0x680 [ 255.120150][T12357] do_splice_direct+0xda/0x150 [ 255.124914][T12357] do_sendfile+0x380/0x650 [ 255.129348][T12357] __x64_sys_sendfile64+0x105/0x150 [ 255.134576][T12357] x64_sys_call+0x2bb4/0x3000 [ 255.139272][T12357] do_syscall_64+0xd2/0x200 [ 255.143812][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.149715][T12357] [ 255.152056][T12357] read to 0xffff88811cd63258 of 4 bytes by task 12357 on cpu 1: [ 255.159684][T12357] touch_atime+0x194/0x340 [ 255.164118][T12357] shmem_file_read_iter+0x477/0x540 [ 255.169325][T12357] copy_splice_read+0x442/0x660 [ 255.174186][T12357] splice_direct_to_actor+0x290/0x680 [ 255.179567][T12357] do_splice_direct+0xda/0x150 [ 255.184342][T12357] do_sendfile+0x380/0x650 [ 255.188830][T12357] __x64_sys_sendfile64+0x105/0x150 [ 255.194053][T12357] x64_sys_call+0x2bb4/0x3000 [ 255.198741][T12357] do_syscall_64+0xd2/0x200 [ 255.203250][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.209166][T12357] [ 255.211487][T12357] value changed: 0x32331244 -> 0x32cba8c4 [ 255.217202][T12357] [ 255.219523][T12357] Reported by Kernel Concurrency Sanitizer on: [ 255.225686][T12357] CPU: 1 UID: 0 PID: 12357 Comm: syz.1.3087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.235509][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.245579][T12357] ==================================================================