last executing test programs: 5m16.994825644s ago: executing program 32 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) 5m16.994760124s ago: executing program 33 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008"], 0x25c}}, 0x0) 5m16.948734104s ago: executing program 34 (id=145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000bf000000020000000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 5m16.946144014s ago: executing program 35 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc8140, 0x20) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 4m54.126393421s ago: executing program 8 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[], 0xfdef) 4m53.965261814s ago: executing program 8 (id=819): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@ipv4_deladdr={0x30, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m53.922421535s ago: executing program 8 (id=820): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x7f000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) 4m53.63612354s ago: executing program 8 (id=825): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 4m53.307354145s ago: executing program 8 (id=839): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 4m53.013906281s ago: executing program 8 (id=849): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4m52.962846082s ago: executing program 36 (id=849): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4m37.885240091s ago: executing program 0 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x7, &(0x7f0000000300)=[{0x6, 0x2, 0x6, 0xfffffe00}, {0x40, 0x2, 0x9, 0x9}, {0x2, 0xf7, 0x7, 0x4}, {0x7, 0x1, 0x9, 0x490}, {0x4, 0x6, 0x2, 0x6}, {0x0, 0x4, 0x80, 0x8}, {0x8, 0x9, 0x3, 0x6ed4}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000080000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x800}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000100100000000000000000000000000000000000000003c293f05ff3d5939bcae9a52a37d2fe1bfbb60919a1d3158a191c658b981c076fb18c4c8bf03968b87cb22b6668a3d0ae574e84ddf02ad"], 0x48) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 4m37.688560234s ago: executing program 0 (id=1329): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 4m36.678538712s ago: executing program 0 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x246840, 0x0) sendmsg$nl_route(r0, 0x0, 0x804) 4m36.650359912s ago: executing program 0 (id=1360): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 4m36.004969064s ago: executing program 0 (id=1364): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000}) 4m35.781079948s ago: executing program 9 (id=1369): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 4m35.717078649s ago: executing program 9 (id=1371): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa86, 0x0) 4m35.64125705s ago: executing program 9 (id=1373): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000002340)='./bus\x00', 0x4010, &(0x7f00000039c0)=ANY=[], 0x1, 0x11ee, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1fe) sendfile(r2, r2, 0x0, 0x800000009) 4m35.64089385s ago: executing program 0 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 4m35.620478191s ago: executing program 37 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 4m35.590482271s ago: executing program 9 (id=1376): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 4m35.256874357s ago: executing program 9 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0xc, 0x2, 0xffffffff, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) 4m34.997647642s ago: executing program 9 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) 4m34.974432502s ago: executing program 38 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) 2m24.001411145s ago: executing program 6 (id=4398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r5, 0x7ffffffffffffa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x100}, &(0x7f00000001c0)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x4, 0x0, &(0x7f0000000000)="051baf9d", 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f0000001300)="$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") r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3200000e62a26ed0b7ebc8ee9b7f3f", @ANYRES16=r8, @ANYBLOB="c50f0000000000", @ANYBLOB='\b\x00*\x00'], 0x24}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) execve(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8) 2m23.088078982s ago: executing program 6 (id=4417): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x5, 0x0, 0x9, 0x0, 0xa86, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa32"], 0xfdef) 2m22.991730413s ago: executing program 6 (id=4420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() modify_ldt$write(0x1, 0x0, 0x0) 2m22.924107644s ago: executing program 6 (id=4421): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 2m22.841303846s ago: executing program 6 (id=4423): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/171, 0xab) 2m22.734262878s ago: executing program 6 (id=4426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6020000009333f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 2m22.708632108s ago: executing program 39 (id=4426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6020000009333f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 2m22.467910092s ago: executing program 7 (id=4432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) 2m22.144999728s ago: executing program 7 (id=4437): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$eJzs3c1rHOUfAPDvbJK+/35NoRQVkUAPVmo3TeJLBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgnjXu8fiP+BfUdBCkRL04CUym9k0L7vJNt2ajfP5wITn2Znd5/nuzPfJMzuzbACFNZL9KUW8GBFfJRFHIyLJ1w1GvnJkZbulxzcnsyWJ5eWP/0ia22X11mu1nnc4r7wQEb98EXG6tLnd+sLiTKVaTefy+mhj9tpofWHxzJXZynQ6nV4dn5g49+bE+Dtvv9WzWF+7+Ne3H91//9yXJ5e++enhsbtJnI8j+bq1cTyDW2srIzGSvydDcX7DhmM9aKyfJLvdAXZkIM/zocjGgKMxkGc98N/3eUQsAwWVyH8oqNY8oHVu36Pz4D3j0XsrJ0Cb4x9c+WwkDjTPjQ4tJevOjLLz3eEetJ+18fPv9+5mS2z4HOJAD14foJNbtyPi7ODg5vEvyce/nTvbxTYb2yja/x/YTfez+c/r7eY/pdX5T7SZ/xxuk7s7sX3+lx72oJmOsvnfu23nv6sXrYYH8tr/mnO+oeTylWqajW3/j4hTMbQ/q291Pefc0oPlTuvWzv+yJWu/NRfM+/FwcP/650xVGpVniXmtR7cjXmo7/01W93/SZv9n78fFLts4kd57pdO67eN/vpZ/iHi17f5/ckUr2fr65GjzeBhtHRWb/XnnxK+d2t/t+LP9f2jr+IeTtddr60/fxvcH/k47rVsXf3R//O9LPmmW9+WP3ag0GnNjEfuSDzc/Pv7kua16a/ss/lMntx7/2h3/ByPi0y7jv3P8x5e7in+X9v/UU+3/py88+OCz7zq1393490azdCp/pJvxr9sOPst7BwAAAAAAAP2mFBFHIimVV8ulUrm8cn/H8ThUqtbqjdOXa/NXp6L5XdnhGCq1rnQfXXM/xFh+P2yrPr6hPhERxyLi64GDzXp5slad2u3gAQAAAAAAAAAAAAAAAAAAoE8c7vD9/8xvA7vdO+C585PfUFzb5n8vfukJ6Ev+/0NxyX8oLvkPxSX/objkPxSX/Ifikv9QXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvZsrz0+OZkVp+6vjA/U7t+Ziqtz5Rn5yfLk7W5a+XpWm26mpYna7PbvV61Vrs2Nh7zN0Ybab0xWl9YvDRbm7/auHRltjKdXkqH/pWoAAAAAAAAAAAAAAAAAAAAYG+pLyzOVKrVdE5BYUeFwf7oxp4vZNnYB91Y1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6A//BAAA//8iuzYD") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2m21.313897883s ago: executing program 7 (id=4446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0xfd, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m21.161661826s ago: executing program 7 (id=4450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 2m21.103581577s ago: executing program 7 (id=4451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r5, 0x7ffffffffffffa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x100}, &(0x7f00000001c0)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x4, 0x0, &(0x7f0000000000)="051baf9d", 0x0, 0x0, 0x4}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f0000001300)="$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") r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) execve(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8) 2m20.971096329s ago: executing program 7 (id=4452): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x43e101, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) 2m20.970710879s ago: executing program 40 (id=4452): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x43e101, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) 5.121536959s ago: executing program 5 (id=6607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) 3.461662749s ago: executing program 3 (id=6629): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000000000029"], 0x18}, 0x40c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, 0x0) sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000200442ef364843e7ed400000000850000000e005700850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7dd0000000000000008000021000000b70000f8ffffff009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 2.586563715s ago: executing program 3 (id=6645): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}}, 0x20000490) 2.566339225s ago: executing program 3 (id=6647): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 2.531870105s ago: executing program 3 (id=6648): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x20000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 2.451106327s ago: executing program 3 (id=6649): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") syz_usb_connect(0x0, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 2.165555992s ago: executing program 1 (id=6654): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="050000000100"/17], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_clone3(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) socket$key(0xf, 0x3, 0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000b40)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 2.045159964s ago: executing program 1 (id=6658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x170, 0x0, 0xa0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0, 0x0, {0x100000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x7}, {}, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="3232b3c71587", 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x2f]}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, 0x0, r2}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.029087455s ago: executing program 4 (id=6659): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4211, r5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) 1.979030905s ago: executing program 1 (id=6660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r5, 0x7ffffffffffffa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x100}, &(0x7f00000001c0)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x4, 0x0, &(0x7f0000000000)="051baf9d", 0x0, 0x0, 0x4}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f0000001300)="$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") r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3200000e62a26ed0b7ebc8ee9b7f3f", @ANYRES16=r9, @ANYBLOB="c50f0000000000", @ANYBLOB='\b\x00*\x00'], 0x24}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) execve(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8) 1.975909756s ago: executing program 4 (id=6661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r5, 0x7ffffffffffffa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x100}, &(0x7f00000001c0)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x4, 0x0, &(0x7f0000000000)="051baf9d", 0x0, 0x0, 0x4}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f0000001300)="$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") r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3200000e62a26ed0b7ebc8ee9b7f3f", @ANYRES16=r9, @ANYBLOB="c50f0000000000", @ANYBLOB='\b\x00*\x00'], 0x24}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) execve(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8) 1.356699096s ago: executing program 5 (id=6666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.326223867s ago: executing program 3 (id=6676): socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) unshare(0x40020200) 1.241736108s ago: executing program 5 (id=6667): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a50000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1d, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x18) syz_clone(0x49208000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18040000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006208000000000000180000000003000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/218, 0x0, 0x8}, 0x24) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 1.049212542s ago: executing program 4 (id=6668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x1f) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/4, 0x68}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.048473882s ago: executing program 1 (id=6669): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3404}, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x4, 0x3ff, 0x8f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0153d0a9a2010000000000e8ffffff0000"], 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) 958.464783ms ago: executing program 5 (id=6670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000240), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 844.421046ms ago: executing program 2 (id=6672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4211, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) 844.131066ms ago: executing program 5 (id=6673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x1108) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$inet(0x2, 0x2, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x11, 0x6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 764.495157ms ago: executing program 5 (id=6674): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fffffff, 0x101000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 737.495168ms ago: executing program 2 (id=6675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setfsgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000380)=""/121, 0x79, 0x0, &(0x7f0000000500)=""/253, 0xfd}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000740)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 698.540158ms ago: executing program 2 (id=6677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaWPTiogtigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtmIIHBQURryK9+A94l969iaDePAtVpKKg0pXZnW02yW4a0+xOmvl8YLPvvZnd9747eZk3M3k7AZTWaPYjjdgdcfd0EjHSsmw4GgtH8/Xu/H79TPZIolZ747ckBvKy5vpJ/rw9zwxGxHfHIh6rrKx37uq1c5PVWsP7EQfmz186MHf12v7Z85Nnp89OX5g4+OKhw+MvTRya2JA4t+fPx0+8/tQnH7zzwsz31f1JHIlT/e9NxbI4NspojMbdPMTW8r6IOJwl2nwuD5v7hLCjV+1gfSr572N/RDwRI1Gp5xpGYvbjQhsHdFWtElEDSirR/6GkmuOA5rH92o6DT3V5VNI7t482DoBWxt/XODcSg/Vjo213kpYjo8a5jZ0bUH9Wx7/X93yRPWLJeYi/7m2dvg2op5OFGxHxZLv4k3rbdtYjzeJPl7QjiYjxiPo5oKz81QdoQ9KS7sZ5mNWsN/40Io7kz1n5sXXWP7os3+v4ASinW0fzHflCllvc/2Vjj+b4J9qMf4bb7LvWo+j9X+fxX3N/P1g/R54ujsMGm6892f4t+5cX/PzR8c861d86/sseWf3NsWAv3L4RsWdZ/B9mwebjnyzcpM32z1Y5fWRtdbz2w6/HOy0rOv7azYi9bY9/FkelWWqV65MHZmar0+ONn23r+Obbt7/qVH/R8Wfbf1uH+Fu2f7r8ddlncmmNdXx98ub5TsuGV8SfJBGt8ae/DCSN482BvOTdyfn5yxMRA8mJfJWW8oOrt6W5TvM9svj3Pdu+/y/5/b+x9H2Gmn8y1+DSm+fudFq2nu3fcjH5bm2Nbegki3/q/tt/Rf/Pyj5dYx1/vnXl6U7LVot/6EECAwAAAAAAgBJK69dgk3TsXjpNx8Ya82Ufj21p9eLc/HMzF69cmIrYV/9/yP60eaV7pJFPsvxE/v+wzfzBZfnnI2JXRHxeGarnx85crE4VHTwAAAAAAAAAAAAAAAAAAABsEtvz+f/N+1T/UWnM/wdKops3mAM2N/0fyqve/1fc4gkoA/t/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAAYEva9cytn5KIWHh5qP7IDOTLzAiCra2/6AYAhakU3QCgMPcu/RvsQ+msafz/d/7lgN1vDlCApF1hfXBQW73z32r7SgAAAAAAAAAAAACgC/bu7jz/39xg2NpM+4PyeoD5/746AB5yvvofyssxPnC/WfyDnRaY/w8AAAAAAAAAAAAAPTNcfyTpWD4XeDjSdGws4tGI2Bn9ycxsdXo8InZExI+V/key/ETRjQYAAAAAAAAAAAAAAAAAAIAtZu7qtXOT1er05dbEPytKtnaieRfUHtT1SvzPV0XS+49lKCIK3yhdS/S1lCQRC9mW3xQNuzwXm6MZ9UTBf5gAAAAAAAAAAAAAAAAAAKCEWuYet7fnyx63CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6b/H+/91LFB0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBw+i8AAP//B/w98Q==") 682.370598ms ago: executing program 4 (id=6678): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x682040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000094}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x1, 0x19c}, &(0x7f0000000180), &(0x7f00000000c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x2, 0x9}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 661.403299ms ago: executing program 4 (id=6679): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = memfd_secret(0x0) readahead(r0, 0x6, 0x4) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187014, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000e40)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@llc={0x1a, 0xa2, 0x3, 0x9, 0xfe, 0x9, @random="0d33dc1883b5"}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="86d1f4a96998fd689f4d8790dfe8fb746162cac5477b8360a837628c77607410", 0x20}, {&(0x7f00000001c0)="f845796d4b390dcaaf139c19ab37a4227f41e6181df791b3615a11a058ef125352e04c96b3f74be0dea768f8a9ccde1725ded783f9866af859ab79428e93cc6d41ab3c983209b69aaebe", 0x4a}, {&(0x7f00000002c0)="f1d533da3e1a81ce8f3aa4e248ec595a3fdca96ca4d2c303879b4b654bf651c6969d0dc69a2c668b47034f0a39b411c500e3f357bc55405ffde93c1b0dd5301949292dec6600ddbca2cdf4aec0d1c963e9a39ba4fadd074f844196ca9fa80a6544a48cea214b80a6c7ade212c68ce8e445fc68", 0x73}], 0x3, &(0x7f0000000340)=[{0x78, 0x10e, 0x7, "0176c0b08fc29467556c2c390ea7c34c3e1a8618f737e583ef009b3bb415db0c1f41ef671ee88a7cb99f2731cbff4fff90e256c695f349ffbb3b4e91017cd44269c3baff32a6ec025ec19381eb9af1b980b6705ec7f41c6c2a9ecb86193869bf5732"}, {0x30, 0xff, 0x8, "4e6aeb26e664d631d2b5e62d4b2420234c9258cc9079bd9b3aac"}, {0x38, 0x115, 0x9, "b09f52e3b0b9c1fce72ebe573b279fc5a52765180ec1bcbb38ae6bdfe6292e9ad6"}, {0x80, 0x104, 0x1, "06da85f741df0873eea957920ae3d98ae13ebd18bb9065bf606cdf93428f0ef8261b17141f0d2e87f337a77029554d476d89fcff27d6db271e1b2aa2e100a660ec7c0d92c26551f968dd28ab1510705518fc20f33a05dbce28ed151cf249229e0fd85016514035ca02"}], 0x160}}, {{&(0x7f00000004c0)=@nfc={0x27, r7, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)="0d23e6bd253e7074d0312aa59fb7446dfcf661c2f5a6c5f7e75b34cbdafc6d105f2bb40de1", 0x25}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000540)="97d56bbfb83ed0ae57c6d3f82f0d13ab2ca4235d2b75811c5054b6b6de41619430104ef77628eb2a1b7d64624f890502e068c40fc6f954d0b172b6a7f8c22fe6155fc58192714893dc567a5766ae30d4203c074300f09b7aeecc6f13bae2d370230b55eb7c8c7770a5b26113edfbdcd4758082998941b64094996f467ab90d13a0e7ae8a0dd4e837aca9466438a36a310273ffa526ef94ffeda5f4826e420d21173f7e72e2de4f828d536b74663a741fe9d922898a70e781f47208fbc0ccf4d060012535c06e2249cc61d2d6532893a8d90dad47fb4c15482ded920aa368f4a004a3c29aa711fe3e6527c1dcbf8b7833e951a18a", 0xf4}, {&(0x7f0000000640)="1626d3791a", 0x5}], 0x4, &(0x7f00000006c0)=[{0x50, 0x0, 0x8, "7701ae3fbf7393681fe07b626f994371f68e60cbaa8c5d3cd1b1c6a18892bc6668e7ed80fd3aa21b8914424e742a6d375105a1b34d72cf8056c5103ca1a9"}], 0x50}}], 0x2, 0x40) 642.904019ms ago: executing program 4 (id=6680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r5, 0x7ffffffffffffa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x100}, &(0x7f00000001c0)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x4, 0x0, &(0x7f0000000000)="051baf9d", 0x0, 0x0, 0x4}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f0000001300)="$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") r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3200000e62a26ed0b7ebc8ee9b7f3f", @ANYRES16=r9, @ANYBLOB="c50f0000000000", @ANYBLOB='\b\x00*\x00'], 0x24}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) execve(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8) 131.030908ms ago: executing program 1 (id=6681): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 130.359138ms ago: executing program 2 (id=6691): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r1, 0x0, 0xc, 0x8045, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @local}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 100.897039ms ago: executing program 2 (id=6682): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 531.02µs ago: executing program 1 (id=6683): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 0s ago: executing program 2 (id=6694): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x10}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): m 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.887441][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.023792][T17093] loop5: detected capacity change from 0 to 128 [ 231.169146][T17098] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 231.280650][T17103] syzkaller0: entered promiscuous mode [ 231.286213][T17103] syzkaller0: entered allmulticast mode [ 231.541870][T17132] can0: slcan on ttyS3. [ 231.602137][T17132] can0 (unregistered): slcan off ttyS3. [ 231.722802][T17151] loop2: detected capacity change from 0 to 1024 [ 231.741851][T17151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.762785][T17151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.837079][T15905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.333739][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.342490][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.895127][T17188] vhci_hcd: invalid port number 176 [ 232.962081][ T29] audit: type=1326 audit(1753889561.751:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 232.985726][ T29] audit: type=1326 audit(1753889561.751:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.009534][T17196] loop5: detected capacity change from 0 to 1024 [ 233.018749][T17196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.026387][ T29] audit: type=1326 audit(1753889561.781:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.049963][ T29] audit: type=1326 audit(1753889561.781:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.054034][T17196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.073458][ T29] audit: type=1326 audit(1753889561.781:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.073491][ T29] audit: type=1326 audit(1753889561.781:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.132639][ T29] audit: type=1326 audit(1753889561.781:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.156186][ T29] audit: type=1326 audit(1753889561.781:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.5.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x7ffc0000 [ 233.210022][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.306748][T17212] netlink: 'syz.1.4966': attribute type 25 has an invalid length. [ 233.314707][T17212] netlink: 'syz.1.4966': attribute type 8 has an invalid length. [ 233.314853][T17211] loop2: detected capacity change from 0 to 164 [ 233.324641][T17212] __nla_validate_parse: 7 callbacks suppressed [ 233.324656][T17212] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4966'. [ 233.330654][T17211] iso9660: Unknown parameter '' [ 233.343467][T17212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4966'. [ 233.373764][T17212] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.397382][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4951'. [ 233.606370][T17234] vhci_hcd: invalid port number 176 [ 234.286336][T17248] netlink: 'syz.2.4969': attribute type 1 has an invalid length. [ 234.294098][T17248] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4969'. [ 234.298864][T17250] loop5: detected capacity change from 0 to 512 [ 234.310955][T17250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.325020][T17254] netlink: 'syz.2.4972': attribute type 25 has an invalid length. [ 234.332948][T17254] netlink: 'syz.2.4972': attribute type 8 has an invalid length. [ 234.335093][T17250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.342021][T17254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4972'. [ 234.354805][T17250] ext4 filesystem being mounted at /919/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.370212][T17254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4972'. [ 234.394756][T17250] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4971: corrupted xattr block 32: bad e_name length [ 234.405877][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.410422][T17250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 234.424556][T17250] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4971: corrupted xattr block 32: bad e_name length [ 234.440395][T17250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 234.450594][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 234.450625][ T29] audit: type=1400 audit(1753889563.248:4521): avc: denied { rename } for pid=17249 comm="syz.5.4971" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.576157][T17262] Invalid logical block size (32768) [ 234.684063][T17283] loop2: detected capacity change from 0 to 1024 [ 234.699676][T17283] EXT4-fs: Ignoring removed orlov option [ 234.721323][T17283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.770990][T15905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.936130][T17299] loop2: detected capacity change from 0 to 512 [ 234.943367][T17299] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 234.969497][T17299] EXT4-fs (loop2): failed to open journal device unknown-block(1,255) -6 [ 235.036654][T17310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=17310 comm=syz.1.4986 [ 235.037585][T17312] loop2: detected capacity change from 0 to 1024 [ 235.055895][T17312] EXT4-fs: Ignoring removed orlov option [ 235.063998][T17310] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4986'. [ 235.074734][T17312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.089192][T17310] hsr_slave_0: left promiscuous mode [ 235.105297][T17310] hsr_slave_1: left promiscuous mode [ 235.305986][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.364443][T15905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.464143][T17335] loop5: detected capacity change from 0 to 512 [ 235.502395][T17335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.524212][T17335] ext4 filesystem being mounted at /922/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.567124][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.788911][T17354] Invalid logical block size (32768) [ 235.809775][T17356] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.809832][ T3413] IPVS: starting estimator thread 0... [ 235.870185][T17363] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 235.876730][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.884229][T17363] vhci_hcd vhci_hcd.0: Device attached [ 235.891387][T17363] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 235.897887][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.905391][T17363] vhci_hcd vhci_hcd.0: Device attached [ 235.911668][T17363] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10) [ 235.918266][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.918318][T17358] IPVS: using max 3072 ests per chain, 153600 per kthread [ 235.925865][T17363] vhci_hcd vhci_hcd.0: Device attached [ 235.941527][T17363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.950673][T17363] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(14) [ 235.957333][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.964939][T17363] vhci_hcd vhci_hcd.0: Device attached [ 235.971670][T17363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.982406][T17363] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(18) [ 235.989003][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.996595][T17363] vhci_hcd vhci_hcd.0: Device attached [ 236.002737][T17363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.011797][T17363] vhci_hcd vhci_hcd.0: port 0 already used [ 236.018589][T17368] vhci_hcd: connection closed [ 236.018897][ T12] vhci_hcd: stop threads [ 236.018918][T17372] vhci_hcd: connection closed [ 236.019087][T17370] vhci_hcd: connection closed [ 236.023616][ T12] vhci_hcd: release socket [ 236.028205][T17366] vhci_hcd: connection closed [ 236.032555][ T12] vhci_hcd: disconnect device [ 236.038479][T17364] vhci_hcd: connection closed [ 236.042189][ T12] vhci_hcd: stop threads [ 236.060011][ T12] vhci_hcd: release socket [ 236.064488][ T12] vhci_hcd: disconnect device [ 236.069434][ T12] vhci_hcd: stop threads [ 236.073813][ T12] vhci_hcd: release socket [ 236.078243][ T12] vhci_hcd: disconnect device [ 236.084592][ T12] vhci_hcd: stop threads [ 236.089015][ T12] vhci_hcd: release socket [ 236.093531][ T12] vhci_hcd: disconnect device [ 236.100036][ T12] vhci_hcd: stop threads [ 236.104350][ T12] vhci_hcd: release socket [ 236.108885][ T12] vhci_hcd: disconnect device [ 236.128635][ T10] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 236.136374][ T10] usb 11-1: enqueue for inactive port 0 [ 236.143307][ T10] usb 11-1: enqueue for inactive port 0 [ 236.149299][ T10] usb 11-1: enqueue for inactive port 0 [ 236.219137][ T10] vhci_hcd: vhci_device speed not set [ 236.291493][T17381] loop2: detected capacity change from 0 to 512 [ 236.312772][T17381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.325694][T17381] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.370070][T15905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.481431][T17394] wireguard0: entered promiscuous mode [ 236.486945][T17394] wireguard0: entered allmulticast mode [ 236.678523][T17405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=17405 comm=syz.5.5015 [ 236.694074][T17405] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5015'. [ 236.709712][T17405] hsr_slave_0: left promiscuous mode [ 236.720181][T17405] hsr_slave_1: left promiscuous mode [ 236.785089][T17408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5016'. [ 236.794220][T17408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5016'. [ 237.484015][T17422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.491528][T17422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.500788][T17422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.508276][T17422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.508363][T17423] loop5: detected capacity change from 0 to 512 [ 237.534982][T17423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.559097][T17423] ext4 filesystem being mounted at /934/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.573640][T17423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.742562][T17433] Invalid logical block size (32768) [ 237.783722][T17441] loop2: detected capacity change from 0 to 512 [ 237.813495][T17441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.828136][T17441] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.855480][T17441] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.885425][T17441] block device autoloading is deprecated and will be removed. [ 238.253138][ T29] audit: type=1326 audit(1753889567.031:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.276654][ T29] audit: type=1326 audit(1753889567.031:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.300610][ T29] audit: type=1326 audit(1753889567.041:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.324259][ T29] audit: type=1326 audit(1753889567.041:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.355736][ T29] audit: type=1326 audit(1753889567.041:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.379388][ T29] audit: type=1326 audit(1753889567.041:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.403035][ T29] audit: type=1326 audit(1753889567.041:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.426783][ T29] audit: type=1326 audit(1753889567.041:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.450394][ T29] audit: type=1326 audit(1753889567.041:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 238.731092][T17463] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.744333][T17463] syzkaller0: entered promiscuous mode [ 238.749873][T17463] syzkaller0: entered allmulticast mode [ 239.488824][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 239.488837][ T29] audit: type=1326 audit(1753889568.269:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.521056][ T29] audit: type=1326 audit(1753889568.309:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.547631][ T29] audit: type=1326 audit(1753889568.329:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.571376][ T29] audit: type=1326 audit(1753889568.329:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.594878][ T29] audit: type=1326 audit(1753889568.329:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.618321][ T29] audit: type=1326 audit(1753889568.329:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.641896][ T29] audit: type=1326 audit(1753889568.329:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.665397][ T29] audit: type=1326 audit(1753889568.329:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.689144][ T29] audit: type=1326 audit(1753889568.329:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.710379][T17458] Set syz1 is full, maxelem 65536 reached [ 239.712710][ T29] audit: type=1326 audit(1753889568.329:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 239.843506][T17492] loop5: detected capacity change from 0 to 512 [ 239.899716][T17492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.914304][T17492] ext4 filesystem being mounted at /939/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.927142][T17492] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.940858][T17496] loop4: detected capacity change from 0 to 512 [ 239.973174][T17496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.987208][T17496] ext4 filesystem being mounted at /751/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.998184][T17496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.040376][T17502] lo speed is unknown, defaulting to 1000 [ 240.674574][T17513] loop2: detected capacity change from 0 to 1024 [ 240.689443][T17513] EXT4-fs: Ignoring removed nobh option [ 240.695103][T17513] EXT4-fs: Ignoring removed bh option [ 240.843621][T17513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.153358][T17490] Set syz1 is full, maxelem 65536 reached [ 241.202920][T17519] syzkaller0: entered promiscuous mode [ 241.208472][T17519] syzkaller0: entered allmulticast mode [ 241.261527][T17512] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.5055: Allocating blocks 497-513 which overlap fs metadata [ 241.320939][T17525] wireguard0: entered promiscuous mode [ 241.326541][T17525] wireguard0: entered allmulticast mode [ 241.335780][T17528] __nla_validate_parse: 2 callbacks suppressed [ 241.335795][T17528] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5058'. [ 241.342161][T17512] EXT4-fs (loop2): pa ffff888106a36cb0: logic 1112, phys. 305, len 13 [ 241.359304][T17512] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 241.388518][T15905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.398302][T17528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.410173][T17528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.423947][T17528] bond0 (unregistering): Released all slaves [ 241.483014][T17541] pim6reg1: entered promiscuous mode [ 241.488623][T17541] pim6reg1: entered allmulticast mode [ 241.534463][T17545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 241.541013][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.548904][T17545] vhci_hcd vhci_hcd.0: Device attached [ 241.558692][T17545] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 241.565218][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.572702][T17545] vhci_hcd vhci_hcd.0: Device attached [ 241.579714][T17545] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 241.586365][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.594017][T17545] vhci_hcd vhci_hcd.0: Device attached [ 241.600829][T17545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.610322][T17545] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 241.616931][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.624527][T17545] vhci_hcd vhci_hcd.0: Device attached [ 241.631111][T17545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.640457][T17545] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 241.647109][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.654803][T17545] vhci_hcd vhci_hcd.0: Device attached [ 241.661365][T17545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.670762][T17545] vhci_hcd vhci_hcd.0: port 0 already used [ 241.677823][T17556] vhci_hcd: connection closed [ 241.677990][ T3324] vhci_hcd: stop threads [ 241.687046][ T3324] vhci_hcd: release socket [ 241.691455][ T3324] vhci_hcd: disconnect device [ 241.692439][T17554] vhci_hcd: connection closed [ 241.696119][T17546] vhci_hcd: connection closed [ 241.696358][T17552] vhci_hcd: connection closed [ 241.701707][T17550] vhci_hcd: connection closed [ 241.705900][ T3324] vhci_hcd: stop threads [ 241.719321][ T3324] vhci_hcd: release socket [ 241.723720][ T3324] vhci_hcd: disconnect device [ 241.728608][ T3324] vhci_hcd: stop threads [ 241.728829][ T3386] vhci_hcd: vhci_device speed not set [ 241.732851][ T3324] vhci_hcd: release socket [ 241.742761][ T3324] vhci_hcd: disconnect device [ 241.747784][ T3324] vhci_hcd: stop threads [ 241.752059][ T3324] vhci_hcd: release socket [ 241.756459][ T3324] vhci_hcd: disconnect device [ 241.761285][ T3324] vhci_hcd: stop threads [ 241.765558][ T3324] vhci_hcd: release socket [ 241.769971][ T3324] vhci_hcd: disconnect device [ 242.167217][T17565] loop5: detected capacity change from 0 to 512 [ 242.180605][T17565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.189477][T17567] syzkaller0: entered promiscuous mode [ 242.194212][T17565] ext4 filesystem being mounted at /941/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.198796][T17567] syzkaller0: entered allmulticast mode [ 242.218422][T17565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.294499][T17572] loop4: detected capacity change from 0 to 1024 [ 242.301569][T17572] EXT4-fs: Ignoring removed nobh option [ 242.307216][T17572] EXT4-fs: Ignoring removed bh option [ 242.336140][T17572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.387067][T17577] ªªªªª: renamed from vlan1 (while UP) [ 242.465615][T17584] loop2: detected capacity change from 0 to 512 [ 242.489774][T17584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.503054][T17584] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.508859][T17587] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5079'. [ 242.514803][T17584] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.535523][T17587] $Hÿ (unregistering): Released all slaves [ 242.587481][T17594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.662989][T17594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.694392][T17571] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.5074: Allocating blocks 497-513 which overlap fs metadata [ 242.742604][T17571] EXT4-fs (loop4): pa ffff8881068ea930: logic 928, phys. 433, len 5 [ 242.750660][T17571] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 242.762259][T17594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.779498][ T7217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.813108][T17594] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.863221][T17594] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.874260][T17594] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.885657][T17594] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.896760][T17594] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.081880][T17611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 243.088433][T17611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.096064][T17611] vhci_hcd vhci_hcd.0: Device attached [ 243.115369][T17615] syzkaller0: entered promiscuous mode [ 243.121012][T17615] syzkaller0: entered allmulticast mode [ 243.123580][T17611] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 243.133058][T17611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.140675][T17611] vhci_hcd vhci_hcd.0: Device attached [ 243.151455][T17611] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 243.158068][T17611] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.165738][T17611] vhci_hcd vhci_hcd.0: Device attached [ 243.172427][T17611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.181512][T17611] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 243.188149][T17611] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.195877][T17611] vhci_hcd vhci_hcd.0: Device attached [ 243.202507][T17611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.211712][T17611] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(18) [ 243.218321][T17611] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.225919][T17611] vhci_hcd vhci_hcd.0: Device attached [ 243.232396][T17611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.241490][T17611] vhci_hcd vhci_hcd.0: port 0 already used [ 243.248016][T17622] vhci_hcd: connection closed [ 243.248214][T17620] vhci_hcd: connection closed [ 243.248344][T17612] vhci_hcd: connection closed [ 243.252947][T17618] vhci_hcd: connection closed [ 243.258033][T17616] vhci_hcd: connection closed [ 243.268259][ T4008] vhci_hcd: stop threads [ 243.277209][ T4008] vhci_hcd: release socket [ 243.281846][ T4008] vhci_hcd: disconnect device [ 243.288848][ T4008] vhci_hcd: stop threads [ 243.293128][ T4008] vhci_hcd: release socket [ 243.297689][ T4008] vhci_hcd: disconnect device [ 243.310592][ T4008] vhci_hcd: stop threads [ 243.314940][ T4008] vhci_hcd: release socket [ 243.319436][ T4008] vhci_hcd: disconnect device [ 243.324472][ T4008] vhci_hcd: stop threads [ 243.328714][ T4008] vhci_hcd: release socket [ 243.333238][ T4008] vhci_hcd: disconnect device [ 243.338317][ T4008] vhci_hcd: stop threads [ 243.342640][ T4008] vhci_hcd: release socket [ 243.347125][ T4008] vhci_hcd: disconnect device [ 243.354884][T17631] serio: Serial port ptm0 [ 243.424476][T17638] loop2: detected capacity change from 0 to 512 [ 243.440729][T17638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.453401][T17638] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.464384][T17638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.496925][T17642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5093'. [ 243.579724][T17648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.584086][T17650] loop5: detected capacity change from 0 to 512 [ 243.600933][T17650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.613659][T17650] ext4 filesystem being mounted at /949/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.624482][T17650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.634207][T17648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.681768][T17648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.734002][T17648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.800439][T17648] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.811974][T17648] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.823579][T17648] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.834947][T17648] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.223243][T17694] netlink: 'syz.3.5115': attribute type 29 has an invalid length. [ 244.231143][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5115'. [ 244.242652][T17688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4 sclass=netlink_audit_socket pid=17688 comm=syz.3.5115 [ 244.255235][T17688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17688 comm=syz.3.5115 [ 244.357791][T17702] syzkaller0: entered promiscuous mode [ 244.363418][T17702] syzkaller0: entered allmulticast mode [ 244.471945][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5125'. [ 244.567139][T17727] loop2: detected capacity change from 0 to 512 [ 244.583238][T17727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.596812][T17727] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.607928][T17727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.474481][T17744] loop2: detected capacity change from 0 to 128 [ 245.483128][T17744] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.495601][T17744] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.526892][T15905] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.610599][T17757] loop4: detected capacity change from 0 to 2048 [ 245.617366][T17757] EXT4-fs: Ignoring removed nobh option [ 245.633200][T17757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.818284][ T7217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.484388][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 246.484403][ T29] audit: type=1400 audit(1753889575.251:4603): avc: denied { ioctl } for pid=17787 comm="syz.3.5152" path="pid:[4026532383]" dev="nsfs" ino=4026532383 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 246.495156][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5153'. [ 246.558670][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5155'. [ 246.579330][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5155'. [ 246.594667][T17799] netlink: 'syz.5.5156': attribute type 10 has an invalid length. [ 246.603976][T17799] team0: Port device dummy0 added [ 246.610910][T17799] netlink: 'syz.5.5156': attribute type 10 has an invalid length. [ 246.619544][T17799] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.631563][T17799] team0: Failed to send options change via netlink (err -105) [ 246.641941][T17799] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.651623][T17799] team0: Port device dummy0 removed [ 246.701739][T17806] loop5: detected capacity change from 0 to 512 [ 246.728732][T17806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.748322][T17806] ext4 filesystem being mounted at /958/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.760762][T17806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.814636][ T31] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 247.604409][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5178'. [ 247.613422][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5178'. [ 247.645312][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5178'. [ 247.654342][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5178'. [ 247.685856][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5171'. [ 247.719445][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5171'. [ 247.733678][T17847] loop4: detected capacity change from 0 to 2048 [ 247.778285][T17847] tipc: Started in network mode [ 247.783302][T17847] tipc: Node identity 4, cluster identity 4711 [ 247.789516][T17847] tipc: Node number set to 4 [ 247.823302][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5179'. [ 247.885470][T17865] syzkaller0: entered promiscuous mode [ 247.890976][T17865] syzkaller0: entered allmulticast mode [ 247.956786][T17874] loop4: detected capacity change from 0 to 512 [ 247.978325][T17874] ext4 filesystem being mounted at /779/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.003698][ T41] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 248.137845][ T29] audit: type=1326 audit(1753889576.910:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164389][ T29] audit: type=1326 audit(1753889576.930:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164510][ T29] audit: type=1326 audit(1753889576.930:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164541][ T29] audit: type=1326 audit(1753889576.930:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164574][ T29] audit: type=1326 audit(1753889576.930:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164695][ T29] audit: type=1326 audit(1753889576.930:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164727][ T29] audit: type=1326 audit(1753889576.930:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164761][ T29] audit: type=1326 audit(1753889576.930:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.164864][ T29] audit: type=1326 audit(1753889576.930:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.1.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 248.501795][T17900] sit0: left allmulticast mode [ 248.508319][T17900] wg2: left promiscuous mode [ 248.512919][T17900] wg2: left allmulticast mode [ 248.519862][T17900] veth0_vlan: left allmulticast mode [ 248.526261][T17900] macsec0: left promiscuous mode [ 248.531364][T17900] geneve0: left allmulticast mode [ 248.538655][T17900] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.547149][T17900] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.555669][T17900] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.564211][T17900] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.873946][T17929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.882108][T17929] bond0: (slave bond1): Enslaving as an active interface with an up link [ 248.909923][T17929] bond0 (unregistering): (slave bond1): Releasing backup interface [ 248.930267][T17929] bond0 (unregistering): Released all slaves [ 249.356836][T17957] loop2: detected capacity change from 0 to 1024 [ 249.363698][T17957] EXT4-fs: Ignoring removed orlov option [ 249.398993][T17962] syzkaller0: entered promiscuous mode [ 249.404572][T17962] syzkaller0: entered allmulticast mode [ 249.714288][T17977] loop4: detected capacity change from 0 to 1024 [ 249.731049][T17978] loop5: detected capacity change from 0 to 2048 [ 249.744426][T17977] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 249.871794][T17991] hub 6-0:1.0: USB hub found [ 249.876612][T17991] hub 6-0:1.0: 8 ports detected [ 250.088998][T18013] kernel profiling enabled (shift: 17) [ 250.131727][T18015] loop4: detected capacity change from 0 to 1024 [ 250.141397][T18015] EXT4-fs: Ignoring removed nobh option [ 250.148429][T18015] EXT4-fs: Ignoring removed bh option [ 250.161070][T18017] loop2: detected capacity change from 0 to 1024 [ 250.190640][T18017] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 250.314860][T18026] tipc: Enabled bearer , priority 0 [ 250.334122][T18025] tipc: Resetting bearer [ 250.363338][T18025] tipc: Disabling bearer [ 250.401645][T18030] loop4: detected capacity change from 0 to 512 [ 250.409328][T18030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.421250][T18030] EXT4-fs (loop4): 1 truncate cleaned up [ 250.458446][T18035] loop2: detected capacity change from 0 to 164 [ 250.468352][T18037] wg2: left promiscuous mode [ 250.473030][T18037] wg2: left allmulticast mode [ 250.480180][T18037] macsec0: left promiscuous mode [ 250.485244][T18037] macsec0: left allmulticast mode [ 250.490495][T18037] geneve0: left allmulticast mode [ 250.497435][T18035] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 250.550258][T18037] team1: left promiscuous mode [ 250.573094][T18037] team1: left allmulticast mode [ 250.652901][T18042] loop2: detected capacity change from 0 to 4096 [ 250.719430][T18046] syzkaller0: entered promiscuous mode [ 250.725004][T18046] syzkaller0: entered allmulticast mode [ 250.844180][T18056] pim6reg1: entered promiscuous mode [ 250.849682][T18056] pim6reg1: entered allmulticast mode [ 250.908721][T18064] loop5: detected capacity change from 0 to 512 [ 250.938778][T18064] ext4 filesystem being mounted at /972/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.111378][ T3864] EXT4-fs unmount: 18 callbacks suppressed [ 251.111393][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.525562][ T7217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.564184][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.571736][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.579462][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.588992][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.596473][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.603976][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.611547][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.619001][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.626549][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.633939][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.641353][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.648923][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.656335][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.671997][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.679456][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.686968][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.694415][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.702063][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.709472][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.716945][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.724317][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.731707][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.739101][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.746499][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.753934][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.761358][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.768791][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.776200][ T3386] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 251.784945][ T3386] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 251.858524][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 251.858539][ T29] audit: type=1326 audit(1753889580.637:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 251.888523][ T29] audit: type=1326 audit(1753889580.637:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 251.913854][T18121] loop4: detected capacity change from 0 to 2048 [ 251.962739][T18124] hub 6-0:1.0: USB hub found [ 251.968783][T18124] hub 6-0:1.0: 8 ports detected [ 251.983929][T18126] __nla_validate_parse: 9 callbacks suppressed [ 251.983942][T18126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5265'. [ 252.019282][ T29] audit: type=1326 audit(1753889580.707:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.042839][ T29] audit: type=1326 audit(1753889580.707:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.061245][T18130] loop4: detected capacity change from 0 to 8192 [ 252.066404][ T29] audit: type=1326 audit(1753889580.707:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.096220][ T29] audit: type=1326 audit(1753889580.707:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.119924][ T29] audit: type=1326 audit(1753889580.707:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.143674][ T29] audit: type=1326 audit(1753889580.707:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.145260][T18136] can0: slcan on ttyS3. [ 252.167364][ T29] audit: type=1326 audit(1753889580.707:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.2.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.194819][ T29] audit: type=1326 audit(1753889580.707:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 252.226448][ T3471] IPVS: starting estimator thread 0... [ 252.278584][T18140] can0 (unregistered): slcan off ttyS3. [ 252.288367][T18140] Falling back ldisc for ttyS3. [ 252.316536][T18139] IPVS: using max 2592 ests per chain, 129600 per kthread [ 252.351279][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5274'. [ 252.379368][T18163] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 252.395355][T18161] syzkaller0: entered promiscuous mode [ 252.400880][T18161] syzkaller0: entered allmulticast mode [ 252.558437][T18176] loop5: detected capacity change from 0 to 1024 [ 252.582960][T18176] EXT4-fs: Ignoring removed orlov option [ 252.611400][T18176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.806354][T18181] tipc: Enabled bearer , priority 0 [ 252.814127][T18180] tipc: Resetting bearer [ 252.849250][T18180] tipc: Disabling bearer [ 252.894060][T18183] loop4: detected capacity change from 0 to 4096 [ 252.919631][T18183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.023994][ T7217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.063956][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.107185][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5284'. [ 253.171115][T18214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.179216][T18214] batadv_slave_0: entered promiscuous mode [ 253.238734][T18218] hub 9-0:1.0: USB hub found [ 253.243781][T18218] hub 9-0:1.0: 8 ports detected [ 253.282608][T18224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.293161][T18224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.327954][T18229] loop2: detected capacity change from 0 to 512 [ 253.342552][T18233] loop4: detected capacity change from 0 to 1024 [ 253.351488][T18233] EXT4-fs: Ignoring removed orlov option [ 253.360479][T18233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.376985][T18229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.390025][T18229] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.401005][T18229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.594698][ T7217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.833136][T18243] loop4: detected capacity change from 0 to 512 [ 253.850030][T18243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.862666][T18243] ext4 filesystem being mounted at /799/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.874888][T18243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.080694][T18273] can0: slcan on ttyS3. [ 254.117771][T18273] can0 (unregistered): slcan off ttyS3. [ 254.123751][T18273] Falling back ldisc for ttyS3. [ 254.182809][T18281] lo speed is unknown, defaulting to 1000 [ 254.322144][T18289] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5309'. [ 254.334961][T18290] loop5: detected capacity change from 0 to 1024 [ 254.344538][T18290] EXT4-fs: Ignoring removed nobh option [ 254.350367][T18290] EXT4-fs: Ignoring removed bh option [ 254.360151][T18290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.404613][T18296] netlink: 'syz.3.5323': attribute type 10 has an invalid length. [ 254.422709][T18299] netlink: 'syz.1.5311': attribute type 10 has an invalid length. [ 254.437487][T18296] team0: Port device dummy0 added [ 254.446740][T18296] netlink: 'syz.3.5323': attribute type 10 has an invalid length. [ 254.452027][T18299] team0: Port device dummy0 added [ 254.464248][T18296] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 254.476179][T18296] team0: Failed to send options change via netlink (err -105) [ 254.491478][T18296] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 254.500838][T18296] team0: Port device dummy0 removed [ 254.722085][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5313'. [ 254.746290][T18285] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.5307: Allocating blocks 497-513 which overlap fs metadata [ 254.800667][T18313] can0: slcan on ttyS3. [ 254.824145][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'. [ 254.833310][T18284] EXT4-fs (loop5): pa ffff8881068ea8c0: logic 496, phys. 241, len 17 [ 254.839941][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'. [ 254.841481][T18284] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 254.878404][T18313] can0 (unregistered): slcan off ttyS3. [ 254.880627][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.893581][T18313] Falling back ldisc for ttyS3. [ 255.184608][T18326] loop5: detected capacity change from 0 to 2048 [ 255.273429][T18336] pim6reg1: entered promiscuous mode [ 255.278878][T18336] pim6reg1: entered allmulticast mode [ 255.301427][T18338] loop5: detected capacity change from 0 to 164 [ 255.309866][T18338] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.414570][T18346] loop5: detected capacity change from 0 to 1024 [ 255.423335][T18346] EXT4-fs: Ignoring removed nobh option [ 255.428999][T18346] EXT4-fs: Ignoring removed bh option [ 255.514658][T18351] can0: slcan on ttyS3. [ 255.560002][T18346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.578538][T18351] can0 (unregistered): slcan off ttyS3. [ 255.604207][T18351] Falling back ldisc for ttyS3. [ 256.322133][T18369] netlink: 'syz.2.5342': attribute type 10 has an invalid length. [ 256.362030][T18369] team0: Port device dummy0 added [ 256.378048][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.414431][T18373] loop5: detected capacity change from 0 to 128 [ 256.448002][T18373] syz.5.5343: attempt to access beyond end of device [ 256.448002][T18373] loop5: rw=0, sector=121, nr_sectors = 896 limit=128 [ 256.538201][ T4008] kworker/u8:8: attempt to access beyond end of device [ 256.538201][ T4008] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 256.599963][T18384] can0: slcan on ttyS3. [ 256.668885][T18384] can0 (unregistered): slcan off ttyS3. [ 256.674763][T18384] Falling back ldisc for ttyS3. [ 257.173312][T18394] loop2: detected capacity change from 0 to 2048 [ 257.180001][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 257.180014][ T29] audit: type=1404 audit(1753889585.944:4780): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 257.201288][ T29] audit: type=1400 audit(1753889585.944:4781): avc: denied { write } for pid=18381 comm="syz.5.5348" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 257.247002][ T29] audit: type=1400 audit(1753889585.954:4782): avc: denied { read write } for pid=7217 comm="syz-executor" name="loop4" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 257.270345][ T29] audit: type=1400 audit(1753889585.954:4783): avc: denied { map_create } for pid=18389 comm="syz.1.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.281938][T18399] lo speed is unknown, defaulting to 1000 [ 257.289662][ T29] audit: type=1400 audit(1753889585.964:4784): avc: denied { prog_load } for pid=18395 comm="syz.4.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.314423][ T29] audit: type=1400 audit(1753889585.964:4785): avc: denied { prog_load } for pid=18395 comm="syz.4.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.334026][ T29] audit: type=1400 audit(1753889585.994:4786): avc: denied { mounton } for pid=18393 comm="syz.2.5352" path="/169/file0" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 257.356859][ T29] audit: type=1400 audit(1753889585.994:4787): avc: denied { read write } for pid=18393 comm="syz.2.5352" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 257.380198][ T29] audit: type=1326 audit(1753889585.994:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 257.403798][ T29] audit: type=1326 audit(1753889585.994:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 257.763501][T18428] syzkaller0: entered promiscuous mode [ 257.769135][T18428] syzkaller0: entered allmulticast mode [ 257.777192][ T4008] syzkaller0: tun_net_xmit 48 [ 257.835236][T18431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5369'. [ 257.847985][T18431] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.856431][T18431] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.864768][T18431] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.873103][T18431] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.881556][T18431] vxlan0: entered promiscuous mode [ 258.213382][T18469] syz.4.5387 (18469): /proc/18466/oom_adj is deprecated, please use /proc/18466/oom_score_adj instead. [ 259.329661][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5410'. [ 259.992160][T18543] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5420'. [ 260.162213][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5422'. [ 260.174893][T18550] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.183691][T18550] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.192454][T18550] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.201250][T18550] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.210513][T18550] vxlan0: entered promiscuous mode [ 260.521797][T18569] netlink: 'syz.4.5430': attribute type 27 has an invalid length. [ 260.559124][T18569] wg2: left promiscuous mode [ 260.563853][T18569] wg2: left allmulticast mode [ 260.571248][T18569] bridge_slave_1: left allmulticast mode [ 260.719960][T18574] netlink: 'syz.5.5432': attribute type 2 has an invalid length. [ 261.138818][T18591] sit0: entered allmulticast mode [ 261.215446][T18599] 8021q: VLANs not supported on ip6tnl0 [ 261.297197][T18612] veth0_vlan: entered allmulticast mode [ 261.705014][T18631] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 261.711552][T18631] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.719203][T18631] vhci_hcd vhci_hcd.0: Device attached [ 261.750363][T18632] vhci_hcd: connection closed [ 261.750537][ T3435] vhci_hcd: stop threads [ 261.759627][ T3435] vhci_hcd: release socket [ 261.764081][ T3435] vhci_hcd: disconnect device [ 262.276711][ T29] kauditd_printk_skb: 930 callbacks suppressed [ 262.276724][ T29] audit: type=1400 audit(1753889591.042:5720): avc: denied { prog_load } for pid=18641 comm="syz.2.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.331066][ T29] audit: type=1400 audit(1753889591.072:5721): avc: denied { create } for pid=18644 comm="syz.3.5462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 262.351481][ T29] audit: type=1400 audit(1753889591.072:5722): avc: denied { prog_load } for pid=18644 comm="syz.3.5462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.370655][ T29] audit: type=1400 audit(1753889591.072:5723): avc: denied { map_create } for pid=18644 comm="syz.3.5462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.389878][ T29] audit: type=1400 audit(1753889591.072:5724): avc: denied { prog_load } for pid=18644 comm="syz.3.5462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.409105][ T29] audit: type=1400 audit(1753889591.072:5725): avc: denied { prog_load } for pid=18644 comm="syz.3.5462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.428386][ T29] audit: type=1400 audit(1753889591.092:5726): avc: denied { mounton } for pid=18641 comm="syz.2.5461" path="/183/file0" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 262.462830][ T29] audit: type=1400 audit(1753889591.232:5727): avc: denied { map_create } for pid=18647 comm="syz.3.5463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.482104][ T29] audit: type=1400 audit(1753889591.232:5728): avc: denied { prog_load } for pid=18647 comm="syz.3.5463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.501320][ T29] audit: type=1400 audit(1753889591.232:5729): avc: denied { write } for pid=18647 comm="syz.3.5463" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=0 [ 262.899476][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5465'. [ 263.164045][T18663] netlink: 'syz.3.5469': attribute type 10 has an invalid length. [ 263.183227][T18663] team0: Port device dummy0 added [ 264.127332][T18669] pim6reg1: entered promiscuous mode [ 264.132853][T18669] pim6reg1: entered allmulticast mode [ 264.433389][T18691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 264.439941][T18691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 264.447629][T18691] vhci_hcd vhci_hcd.0: Device attached [ 264.492653][T18692] vhci_hcd: connection closed [ 264.492886][ T41] vhci_hcd: stop threads [ 264.502053][ T41] vhci_hcd: release socket [ 264.506470][ T41] vhci_hcd: disconnect device [ 264.974619][T18702] netlink: 'syz.5.5482': attribute type 10 has an invalid length. [ 264.994380][T18702] team0: Port device dummy0 added [ 265.400322][T18726] lo speed is unknown, defaulting to 1000 [ 265.735958][T18739] syzkaller0: entered promiscuous mode [ 265.741479][T18739] syzkaller0: entered allmulticast mode [ 266.364483][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5510'. [ 266.581694][T18770] netlink: 'syz.1.5516': attribute type 10 has an invalid length. [ 266.600361][T18770] ipvlan0: entered allmulticast mode [ 266.613832][T18770] team0: Device ipvlan0 failed to register rx_handler [ 267.083441][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5522'. [ 267.092340][T18782] netlink: 'syz.1.5522': attribute type 5 has an invalid length. [ 267.100395][T18782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5522'. [ 267.165088][T18782] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 267.173311][T18782] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 267.181463][T18782] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 267.189619][T18782] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 267.241174][T18782] geneve2: entered promiscuous mode [ 267.246416][T18782] geneve2: entered allmulticast mode [ 267.294372][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 267.294384][ T29] audit: type=1400 audit(1753889596.051:6047): avc: denied { prog_load } for pid=18783 comm="syz.1.5523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.319977][ T29] audit: type=1400 audit(1753889596.061:6048): avc: denied { prog_load } for pid=18783 comm="syz.1.5523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.339113][ T29] audit: type=1400 audit(1753889596.061:6049): avc: denied { prog_load } for pid=18783 comm="syz.1.5523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.358369][ T29] audit: type=1400 audit(1753889596.061:6050): avc: denied { mounton } for pid=18783 comm="syz.1.5523" path="/214/file0" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 267.504928][ T29] audit: type=1400 audit(1753889596.271:6051): avc: denied { create } for pid=18785 comm="syz.1.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 267.812801][ T29] audit: type=1400 audit(1753889596.581:6052): avc: denied { map_create } for pid=18789 comm="syz.1.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.863476][ T29] audit: type=1400 audit(1753889596.631:6053): avc: denied { map_create } for pid=18789 comm="syz.1.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.892589][ T29] audit: type=1400 audit(1753889596.651:6054): avc: denied { prog_load } for pid=18789 comm="syz.1.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.948323][ T29] audit: type=1400 audit(1753889596.681:6055): avc: denied { prog_load } for pid=18789 comm="syz.1.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 267.967639][ T29] audit: type=1400 audit(1753889596.691:6056): avc: denied { create } for pid=18789 comm="syz.1.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 268.206707][T18803] netlink: 'syz.1.5530': attribute type 39 has an invalid length. [ 268.234260][T18803] veth1_macvtap: left promiscuous mode [ 268.410312][T18807] syzkaller0: entered promiscuous mode [ 268.415869][T18807] syzkaller0: entered allmulticast mode [ 268.804114][T18835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.216283][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5555'. [ 269.570969][T18877] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 269.631035][T18887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5567'. [ 269.641656][T18887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18887 comm=syz.4.5567 [ 269.682342][T18895] netlink: 'syz.4.5571': attribute type 4 has an invalid length. [ 269.704608][T18895] netlink: 'syz.4.5571': attribute type 4 has an invalid length. [ 269.769191][T18907] netlink: 4 bytes leftover after parsing attributes in process `,&#^%'. [ 269.867537][T18921] syzkaller0: entered promiscuous mode [ 269.873087][T18921] syzkaller0: entered allmulticast mode [ 270.851061][T18967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18967 comm=syz.5.5604 [ 270.921294][T18977] netlink: 'syz.4.5609': attribute type 39 has an invalid length. [ 271.013572][T18990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 271.020103][T18990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.027645][T18990] vhci_hcd vhci_hcd.0: Device attached [ 271.031561][T18997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5618'. [ 271.067071][T18990] netlink: 'syz.1.5615': attribute type 10 has an invalid length. [ 271.081917][T18992] vhci_hcd: connection closed [ 271.082465][ T3435] vhci_hcd: stop threads [ 271.091441][ T3435] vhci_hcd: release socket [ 271.095874][ T3435] vhci_hcd: disconnect device [ 271.382935][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5632'. [ 271.391856][T19030] netlink: 'syz.4.5632': attribute type 20 has an invalid length. [ 271.399702][T19030] netlink: 'syz.4.5632': attribute type 21 has an invalid length. [ 271.598012][T19036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.822372][T19055] syzkaller0: entered promiscuous mode [ 271.827909][T19055] syzkaller0: entered allmulticast mode [ 272.311950][T19078] xt_hashlimit: max too large, truncated to 1048576 [ 272.376908][T19083] syzkaller0: entered promiscuous mode [ 272.382579][T19083] syzkaller0: entered allmulticast mode [ 272.393006][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 272.393073][ T29] audit: type=1400 audit(1754413889.095:6758): avc: denied { map_create } for pid=19082 comm="syz.4.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.440723][ T29] audit: type=1400 audit(1754413889.095:6759): avc: denied { prog_load } for pid=19082 comm="syz.4.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.486895][ T29] audit: type=1400 audit(1754413889.183:6760): avc: denied { map_create } for pid=19084 comm="syz.1.5656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.525162][ T29] audit: type=1400 audit(1754413889.212:6761): avc: denied { prog_load } for pid=19084 comm="syz.1.5656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.585577][ T29] audit: type=1400 audit(1754413889.222:6762): avc: denied { read write } for pid=7217 comm="syz-executor" name="loop4" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 272.608867][ T29] audit: type=1400 audit(1754413889.231:6763): avc: denied { prog_load } for pid=19086 comm="syz.4.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.628036][ T29] audit: type=1400 audit(1754413889.231:6764): avc: denied { prog_load } for pid=19086 comm="syz.4.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.647290][ T29] audit: type=1400 audit(1754413889.231:6765): avc: denied { map_create } for pid=19086 comm="syz.4.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.666641][ T29] audit: type=1400 audit(1754413889.231:6766): avc: denied { prog_load } for pid=19086 comm="syz.4.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.685834][ T29] audit: type=1400 audit(1754413889.231:6767): avc: denied { prog_load } for pid=19086 comm="syz.4.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.717656][T19085] syzkaller0: entered promiscuous mode [ 272.723198][T19085] syzkaller0: entered allmulticast mode [ 273.574770][T19148] netlink: 'syz.4.5684': attribute type 1 has an invalid length. [ 273.596916][T19148] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 273.709160][T19154] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 274.113747][T19164] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5691'. [ 274.357723][T19181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5699'. [ 274.485788][T19186] netlink: 'syz.2.5701': attribute type 10 has an invalid length. [ 274.506326][T19186] bridge0: port 3(team0) entered blocking state [ 274.512724][T19186] bridge0: port 3(team0) entered disabled state [ 274.537210][T19186] team0: entered allmulticast mode [ 274.542345][T19186] team_slave_0: entered allmulticast mode [ 274.548119][T19186] team_slave_1: entered allmulticast mode [ 274.561753][T19186] dummy0: entered allmulticast mode [ 274.574282][T19186] team0: entered promiscuous mode [ 274.587458][T19186] team_slave_0: entered promiscuous mode [ 274.593307][T19186] team_slave_1: entered promiscuous mode [ 274.610961][T19186] dummy0: entered promiscuous mode [ 274.621870][T19186] bridge0: port 3(team0) entered blocking state [ 274.628149][T19186] bridge0: port 3(team0) entered forwarding state [ 276.745622][T19244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5725'. [ 276.758544][T19244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5725'. [ 276.888734][T19260] syzkaller0: entered promiscuous mode [ 276.894468][T19260] syzkaller0: entered allmulticast mode [ 276.940893][T19262] netlink: 'syz.4.5733': attribute type 4 has an invalid length. [ 276.986705][T19264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19264 comm=syz.4.5734 [ 277.006273][T19266] lo: entered allmulticast mode [ 277.011237][T19266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.064416][T19268] lo speed is unknown, defaulting to 1000 [ 277.067389][T19272] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5738'. [ 277.079443][T19272] gretap0: entered promiscuous mode [ 277.666339][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 277.666353][ T29] audit: type=1400 audit(1754413894.236:7360): avc: denied { read write } for pid=15905 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 277.732347][ T29] audit: type=1400 audit(1754413894.295:7361): avc: denied { map_create } for pid=19298 comm="syz.3.5750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 277.751661][ T29] audit: type=1400 audit(1754413894.295:7362): avc: denied { prog_load } for pid=19298 comm="syz.3.5750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 277.770902][ T29] audit: type=1400 audit(1754413894.295:7363): avc: denied { create } for pid=19298 comm="syz.3.5750" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 277.850422][T19307] audit: audit_backlog=66 > audit_backlog_limit=64 [ 277.856987][T19307] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 277.864744][T19307] audit: backlog limit exceeded [ 277.870314][ T29] audit: type=1400 audit(1754413894.364:7364): avc: denied { prog_load } for pid=19300 comm="syz.2.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 277.886568][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5752'. [ 277.889486][ T29] audit: type=1326 audit(1754413894.364:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.2.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 277.898397][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5752'. [ 277.921897][ T29] audit: type=1326 audit(1754413894.364:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.2.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbc1be9a9 code=0x7ffc0000 [ 277.958132][T19306] netlink: 'syz.3.5753': attribute type 4 has an invalid length. [ 277.968168][T19306] netlink: 'syz.3.5753': attribute type 4 has an invalid length. [ 278.026910][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5752'. [ 278.035907][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5752'. [ 279.108386][T19341] netlink: 'syz.2.5767': attribute type 29 has an invalid length. [ 279.116706][T19341] netlink: 'syz.2.5767': attribute type 29 has an invalid length. [ 280.017337][T19375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5783'. [ 280.229197][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5787'. [ 282.129177][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5810'. [ 282.560280][T19460] lo speed is unknown, defaulting to 1000 [ 282.762054][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 282.762069][ T29] audit: type=1400 audit(1754413899.245:7944): avc: denied { allowed } for pid=19468 comm="syz.5.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 282.842420][ T29] audit: type=1400 audit(1754413899.324:7945): avc: denied { read } for pid=19468 comm="syz.5.5823" dev="nsfs" ino=4026533021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 282.878172][ T29] audit: type=1400 audit(1754413899.354:7946): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 282.903844][ T29] audit: type=1400 audit(1754413899.383:7947): avc: denied { map_create } for pid=19471 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.924591][ T29] audit: type=1400 audit(1754413899.403:7948): avc: denied { prog_load } for pid=19471 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.944851][ T29] audit: type=1400 audit(1754413899.423:7949): avc: denied { create } for pid=19471 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 282.966732][ T29] audit: type=1400 audit(1754413899.442:7950): avc: denied { create } for pid=19471 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 282.988555][ T29] audit: type=1400 audit(1754413899.442:7951): avc: denied { read write } for pid=7217 comm="syz-executor" name="loop4" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 283.011876][ T29] audit: type=1400 audit(1754413899.462:7952): avc: denied { create } for pid=19471 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 283.043669][ T29] audit: type=1400 audit(1754413899.511:7953): avc: denied { create } for pid=19471 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 283.228059][T19482] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 283.234591][T19482] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 283.242217][T19482] vhci_hcd vhci_hcd.0: Device attached [ 283.249782][T19483] vhci_hcd: connection closed [ 283.249908][ T51] vhci_hcd: stop threads [ 283.258860][ T51] vhci_hcd: release socket [ 283.263264][ T51] vhci_hcd: disconnect device [ 283.421527][T19490] netlink: 'syz.1.5831': attribute type 4 has an invalid length. [ 283.432947][T19490] netlink: 'syz.1.5831': attribute type 4 has an invalid length. [ 283.462974][T19492] netlink: 'syz.1.5832': attribute type 4 has an invalid length. [ 283.473972][T19492] netlink: 'syz.1.5832': attribute type 4 has an invalid length. [ 283.884157][T19516] lo speed is unknown, defaulting to 1000 [ 284.598521][T19543] netlink: 'syz.2.5855': attribute type 4 has an invalid length. [ 284.968821][T19550] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5858'. [ 285.009769][T19552] lo speed is unknown, defaulting to 1000 [ 286.301883][T19587] binfmt_misc: register: failed to install interpreter file ./file2 [ 286.418076][T19593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5877'. [ 287.135957][T19611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5884'. [ 287.937267][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 287.937282][ T29] audit: type=1400 audit(1754413904.348:8378): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 287.977725][ T29] audit: type=1400 audit(1754413904.388:8379): avc: denied { name_bind } for pid=19622 comm="syz.5.5889" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 288.021537][ T29] audit: type=1400 audit(1754413904.408:8380): avc: denied { prog_load } for pid=19622 comm="syz.5.5889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 288.040831][ T29] audit: type=1400 audit(1754413904.408:8381): avc: denied { create } for pid=19622 comm="syz.5.5889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 288.061555][ T29] audit: type=1400 audit(1754413904.417:8382): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 288.086101][ T29] audit: type=1326 audit(1754413904.427:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz.5.5890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd02312e9a9 code=0x0 [ 288.110066][ T29] audit: type=1400 audit(1754413904.507:8384): avc: denied { read write } for pid=15905 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 288.146482][ T29] audit: type=1400 audit(1754413904.546:8385): avc: denied { prog_load } for pid=19626 comm="syz.2.5891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 288.165697][ T29] audit: type=1400 audit(1754413904.546:8386): avc: denied { create } for pid=19626 comm="syz.2.5891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 288.186397][ T29] audit: type=1400 audit(1754413904.546:8387): avc: denied { create } for pid=19626 comm="syz.2.5891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 288.213543][T19630] SELinux: syz.3.5892 (19630) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 288.298879][T19638] lo speed is unknown, defaulting to 1000 [ 288.416724][T19643] lo speed is unknown, defaulting to 1000 [ 288.911324][T19660] lo speed is unknown, defaulting to 1000 [ 289.032586][T19663] xt_connbytes: Forcing CT accounting to be enabled [ 289.039836][T19663] set match dimension is over the limit! [ 289.122129][T19671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19671 comm=syz.5.5910 [ 289.524260][T19705] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 289.579568][T19711] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 289.588131][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5928'. [ 290.354689][T19739] netlink: 'syz.5.5939': attribute type 4 has an invalid length. [ 290.363152][T19739] netlink: 'syz.5.5939': attribute type 4 has an invalid length. [ 290.410551][T19745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=19745 comm=syz.3.5942 [ 291.557225][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5963'. [ 291.567397][T19795] netlink: 'syz.3.5963': attribute type 13 has an invalid length. [ 292.441977][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'. [ 292.471626][T19807] team1: entered promiscuous mode [ 292.483185][T19807] team1: entered allmulticast mode [ 292.839707][T19827] netlink: 'syz.2.5977': attribute type 10 has an invalid length. [ 292.864634][T19827] netlink: 'syz.2.5977': attribute type 10 has an invalid length. [ 292.895769][T19827] dummy0: left promiscuous mode [ 292.900919][T19827] dummy0: left allmulticast mode [ 292.916223][T19827] team0: Port device dummy0 removed [ 292.931741][T19827] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.996539][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 292.996553][ T29] audit: type=1400 audit(1754413909.360:9191): avc: denied { allowed } for pid=19836 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 293.049342][ T29] audit: type=1400 audit(1754413909.360:9192): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 293.074176][ T29] audit: type=1400 audit(1754413909.360:9193): avc: denied { map_create } for pid=19836 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 293.093431][ T29] audit: type=1400 audit(1754413909.360:9194): avc: denied { prog_load } for pid=19836 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 293.098771][T19846] lo speed is unknown, defaulting to 1000 [ 293.112592][ T29] audit: type=1400 audit(1754413909.360:9195): avc: denied { prog_load } for pid=19836 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 293.137626][ T29] audit: type=1400 audit(1754413909.360:9196): avc: denied { prog_load } for pid=19836 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 293.156757][ T29] audit: type=1400 audit(1754413909.360:9197): avc: denied { execmem } for pid=19836 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 293.176087][ T29] audit: type=1400 audit(1754413909.390:9198): avc: denied { execmem } for pid=19838 comm="syz.5.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 293.195509][ T29] audit: type=1400 audit(1754413909.400:9199): avc: denied { read write } for pid=15905 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 293.218846][ T29] audit: type=1400 audit(1754413909.400:9200): avc: denied { map_create } for pid=19840 comm="syz.2.5984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 293.329106][T19848] lo speed is unknown, defaulting to 1000 [ 293.768978][T19864] syzkaller0: entered promiscuous mode [ 293.774688][T19864] syzkaller0: entered allmulticast mode [ 293.947320][T19876] 8021q: VLANs not supported on ip6gre0 [ 294.013391][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6002'. [ 294.062585][T19885] xt_hashlimit: max too large, truncated to 1048576 [ 294.945618][T19913] netlink: 'syz.4.6014': attribute type 10 has an invalid length. [ 295.293096][T19928] lo speed is unknown, defaulting to 1000 [ 295.446097][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6022'. [ 295.762672][T19942] syzkaller0: entered promiscuous mode [ 295.768236][T19942] syzkaller0: entered allmulticast mode [ 296.421295][T19963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6036'. [ 296.446512][T19963] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.454730][T19963] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.462921][T19963] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.471104][T19963] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.509902][T19963] vxlan0: entered promiscuous mode [ 296.529517][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6038'. [ 296.776395][T19983] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6045'. [ 296.789006][T19983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.800354][T19983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.810398][T19983] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 296.819906][T19983] bond0 (unregistering): Released all slaves [ 297.794068][T20028] netlink: 'syz.3.6064': attribute type 4 has an invalid length. [ 297.802873][T20028] netlink: 'syz.3.6064': attribute type 4 has an invalid length. [ 298.042845][ T29] kauditd_printk_skb: 690 callbacks suppressed [ 298.042858][ T29] audit: type=1400 audit(1754413914.375:9891): avc: denied { create } for pid=20034 comm="syz.3.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 298.090199][ T29] audit: type=1400 audit(1754413914.405:9892): avc: denied { create } for pid=20034 comm="syz.3.6067" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 298.111076][ T29] audit: type=1400 audit(1754413914.405:9893): avc: denied { prog_load } for pid=20034 comm="syz.3.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 298.130223][ T29] audit: type=1400 audit(1754413914.405:9894): avc: denied { read write } for pid=20034 comm="syz.3.6067" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 298.153628][ T29] audit: type=1400 audit(1754413914.414:9895): avc: denied { read write } for pid=15905 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 298.177069][ T29] audit: type=1400 audit(1754413914.454:9896): avc: denied { read } for pid=20036 comm="syz.2.6068" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 298.200279][ T29] audit: type=1400 audit(1754413914.454:9897): avc: denied { module_request } for pid=20036 comm="syz.2.6068" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 298.222385][ T29] audit: type=1400 audit(1754413914.454:9898): avc: denied { sys_module } for pid=20036 comm="syz.2.6068" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 298.243643][ T29] audit: type=1400 audit(1754413914.474:9899): avc: denied { read write } for pid=15905 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 298.267334][ T29] audit: type=1400 audit(1754413914.514:9900): avc: denied { prog_load } for pid=20038 comm="syz.2.6069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 298.746224][T20060] bridge0: port 1(syz_tun) entered blocking state [ 298.752772][T20060] bridge0: port 1(syz_tun) entered disabled state [ 298.759681][T20060] syz_tun: entered allmulticast mode [ 298.766699][T20060] syz_tun: entered promiscuous mode [ 298.787752][T20060] lo speed is unknown, defaulting to 1000 [ 298.906032][T20060] lo speed is unknown, defaulting to 1000 [ 299.096031][T20073] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 299.888520][T20091] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 300.132724][T20104] IPv6: Can't replace route, no match found [ 300.207649][T20114] lo speed is unknown, defaulting to 1000 [ 300.304418][T20124] ªªªªªª: renamed from vlan0 [ 300.440953][T20133] netlink: 'syz.5.6110': attribute type 13 has an invalid length. [ 300.520148][T20133] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.528585][T20133] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.537028][T20133] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.545485][T20133] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.763026][T20143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20143 comm=syz.3.6113 [ 301.278013][T20153] lo speed is unknown, defaulting to 1000 [ 301.327406][T20156] netlink: 'syz.5.6119': attribute type 39 has an invalid length. [ 302.642699][T20218] lo speed is unknown, defaulting to 1000 [ 302.807936][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6149'. [ 302.847057][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6149'. [ 303.088623][ T29] kauditd_printk_skb: 885 callbacks suppressed [ 303.088637][ T29] audit: type=1400 audit(1754413919.388:10786): avc: denied { read write } for pid=7217 comm="syz-executor" name="loop4" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 303.119359][ T29] audit: type=1400 audit(1754413919.398:10787): avc: denied { prog_load } for pid=20238 comm="syz.4.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 303.138796][ T29] audit: type=1400 audit(1754413919.398:10788): avc: denied { prog_load } for pid=20238 comm="syz.4.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 303.158301][ T29] audit: type=1326 audit(1754413919.398:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.4.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad7ebe9a9 code=0x7ffc0000 [ 303.181950][ T29] audit: type=1326 audit(1754413919.398:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.4.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad7ebe9a9 code=0x7ffc0000 [ 303.205557][ T29] audit: type=1326 audit(1754413919.398:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.4.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad7ebe9a9 code=0x7ffc0000 [ 303.229188][ T29] audit: type=1400 audit(1754413919.398:10792): avc: denied { prog_load } for pid=20238 comm="syz.4.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 303.248391][ T29] audit: type=1326 audit(1754413919.398:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.4.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad7ebe9a9 code=0x7ffc0000 [ 303.272047][ T29] audit: type=1326 audit(1754413919.398:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.4.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad7ebe9a9 code=0x7ffc0000 [ 303.295597][ T29] audit: type=1326 audit(1754413919.398:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.4.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1ad7ebe9a9 code=0x7ffc0000 [ 303.319677][T20244] team0: Port device dummy0 removed [ 303.328938][T20244] bridge_slave_0: left allmulticast mode [ 303.334571][T20244] bridge_slave_0: left promiscuous mode [ 303.340256][T20244] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.349526][T20244] bridge_slave_1: left promiscuous mode [ 303.355161][T20244] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.366225][T20244] team0: Port device team_slave_0 removed [ 303.374820][T20244] team0: Port device team_slave_1 removed [ 303.381702][T20244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.389749][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.397188][T20244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.759290][ T3413] page_pool_release_retry() stalled pool shutdown: id 104, 1 inflight 60 sec [ 303.796719][T20265] SELinux: syz.2.6164 (20265) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 304.979891][T20295] netlink: 'syz.5.6177': attribute type 4 has an invalid length. [ 305.210052][T20301] lo speed is unknown, defaulting to 1000 [ 305.400358][T20325] lo speed is unknown, defaulting to 1000 [ 305.463417][T20331] ªªªªªª: renamed from vlan0 (while UP) [ 306.546910][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6205'. [ 306.578559][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6205'. [ 306.625070][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 306.667463][T20365] lo speed is unknown, defaulting to 1000 [ 307.147997][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6215'. [ 307.725186][T20418] lo speed is unknown, defaulting to 1000 [ 308.141860][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 308.141874][ T29] audit: type=1400 audit(1754413924.419:11428): avc: denied { create } for pid=20442 comm="syz.1.6241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 308.195512][ T29] audit: type=1326 audit(1754413924.449:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 308.219238][ T29] audit: type=1326 audit(1754413924.449:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 308.242882][ T29] audit: type=1326 audit(1754413924.449:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 308.266608][ T29] audit: type=1400 audit(1754413924.449:11432): avc: denied { map_create } for pid=20442 comm="syz.1.6241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 308.285978][ T29] audit: type=1326 audit(1754413924.449:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 308.309627][ T29] audit: type=1326 audit(1754413924.449:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 308.333259][ T29] audit: type=1326 audit(1754413924.449:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 308.357036][ T29] audit: type=1400 audit(1754413924.449:11436): avc: denied { prog_load } for pid=20442 comm="syz.1.6241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 308.376334][ T29] audit: type=1326 audit(1754413924.449:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.1.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138803e9a9 code=0x7ffc0000 [ 309.667041][T20492] sctp: [Deprecated]: syz.5.6259 (pid 20492) Use of int in max_burst socket option. [ 309.667041][T20492] Use struct sctp_assoc_value instead [ 310.061775][T20505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20505 comm=syz.5.6265 [ 310.159709][T20509] lo speed is unknown, defaulting to 1000 [ 310.189803][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6268'. [ 310.402239][T20518] syzkaller0: entered promiscuous mode [ 310.407946][T20518] syzkaller0: entered allmulticast mode [ 310.515827][T20521] lo speed is unknown, defaulting to 1000 [ 311.302791][T20544] lo speed is unknown, defaulting to 1000 [ 311.810881][T20559] wg2: entered promiscuous mode [ 311.815771][T20559] wg2: entered allmulticast mode [ 312.173889][T20575] syzkaller0: entered promiscuous mode [ 312.179423][T20575] syzkaller0: entered allmulticast mode [ 313.613608][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 313.613623][ T29] audit: type=1400 audit(1754413929.883:11844): avc: denied { create } for pid=20582 comm="syz.4.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 313.670068][ T29] audit: type=1400 audit(1754413929.913:11845): avc: denied { create } for pid=20583 comm="syz.5.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 313.689853][ T29] audit: type=1400 audit(1754413929.913:11846): avc: denied { map_create } for pid=20582 comm="syz.4.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.709328][ T29] audit: type=1400 audit(1754413929.913:11847): avc: denied { prog_load } for pid=20582 comm="syz.4.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.728651][ T29] audit: type=1400 audit(1754413929.922:11848): avc: denied { map_create } for pid=20583 comm="syz.5.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.748157][ T29] audit: type=1400 audit(1754413929.922:11849): avc: denied { map_create } for pid=20583 comm="syz.5.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.767539][ T29] audit: type=1400 audit(1754413929.922:11850): avc: denied { create } for pid=20582 comm="syz.4.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 313.787366][ T29] audit: type=1400 audit(1754413929.922:11851): avc: denied { prog_load } for pid=20583 comm="syz.5.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.806612][ T29] audit: type=1400 audit(1754413929.932:11852): avc: denied { prog_load } for pid=20583 comm="syz.5.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.826086][ T29] audit: type=1400 audit(1754413929.932:11853): avc: denied { prog_load } for pid=20583 comm="syz.5.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.293402][T20613] lo speed is unknown, defaulting to 1000 [ 317.210895][T20633] netlink: 'syz.1.6316': attribute type 1 has an invalid length. [ 317.242215][T20633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.280234][T20633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.298427][T20633] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.343155][T20633] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 317.404224][T20635] gretap1: entered promiscuous mode [ 317.433722][T20635] bond0: (slave gretap1): making interface the new active one [ 317.461100][T20635] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 317.476832][T20636] macvlan2: entered promiscuous mode [ 317.482246][T20636] macvlan2: entered allmulticast mode [ 317.502054][T20636] bond0: entered promiscuous mode [ 317.517552][T20636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.547822][T20636] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 317.603260][T20636] bond0: left promiscuous mode [ 317.839657][T20643] serio: Serial port ptm0 [ 317.947520][T20656] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 317.973504][T20660] serio: Serial port ttyS3 [ 318.005516][T20663] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 318.808527][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 318.808542][ T29] audit: type=1400 audit(1754413935.061:12169): avc: denied { name_bind } for pid=20685 comm="syz.3.6338" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 318.856313][ T29] audit: type=1400 audit(1754413935.071:12170): avc: denied { allowed } for pid=20683 comm="syz.1.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 318.875873][ T29] audit: type=1400 audit(1754413935.071:12171): avc: denied { prog_load } for pid=20683 comm="syz.1.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 318.895201][ T29] audit: type=1400 audit(1754413935.071:12172): avc: denied { prog_load } for pid=20683 comm="syz.1.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 318.914515][ T29] audit: type=1400 audit(1754413935.071:12173): avc: denied { create } for pid=20683 comm="syz.1.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 318.961682][ T29] audit: type=1400 audit(1754413935.211:12174): avc: denied { prog_load } for pid=20685 comm="syz.3.6338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 318.981041][ T29] audit: type=1400 audit(1754413935.211:12175): avc: denied { prog_load } for pid=20685 comm="syz.3.6338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 319.000396][ T29] audit: type=1326 audit(1754413935.211:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 319.023960][ T29] audit: type=1326 audit(1754413935.211:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 319.047635][ T29] audit: type=1326 audit(1754413935.211:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f799801e9a9 code=0x7ffc0000 [ 319.193494][T20690] lo speed is unknown, defaulting to 1000 [ 319.481163][T20696] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6341'. [ 319.716545][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6343'. [ 320.225994][T20714] netlink: 'syz.3.6349': attribute type 10 has an invalid length. [ 320.251753][T20714] team0: Device hsr_slave_0 failed to register rx_handler [ 320.333007][T20718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 320.935859][T20724] binfmt_misc: register: failed to install interpreter file ./file2 [ 321.198321][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6355'. [ 321.379979][T20743] lo speed is unknown, defaulting to 1000 [ 321.691683][T20754] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 322.253607][T20771] netlink: 'syz.2.6372': attribute type 10 has an invalid length. [ 322.263047][T20769] binfmt_misc: register: failed to install interpreter file ./file0 [ 322.271097][T20771] dummy0: entered promiscuous mode [ 322.276531][T20771] dummy0: entered allmulticast mode [ 322.298724][T20771] team0: Port device dummy0 added [ 322.313496][T20771] netlink: 'syz.2.6372': attribute type 10 has an invalid length. [ 322.343239][T20771] dummy0: left promiscuous mode [ 322.348297][T20771] dummy0: left allmulticast mode [ 322.361508][T20771] team0: Port device dummy0 removed [ 322.743767][T20785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20785 comm=syz.3.6378 [ 323.045097][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6383'. [ 323.078560][T20796] lo speed is unknown, defaulting to 1000 [ 323.106464][T20800] netlink: 'syz.2.6385': attribute type 1 has an invalid length. [ 323.146665][T20800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.174523][T20803] bond0 (unregistering): Released all slaves [ 323.189218][T20805] lo: left allmulticast mode [ 323.196084][T20805] gretap0: left promiscuous mode [ 323.209685][T20805] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.220388][T20805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.365094][T20807] netlink: 'syz.2.6387': attribute type 4 has an invalid length. [ 323.458585][T20807] netlink: 'syz.2.6387': attribute type 4 has an invalid length. [ 324.259269][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 324.259299][ T29] audit: type=1400 audit(1754413940.502:12713): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.329091][ T29] audit: type=1400 audit(1754413940.562:12714): avc: denied { map_create } for pid=20833 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 324.348492][ T29] audit: type=1400 audit(1754413940.562:12715): avc: denied { prog_load } for pid=20833 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 324.367842][ T29] audit: type=1400 audit(1754413940.572:12716): avc: denied { prog_load } for pid=20833 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 324.475725][ T29] audit: type=1400 audit(1754413940.572:12717): avc: denied { create } for pid=20833 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 324.496687][ T29] audit: type=1400 audit(1754413940.631:12718): avc: denied { create } for pid=20833 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 324.516426][ T29] audit: type=1400 audit(1754413940.671:12719): avc: denied { create } for pid=20833 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 324.536190][ T29] audit: type=1400 audit(1754413940.671:12720): avc: denied { read write } for pid=20833 comm="syz.5.6397" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.560389][ T29] audit: type=1400 audit(1754413940.691:12721): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.584717][ T29] audit: type=1400 audit(1754413940.711:12722): avc: denied { read write } for pid=20835 comm="syz.5.6398" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.736623][T20842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6401'. [ 325.462892][T20861] lo speed is unknown, defaulting to 1000 [ 325.833286][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6411'. [ 325.923194][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6411'. [ 326.296131][T20889] lo speed is unknown, defaulting to 1000 [ 326.918271][T20907] lo speed is unknown, defaulting to 1000 [ 327.179652][T20927] netlink: 'syz.3.6435': attribute type 39 has an invalid length. [ 328.128796][T20984] syzkaller0: entered promiscuous mode [ 328.134335][T20984] syzkaller0: entered allmulticast mode [ 328.609668][T21004] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 328.621100][T21004] bond0 (unregistering): Released all slaves [ 328.663066][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6463'. [ 329.216073][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6469'. [ 329.306231][ T29] kauditd_printk_skb: 980 callbacks suppressed [ 329.306247][ T29] audit: type=1400 audit(1754413945.545:13703): avc: denied { open } for pid=21022 comm="syz.3.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 329.332572][ T29] audit: type=1400 audit(1754413945.575:13704): avc: denied { map_create } for pid=21022 comm="syz.3.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.332686][T21023] netlink: 'syz.3.6470': attribute type 10 has an invalid length. [ 329.351957][ T29] audit: type=1400 audit(1754413945.575:13705): avc: denied { prog_load } for pid=21022 comm="syz.3.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.351987][ T29] audit: type=1400 audit(1754413945.575:13706): avc: denied { prog_load } for pid=21022 comm="syz.3.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.352013][ T29] audit: type=1400 audit(1754413945.575:13707): avc: denied { map_create } for pid=21022 comm="syz.3.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.417790][ T29] audit: type=1400 audit(1754413945.575:13708): avc: denied { create } for pid=21022 comm="syz.3.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 329.450071][ T29] audit: type=1400 audit(1754413945.685:13709): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 329.480923][ T29] audit: type=1400 audit(1754413945.724:13710): avc: denied { prog_load } for pid=21027 comm="syz.3.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.505213][ T29] audit: type=1400 audit(1754413945.724:13711): avc: denied { prog_load } for pid=21025 comm="syz.5.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.524609][ T29] audit: type=1400 audit(1754413945.724:13712): avc: denied { map_create } for pid=21025 comm="syz.5.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 329.579286][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6474'. [ 329.698949][T21042] lo speed is unknown, defaulting to 1000 [ 330.044213][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6481'. [ 330.108277][T21059] SELinux: syz.2.6484 (21059) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 330.557807][T21077] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6489'. [ 330.568852][T21076] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6489'. [ 330.902512][T21084] SELinux: syz.5.6492 (21084) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 331.197680][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6495'. [ 331.239339][T21110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6502'. [ 331.305636][T21121] SELinux: syz.2.6508 (21121) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 331.417455][T21128] lo speed is unknown, defaulting to 1000 [ 331.570754][T21135] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 331.577308][T21135] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.585058][T21135] vhci_hcd vhci_hcd.0: Device attached [ 331.592884][T21137] vhci_hcd: connection closed [ 331.593296][ T51] vhci_hcd: stop threads [ 331.602378][ T51] vhci_hcd: release socket [ 331.606804][ T51] vhci_hcd: disconnect device [ 332.144302][T21146] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6518'. [ 332.278007][T21155] lo speed is unknown, defaulting to 1000 [ 332.288373][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6523'. [ 332.306375][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6516'. [ 332.427267][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6526'. [ 332.530327][T21176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6530'. [ 332.658689][T21183] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 332.665261][T21183] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 332.672915][T21183] vhci_hcd vhci_hcd.0: Device attached [ 332.696568][T21184] vhci_hcd: connection closed [ 332.696715][ T51] vhci_hcd: stop threads [ 332.705892][ T51] vhci_hcd: release socket [ 332.710335][ T51] vhci_hcd: disconnect device [ 333.363096][T21196] lo speed is unknown, defaulting to 1000 [ 334.322581][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 334.322593][ T29] audit: type=1400 audit(1754413950.549:14145): avc: denied { map_create } for pid=21207 comm="syz.5.6540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 334.381848][ T29] audit: type=1400 audit(1754413950.569:14146): avc: denied { create } for pid=21209 comm="syz.1.6542" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 334.402797][ T29] audit: type=1400 audit(1754413950.569:14147): avc: denied { prog_load } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 334.422520][ T29] audit: type=1400 audit(1754413950.569:14148): avc: denied { map_create } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 334.441864][ T29] audit: type=1400 audit(1754413950.569:14149): avc: denied { prog_load } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 334.461340][ T29] audit: type=1400 audit(1754413950.569:14150): avc: denied { create } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 334.482172][ T29] audit: type=1400 audit(1754413950.569:14151): avc: denied { create } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 334.503171][ T29] audit: type=1400 audit(1754413950.569:14152): avc: denied { create } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 334.510039][T21223] lo speed is unknown, defaulting to 1000 [ 334.523970][ T29] audit: type=1400 audit(1754413950.569:14153): avc: denied { prog_load } for pid=21209 comm="syz.1.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 334.524000][ T29] audit: type=1400 audit(1754413950.589:14154): avc: denied { prog_load } for pid=21207 comm="syz.5.6540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 335.468405][T21244] __nla_validate_parse: 3 callbacks suppressed [ 335.468421][T21244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6556'. [ 335.529543][T21257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6560'. [ 335.576838][T21255] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 335.583452][T21255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.591403][T21255] vhci_hcd vhci_hcd.0: Device attached [ 335.600410][T21261] vhci_hcd: connection closed [ 335.600599][ T4008] vhci_hcd: stop threads [ 335.609540][ T4008] vhci_hcd: release socket [ 335.613943][ T4008] vhci_hcd: disconnect device [ 335.631046][T21264] lo speed is unknown, defaulting to 1000 [ 336.294454][T21273] lo speed is unknown, defaulting to 1000 [ 337.792529][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6576'. [ 338.376276][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6587'. [ 338.682274][T21323] lo speed is unknown, defaulting to 1000 [ 339.385341][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 339.385354][ T29] audit: type=1400 audit(1754413955.614:14548): avc: denied { read write } for pid=15905 comm="syz-executor" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 339.638421][ T29] audit: type=1400 audit(1754413955.864:14549): avc: denied { read write } for pid=7217 comm="syz-executor" name="loop4" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 339.666627][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6595'. [ 339.683037][ T29] audit: type=1400 audit(1754413955.894:14550): avc: denied { prog_load } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 339.702378][ T29] audit: type=1400 audit(1754413955.894:14551): avc: denied { create } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 339.722522][ T29] audit: type=1400 audit(1754413955.894:14552): avc: denied { create } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 339.742302][ T29] audit: type=1400 audit(1754413955.894:14553): avc: denied { prog_load } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 339.742802][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'. [ 339.761585][ T29] audit: type=1400 audit(1754413955.894:14554): avc: denied { read } for pid=21327 comm="syz.3.6595" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 339.794809][ T29] audit: type=1400 audit(1754413955.894:14555): avc: denied { prog_load } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 339.802403][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6599'. [ 339.814180][ T29] audit: type=1400 audit(1754413955.894:14556): avc: denied { prog_load } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 339.842739][ T29] audit: type=1400 audit(1754413955.894:14557): avc: denied { create } for pid=21327 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 339.899397][T21342] lo speed is unknown, defaulting to 1000 [ 340.113887][T21354] ip6gre1: entered promiscuous mode [ 340.119222][T21354] ip6gre1: entered allmulticast mode [ 340.796805][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6608'. [ 340.851554][T21369] lo speed is unknown, defaulting to 1000 [ 340.860679][T21371] lo speed is unknown, defaulting to 1000 [ 340.897266][T21373] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 340.926706][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6611'. [ 340.942934][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6610'. [ 341.601449][T21392] lo speed is unknown, defaulting to 1000 [ 342.477760][T21418] netlink: 'syz.4.6630': attribute type 13 has an invalid length. [ 342.490231][T21418] gretap0: refused to change device tx_queue_len [ 342.496910][T21418] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 342.927136][T21430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21430 comm=syz.1.6635 [ 343.114727][T21440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6640'. [ 343.495216][T21460] syzkaller0: entered promiscuous mode [ 343.495533][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6651'. [ 343.500727][T21460] syzkaller0: entered allmulticast mode [ 344.533215][ T29] kauditd_printk_skb: 767 callbacks suppressed [ 344.533229][ T29] audit: type=1400 audit(1754413960.750:15325): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 344.542760][T21494] netlink: 'syz.5.6666': attribute type 4 has an invalid length. [ 344.573085][ T29] audit: type=1400 audit(1754413960.770:15326): avc: denied { map_create } for pid=21493 comm="syz.5.6666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.592429][ T29] audit: type=1400 audit(1754413960.770:15327): avc: denied { prog_load } for pid=21493 comm="syz.5.6666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.624279][T21494] netlink: 'syz.5.6666': attribute type 4 has an invalid length. [ 344.648912][ T29] audit: type=1400 audit(1754413960.870:15328): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 344.679827][ T29] audit: type=1400 audit(1754413960.900:15329): avc: denied { map_create } for pid=21495 comm="syz.3.6676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.699323][ T29] audit: type=1400 audit(1754413960.900:15330): avc: denied { prog_load } for pid=21495 comm="syz.3.6676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.724835][ T29] audit: type=1400 audit(1754413960.900:15331): avc: denied { create } for pid=21498 comm="syz.5.6667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 344.759508][T21500] lo speed is unknown, defaulting to 1000 [ 344.773861][ T29] audit: type=1400 audit(1754413960.970:15332): avc: denied { prog_load } for pid=21498 comm="syz.5.6667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.793218][ T29] audit: type=1400 audit(1754413960.970:15333): avc: denied { map_create } for pid=21498 comm="syz.5.6667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.812729][ T29] audit: type=1400 audit(1754413960.970:15334): avc: denied { prog_load } for pid=21498 comm="syz.5.6667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.821278][T21499] lo speed is unknown, defaulting to 1000 [ 344.892523][T21505] lo speed is unknown, defaulting to 1000 [ 345.059746][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6673'. [ 345.083284][T21517] xt_hashlimit: max too large, truncated to 1048576 [ 345.905847][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6694'. [ 345.914751][T21540] netlink: 'syz.2.6694': attribute type 5 has an invalid length. [ 345.914763][T21540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6694'. [ 345.917181][T21540] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 345.940673][T21540] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 345.940750][T21540] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 345.940797][T21542] ================================================================== [ 345.940823][T21542] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 345.940834][T21540] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 345.940862][T21542] [ 345.940866][T21542] write to 0xffffffff86871ab0 of 8 bytes by task 21540 on cpu 0: [ 345.940880][T21542] data_alloc+0x271/0x2b0 [ 345.940902][T21542] prb_reserve+0x808/0xaf0 [ 345.940924][T21542] vprintk_store+0x56d/0x860 [ 345.940940][T21542] vprintk_emit+0x178/0x650 [ 345.940955][T21542] dev_vprintk_emit+0x242/0x2a0 [ 345.940973][T21542] dev_printk_emit+0x84/0xb0 [ 345.940989][T21542] __netdev_printk+0x35c/0x3e0 [ 345.941004][T21542] netdev_info+0x9b/0xd0 [ 345.941022][T21542] nsim_udp_tunnel_set_port+0x171/0x190 [ 345.941048][T21542] __udp_tunnel_nic_device_sync+0x567/0x9c0 [ 345.941074][T21542] __udp_tunnel_nic_add_port+0x6a9/0x720 [ 345.941101][T21542] udp_tunnel_notify_add_rx_port+0x12e/0x190 [ 345.941130][T21542] geneve_sock_add+0x3c2/0x5b0 [ 345.941155][T21542] geneve_open+0x66/0xf0 [ 345.941177][T21542] __dev_open+0x2d5/0x530 [ 345.941194][T21542] __dev_change_flags+0x163/0x400 [ 345.941215][T21542] rtnl_newlink_create+0x36b/0x620 [ 345.941235][T21542] rtnl_newlink+0xf29/0x12d0 [ 345.941251][T21542] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 345.941272][T21542] netlink_rcv_skb+0x123/0x220 [ 345.941302][T21542] rtnetlink_rcv+0x1c/0x30 [ 345.941322][T21542] netlink_unicast+0x5a8/0x680 [ 345.941349][T21542] netlink_sendmsg+0x58b/0x6b0 [ 345.941365][T21542] __sock_sendmsg+0x145/0x180 [ 345.941383][T21542] ____sys_sendmsg+0x31e/0x4e0 [ 345.941401][T21542] ___sys_sendmsg+0x17b/0x1d0 [ 345.941415][T21542] __x64_sys_sendmsg+0xd4/0x160 [ 345.941429][T21542] x64_sys_call+0x2999/0x2fb0 [ 345.941453][T21542] do_syscall_64+0xd2/0x200 [ 345.941470][T21542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.941487][T21542] [ 345.941492][T21542] read to 0xffffffff86871ab0 of 16 bytes by task 21542 on cpu 1: [ 345.941505][T21542] _prb_read_valid+0x1bc/0x920 [ 345.941533][T21542] prb_read_valid+0x3c/0x60 [ 345.941562][T21542] printk_get_next_message+0xc8/0x510 [ 345.941583][T21542] console_flush_all+0x290/0x730 [ 345.941603][T21542] console_unlock+0xa1/0x330 [ 345.941619][T21542] do_con_write+0x28d7/0x2940 [ 345.941634][T21542] con_write+0x24/0x40 [ 345.941656][T21542] do_output_char+0x49a/0x500 [ 345.941673][T21542] __process_echoes+0x20d/0x6b0 [ 345.941690][T21542] n_tty_receive_buf_common+0x8e4/0xbe0 [ 345.941712][T21542] n_tty_receive_buf2+0x33/0x40 [ 345.941733][T21542] tty_ldisc_receive_buf+0x63/0xf0 [ 345.941761][T21542] paste_selection+0x333/0x490 [ 345.941786][T21542] tioclinux+0x3b5/0x460 [ 345.941805][T21542] vt_ioctl+0x75f/0x1880 [ 345.941824][T21542] tty_ioctl+0x7de/0xb80 [ 345.941846][T21542] __se_sys_ioctl+0xcb/0x140 [ 345.941866][T21542] __x64_sys_ioctl+0x43/0x50 [ 345.941886][T21542] x64_sys_call+0x19a8/0x2fb0 [ 345.941903][T21542] do_syscall_64+0xd2/0x200 [ 345.941921][T21542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.941942][T21542] [ 345.941946][T21542] Reported by Kernel Concurrency Sanitizer on: [ 345.941967][T21542] CPU: 1 UID: 0 PID: 21542 Comm: syz.1.6683 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) [ 345.941992][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.942003][T21542] ================================================================== [ 345.942151][T21540] geneve2: entered promiscuous mode [ 346.292785][T21540] geneve2: entered allmulticast mode