last executing test programs: 4m59.890920839s ago: executing program 2 (id=1971): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000700)='./bus\x00', 0x2000414, &(0x7f0000000740)=ANY=[], 0x1, 0x2bd, &(0x7f0000001500)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x3182811, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000002020104000000000000000002000005400002800600034000010000140001800800010000000000080002000000000014000180080000000c00028005000100060000007f9942d343814c75a2fd1f521657418330d07a260666bb47ac0871b8db5455d746d528cde61aff11f779d7c7d182101d11dcb45a8c87938882437578e20a6d70ed640a8bcdf4f341e6cb5496ba4345bad3a782d4ec2fb013a940b60d9ca94d762e4819e4b6d0e8d88f"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="03002cbd70387ddbdf25010000000800e401", @ANYRES32=0x0, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="e24a074d", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250200000008000400e000000208000400ac1414aa08000700", @ANYRES32=r0, @ANYBLOB="0600060002000000"], 0x34}}, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x9c3fa077fa966879, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x6f}}}}}, 0x28}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280), 0xfc, 0x581, &(0x7f0000000f40)="$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") ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) 4m59.653045462s ago: executing program 2 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x142, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x8, 0x5, 0xd, 0x3e51}, {0xd, 0x8, 0x3, 0x8}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x10, 0xa, 0x4, 0x0, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0x8, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x401, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x81, 0xfff, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffffffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x99c, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x800000, 0xb422, 0x7, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x9, 0x800, 0x0, 0x9, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x100, 0x1, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0x9, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffffd, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x3, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0x5, 0x4, 0xc, 0x0, 0xf, 0x80000000, 0x5, 0x5, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x1c000000, 0x1, 0x6, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffffff0, 0x2, 0x3, 0x8090, 0x7, 0x6d8, 0xfffffffb, 0x6, 0x400, 0x800, 0x8, 0x6, 0x76]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x2, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e10e}, 0x40094) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={@mcast2, 0x16}) unshare(0x2c020400) r6 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r6, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 4m59.134269303s ago: executing program 2 (id=1975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000009060101000000000000000003000000380008800c00078005001500070000000c00078006001d4000010000100007800c001840001272b359e2c1ac780007800800084000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2f2}, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) unshare(0x2c020400) unshare(0x4020400) syz_read_part_table(0x5cd, &(0x7f0000000a00)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000300)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'sh\x00', 0x31, 0x2, 0x1f}, 0x2c) 4m58.24626503s ago: executing program 2 (id=1998): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) timer_gettime(r0, &(0x7f00000001c0)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x800000009, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000f5ffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) close(r8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x56, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f0000000100)={0xd, 0x1, 0x0, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 4m58.171995658s ago: executing program 2 (id=2000): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) sync() 4m57.308776282s ago: executing program 2 (id=2013): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0xa7e, 0x6d}, 0x2c) unshare(0xc040480) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000480)={@loopback, 0x2b, r8}) socket$inet6(0xa, 0x4, 0x7) syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') 4m41.993641751s ago: executing program 32 (id=2013): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0xa7e, 0x6d}, 0x2c) unshare(0xc040480) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000480)={@loopback, 0x2b, r8}) socket$inet6(0xa, 0x4, 0x7) syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') 6.697796331s ago: executing program 0 (id=4394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f0000000280)) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000180)=[{0x2, 0x7, 0x800}, {0x3, 0xfb97}, {0x2, 0x4}], 0x2aaaaaaaaaaaadea) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, &(0x7f0000000840)=""/40, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.750357795s ago: executing program 0 (id=4403): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYRES32=0x0, @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb057c485f95ea61816acf247da86bd365ecfc49004e6db5040001"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r5 = fsmount(r3, 0x0, 0x2) openat(r5, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r9) ftruncate(0xffffffffffffffff, 0x2007ffc) 5.29129961s ago: executing program 0 (id=4408): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) chdir(&(0x7f0000000300)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cef4d2d04453646207094fb2c9bce147cfb97d33b577c675f4e16cb4e5916abd8704aa7c35822779f5ddf651598b7b42ab080504a01e23dd22b22d73acc9e49d25a807fdaef6df20bded90fc1da916cd3beedb649ec6d8a4ce0627eb894fbbb538c2bea645d77178b957ac6a76ef443061a224e9", @ANYRES16=r8, @ANYBLOB="040029bd7000fbdbdf25040000004000058008000100657468002c00028008000400070000000800030006000000080003000700000008000400e102000008000400a95f00000800010075647000040001801400058008000100657468000800010065746800340007800c000400000001000000000008000100f00300000800010099f100000c00030001000000000000000800020003000000ac000180080003000c00000044000400200001000a004e2000000001fe8000000000000000000000000000bb01000000200002000a004e220000008bfe8000000000000000000000000000bb08000000080003000700000008000300010400000800030003000000340002800800020006000000080002000e05000008000300000400000800030007000000080002000600000008000200000000000d0001007564703a73797a3100000000"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4.347630372s ago: executing program 0 (id=4414): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x21, 0x8c, 0x0, 0x1, [@generic="1a04268ff9f83d024ce7787f973b78e4b833420b5e7c4fc460e6d27382"]}]}]}, 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d", @ANYRESDEC], 0x10, 0x7f4, &(0x7f0000000e40)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4804) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$nl_netfilter(0x10, 0x3, 0xc) 4.250057072s ago: executing program 1 (id=4415): r0 = syz_usbip_server_init(0x1) r1 = syz_usbip_server_init(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xfffffffffffff800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x7}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x3, 0x58, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x52, 0x0, 0x0, 0x1, 0x4, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x3, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x2, {0x7, 0x7, 0x0, 0x1f, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r9}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6694380b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.532513692s ago: executing program 5 (id=4422): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYRES32=0x0, @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054a"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = fsmount(r3, 0x0, 0x2) openat(r6, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r10) ftruncate(0xffffffffffffffff, 0x2007ffc) 3.360190909s ago: executing program 3 (id=4424): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) chdir(&(0x7f0000000300)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cef4d2d04453646207094fb2c9bce147cfb97d33b577c675f4e16cb4e5916abd8704aa7c35822779f5ddf651598b7b42ab080504a01e23dd22b22d73acc9e49d25a807fdaef6df20bded90fc1da916cd3beedb649ec6d8a4ce0627eb894fbbb538c2bea645d77178b957ac6a76ef443061a224e9", @ANYRES16=r8, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.240512661s ago: executing program 1 (id=4425): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) socket(0x10, 0x2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6871cddc5ee58a1d, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES16, @ANYRESHEX], &(0x7f0000019300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff00004485"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r3}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 3.102904515s ago: executing program 5 (id=4426): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x900a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10001}, 0x6080, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x88, 0x2c6, &(0x7f0000000680)="$eJzs3U9rY1UUAPDz0tc0My5SxJW4eOAsXJWpWzetMoLYlRJBXWhxMiBJGEih4Aim8yFc6ufwI7hx4xcQwa3gri5Gn7x/TWJfM7VTU3R+v0V7c+85957k0nSVk09fmYzuP0zi8enP0fspic5e7MWfSWxHJxonkcZ5bXMAwH/B73kev+VXyUw7118NALAO1f//yk3XAgCsx/sffvTu/sHBvfeyrHycDJLi50mzvv8gPo9xDONu9ONJRH6mGr/9zsG9SLPCdmxGxOB4EDH55Icm/9eIMn83+rNoz9/NKnFnMjuu8mfHg824HVnsP9hsSunHS+35r7fkx6Abr726UP9O9OPHz+JhjON+Wcc8/6vdLHsr//r0y4+LY4r8pBODrTJuLt8of91az70AAAAAAAAAAAAAAAAAAAAAAPD/tpNlSdW+J9uOO5Niqu6/s/GkXN+pm+tkaSz356nyk2ajqj9Q3rT4meXxTdNf526WZXkdOM9P4+XUlwgAAAAAAAAAAAAAAAAAAABA4eiLR6PD8Xg4vZZB0w2g+Vj/VffZm89sLZXbElwGdC911mK3gaLWlcGRprF6w9O88vTn1WkObY+5NV/qXhTzzwdb88v9IKpBczHPtHP+t7t48c3q8aPRYVbHNC/y6DB52lm9Zp/vFpe68awvQl5WuLW8T/TOSi1ejZOiwnKpe01/Bd0XWpf+yPP8cvu88Ut1R/VMUrbYuNzpm/VgIX05pnf+Lr6/eMML3zI2rv5uAwAAAAAAAAAAAAAAAAAArFJ+1vf2t8PpUcvi45WpnX+tKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L7/8fj4fRs0IuI5Zlzg1mdvCqmHnRjenTDTxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnwF8BAAD//0JgRcc=") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000440)=""/171, 0xab}], 0x4}, 0x0) r7 = socket(0x11, 0x2, 0x0) setsockopt(r7, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9, @ANYBLOB="2637f1ff622bc3169c24ec72773931c2cfe3a82ebc4f010057f872948180ffa08a4d2d1961b3d2275ccdb665ecf4d6a69fc881a808764cc5c80c81178f0ae93a10d35b6c8d5f9794adb9521e6881ab0ec9fa9bcd6146c78276143b"], 0x40}}, 0x0) 2.968410898s ago: executing program 4 (id=4427): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYRES32=0x0, @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb057c485f95ea61816acf247da86b"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = fsmount(r3, 0x0, 0x2) openat(r6, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r10) ftruncate(0xffffffffffffffff, 0x2007ffc) 2.782197936s ago: executing program 4 (id=4428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000004000000096187000000000000000000000000000087d0bd692b2e6983fce33f83d929c51f843fe8d3773a23f87885c16c8f721437c29ff2d9b09c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001900000000000000000000001000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f00000004c0)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00002018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300f0889d6700850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000380)={0x2, &(0x7f0000000100)=[{0x50, 0x8, 0x0, 0x7}, {0x6, 0x93}]}) write$ppp(r5, &(0x7f00000002c0)="4fa1efc4c7aa", 0x6) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082d7000fedbdf25010000000000000007410000001000180000000969623a736974300000"], 0x2c}}, 0x44840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="320000002509000000000000010000000d40f4ffd1a0f5ac926bd0140000000085480985c0e6d520f462589e3a0000000400000000850000"], &(0x7f0000000300)='GPL\x00', 0x79, 0x1d, &(0x7f0000000400)=""/29, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x11ec5, r3, 0x2, &(0x7f0000000500)=[r2, r2, r1, r0, r0, r2, 0xffffffffffffffff], &(0x7f0000000580)=[{0x100003, 0x5, 0x0, 0x7}, {0x0, 0x3, 0x9, 0x9}], 0x10, 0x237a}, 0x94) r8 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x1521, 0x100, 0x0, 0x20e, 0x0, r5}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r8, 0x5fe2, 0x217, 0xa5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r12, 0x407, 0x4000004) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close_range(r13, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) 2.475009116s ago: executing program 4 (id=4429): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0xb}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r7, 0x0, 0x0, 0x80800) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r11, 0x0, 0x1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) sendfile(r2, r2, 0x0, 0x1000000201005) 2.474245697s ago: executing program 3 (id=4430): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0xa7e, 0x6d}, 0x2c) unshare(0xc040480) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@loopback, 0x2b}) socket$inet6(0xa, 0x4, 0x7) syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') 2.380624446s ago: executing program 3 (id=4431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002040)=0x0) r7 = getegid() r8 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1eee6fdd5b574d17a9b0589fd273264120c801ee7399d94eaed2d350f425cc225c398d4106f9c32e2f6a70f8860d2513102230b824d34c3677103dab0e853a3e9cdd004f") r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r11, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r12 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r11, r12) quotactl_fd$Q_GETFMT(r9, 0xffffffff80000401, r11, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf8b292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd60654e019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8292e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a8644889d4f89986408f09e29cc859d6e60f3097abc84a2457f45c7eab60c4460b92ee8dadc7d929b7a54becdb722391d9ad146047873d2abc7f281f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a64cd3d528c55a4506740dd0819b06f78", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001100)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff]}}], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add1b7e7cf62e6474205e0fe08d13266f4569b4", 0xc4}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0xc4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) memfd_secret(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3aa49705, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3e58028c, 0x82, &(0x7f0000000440)=""/130, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1fe3d, 0xffffffffffffffff, 0x4, &(0x7f00000001c0)=[r0, r0, r0, r0], &(0x7f0000000540)=[{0x3, 0x4, 0x4, 0x4}, {0x1, 0x3, 0x10, 0x3}, {0x3, 0x4, 0x5}, {0x1, 0x1, 0xd, 0x1}], 0x10, 0x10000}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r14, 0x0, r4}) 2.190512295s ago: executing program 5 (id=4432): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r2, &(0x7f00000000c0)='./mnt\x00', r2, &(0x7f0000000000)='./mnt\x00', 0x177) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='fscache_acquire\x00', 0xffffffffffffffff, 0x0, 0x6a7d}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='jbd2_end_commit\x00'}, 0x18) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x20000002, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x6fcf, 0xf8, "b72ca7a26413ef6ca5a76bf8224be84e070856", 0x1, 0x3}) r8 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x10000, 0x0, 0x240024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000480)=0xf8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="08000000000000000000080000000000000000001d916df1db989ad7cc4077810a3d3641af50e4e7f3ce7d5f9ff597bd230ce15277145c72204b6b31c5929b523d23c11764fd9fe000"/85, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000300"/28], 0x50) socket(0x10, 0x803, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.508216332s ago: executing program 3 (id=4433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYRES32=0x0, @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = fsmount(r3, 0x0, 0x2) openat(r6, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r10) ftruncate(0xffffffffffffffff, 0x2007ffc) 1.507456592s ago: executing program 4 (id=4434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x400, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRES8=r1, @ANYRES8=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xff}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r3, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x840, 0x39) fcntl$setlease(r4, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$inet6(0xa, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x32, 0x5, 0x2, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r7, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@version_u}, {@access_client}]}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000746002c"], 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r11, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x25}, 0x94) 1.457073757s ago: executing program 5 (id=4435): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x900a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10001}, 0x6080, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x88, 0x2c6, &(0x7f0000000680)="$eJzs3U9rY1UUAPDz0tc0My5SxJW4eOAsXJWpWzetMoLYlRJBXWhxMiBJGEih4Aim8yFc6ufwI7hx4xcQwa3gri5Gn7x/TWJfM7VTU3R+v0V7c+85957k0nSVk09fmYzuP0zi8enP0fspic5e7MWfSWxHJxonkcZ5bXMAwH/B73kev+VXyUw7118NALAO1f//yk3XAgCsx/sffvTu/sHBvfeyrHycDJLi50mzvv8gPo9xDONu9ONJRH6mGr/9zsG9SLPCdmxGxOB4EDH55Icm/9eIMn83+rNoz9/NKnFnMjuu8mfHg824HVnsP9hsSunHS+35r7fkx6Abr726UP9O9OPHz+JhjON+Wcc8/6vdLHsr//r0y4+LY4r8pBODrTJuLt8of91az70AAAAAAAAAAAAAAAAAAAAAAPD/tpNlSdW+J9uOO5Niqu6/s/GkXN+pm+tkaSz356nyk2ajqj9Q3rT4meXxTdNf526WZXkdOM9P4+XUlwgAAAAAAAAAAAAAAAAAAABA4eiLR6PD8Xg4vZZB0w2g+Vj/VffZm89sLZXbElwGdC911mK3gaLWlcGRprF6w9O88vTn1WkObY+5NV/qXhTzzwdb88v9IKpBczHPtHP+t7t48c3q8aPRYVbHNC/y6DB52lm9Zp/vFpe68awvQl5WuLW8T/TOSi1ejZOiwnKpe01/Bd0XWpf+yPP8cvu88Ut1R/VMUrbYuNzpm/VgIX05pnf+Lr6/eMML3zI2rv5uAwAAAAAAAAAAAAAAAAAArFJ+1vf2t8PpUcvi45WpnX+tKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L7/8fj4fRs0IuI5Zlzg1mdvCqmHnRjenTDTxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnwF8BAAD//0JgRcc=") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000440)=""/171, 0xab}], 0x4}, 0x0) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8, @ANYBLOB="2637f1ff622bc3169c24ec72773931c2cfe3a82ebc4f010057f872948180ffa08a4d2d1961b3d2275ccdb665ecf4d6a69fc881a808764cc5c80c81178f0ae93a10d35b6c8d5f9794adb9521e6881ab0ec9fa9bcd6146c78276143b"], 0x40}}, 0x0) 1.374992605s ago: executing program 0 (id=4436): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) chdir(&(0x7f0000000300)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cef4d2d04453646207094fb2c9bce147cfb97d33b577c675f4e16cb4e5916abd8704aa7c35822779f5ddf651598b7b42ab080504a01e23dd22b22d73acc9e49d25a807fdaef6df20bded90fc1da916cd3beedb649ec6d8a4ce0627eb894fbbb538c2bea645d77178b957ac6a76ef443061a224e9", @ANYRES16=r8, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.354779867s ago: executing program 1 (id=4437): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYRES32=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = fsmount(r3, 0x0, 0x2) openat(r6, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r10) ftruncate(0xffffffffffffffff, 0x2007ffc) 1.316896951s ago: executing program 3 (id=4438): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb057c485f95ea61816acf247da86bd365ecfc49004e6db504000100"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r5 = fsmount(r3, 0x0, 0x2) openat(r5, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r9) ftruncate(0xffffffffffffffff, 0x2007ffc) 1.177480374s ago: executing program 1 (id=4439): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) chdir(&(0x7f0000000300)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cef4d2d04453646207094fb2c9bce147cfb97d33b577c675f4e16cb4e5916abd8704aa7c35822779f5ddf651598b7b42ab080504a01e23dd22b22d73acc9e49d25a807fdaef6df20bded90fc1da916cd3beedb649ec6d8a4ce0627eb894fbbb538c2bea645d77178b957ac6a76ef443061a224e9", @ANYRES16=r8, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.048739767s ago: executing program 3 (id=4440): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r5, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000200)=[{r0, 0x8107}, {r2, 0xa1f3}, {r3, 0x4000}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_wait(r9, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02a0a258d305"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r10, @ANYBLOB="000000000000005b4752f000000000007b8af8ff00000000bfa200000000000007020002f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 899.105112ms ago: executing program 0 (id=4441): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mknod$loop(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) mknod$loop(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000080)={[], [{@seclabel}]}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002540), 0x20540, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x2) 884.724363ms ago: executing program 1 (id=4442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000000180)=[{0x2, 0x7, 0x800}, {0x3, 0xfb97}, {0x2, 0x4}], 0x2aaaaaaaaaaaadea) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r7, &(0x7f0000000840)=""/40, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x8, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) close_range(r6, 0xffffffffffffffff, 0x0) semop(r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 844.789697ms ago: executing program 4 (id=4443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="dff9c79ad4b983b1acbfe0b768c0e4f9f4e4ed01e29318be33c139bdb7acad4ded1c064308f98d6f171d842403c1f5a48362dc0864e9b9824944a546b0e18c7f4f5dc5f07871a10534d7889ce2302caa3878c577370c16e57fcf2f7113fc2bb953cd675a1fcc535b97a4173b75b72e6f04", 0x71}, {&(0x7f0000000080)="d4101954619b68e10d42f6792ba13a104efb4a184a1bd4714016b86641d9fb2644531bbf3f76c2f10419a3e41d7de3486fd9f3c1049f0b4ebff864ad203e5a6d511e59dcc887f5ed8d29c08421c4be7b5acc1c64c39e257f0caf7970bd9e5a0c192736d444fcbe92400fc8bfd4e288b69424f1d717340a0019b404c5", 0x7c}, {&(0x7f0000000140)="ca46090b618da2589b6c7c4d517a8c36fcb468381c77b8bbfe83bba465fc417e4272404302746ca9ae02ae51825ce0714375662a697d7ac03eb5eca712c21308fa88b1dbdcbb5152e7d6b25910787b565d79241000fa0df3274f5160fc23d094bdd144db19d8f68afb20020f9e11eb7cc7de11ac7b96e9ebe0c745493652159f664655bcdfae6d539632cb295dd924ab62c120000fb9201338cc8556300f78d1fe7608c8d09536d0d78866508ab7f7b985848408995fb2d40116", 0xba}, {&(0x7f0000000280)="5ed018a36c052a58634f0527f5ea3cdaaf6b6455dfc5f2a115f62fe0bfa777806820e3b058957608faef0a623f8ea203c96e8c1002669357f0929af6c342963cc3782222375b5989017373e76e2f0c6021b60ce4aa2c9b4fd54a9fa1ca319564eee0ddd56690ac8bbd9f8480ed84708612c93e8478fb41e21dd196191b5876c3a1759924bde6462431174f79c2679867f3797cc8df81a6c0c9bc34e50095e51b4a3633020bc7122d063e16ecb5be697d8147d355b375c83df6e15a74b5a24c5344579b5d545d60", 0xc7}, {&(0x7f0000000380)="615c81cd7921beeff7cf92f18d34a525a55fac174af88c4a37a88d7a74ce761340e08c281cfb474bee882de50c43723b0ae1f0ddc7ecf39804fc7cfdafaad36f01cf4b2e4b8f9bd0112e5cd34703548a935943b42ab29da06f7ef8c4e270845e6609d380ab178bb6e0db1406b6b563684128bb1c562af9b6fbb6d1878758166ced6612280535", 0x86}, {&(0x7f0000000440)="d19ca719f7e40e8c9a1d4274091eb3f71cad69007dd78cdfc493a248c96eeef991da2b47e887f7387214c6d136399b287fd8b2d4fab358a72ed0b228883f2412ebb8bb0e2f5ba0de70a856667eb9ad44c2d1eae234632157a1624de65fa88033e76b44e389e5c23d99a85a2465beff894596f6783ca99f8f5d220625a834b59b11c47fc6dd", 0x85}, {&(0x7f0000000500)="174829e03b35c6e97f816ecd4886f70d7b110628c374e3a8b1cc9e7b6fdb6a3a8f31ec2540cbdc08c0cd09ffe43afd362be3ff7bd9d86f60e30e28794593be4fc91495649da43a36588419b3f571a720c6246d1103d64803319ef9d39c909897328e29b1bb905db557e3ddd64cec333fc98e0ca60e21b33c803ad920e70bea6d036786ef64067ae6f1d7c7007c47e93682855a1c23748309d7e19f0a1674076c9e6b0b22b0ea519f5227513442d791597800b6c99ba4c6ac2be66b0ac58c4d4e6a7067efec", 0xc5}, {&(0x7f0000000600)="4a46124510a2ce874c9fb4b78834c691efee6d39b87e02c322d2f7b2d4408556997818cfa12869422a1d18e1362ffc840241d7d8960e40b9aab699c9c71dcdda58f70ba3f7f5d3", 0x47}], 0x8, 0x5, 0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000100)="ecb2d5cbde8069324a04ca01b564d6b0dafbcf2fc2fbb11384b275b4b420dd601be6fcccfb2bea1c47a8277ec8f9636facd89adfa62753b700650d5680", &(0x7f0000001d00)=""/4096}, 0x20) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0xfd, 0x648, &(0x7f0000002280)="$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") r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, &(0x7f0000002640)) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1a, 0x4, 0xfffffffe, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x8, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0xffffffff, 0x1, 0x3, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x6, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x3, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x4, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x8, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x40007, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10005, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x9, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0xfffffffd, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0x3, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x9, 0x24c, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x103, 0xa, 0x6, 0x3, 0xf, 0x1, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x104, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000007, 0xc1, 0x2, 0x401, 0x40, 0x2002]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r3, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r9, 0x4b67, &(0x7f0000000180)) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="03800000bbbbbbbbbbbb0800450000380020000000019078ac1e0001ac1c14aa030490781200183ba7a882820a7eee0400010000ac1414546401010100186371ae9b1c03"], 0x0) 794.359282ms ago: executing program 4 (id=4444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x87) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRESDEC=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x1000000000000}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r6, @ANYRES8=r7], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r10], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc7) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000002000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r15, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup2(r10, r12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) acct(&(0x7f0000000040)='./file0\x00') accept4$phonet_pipe(r6, 0x0, &(0x7f0000000200), 0x80800) 738.603897ms ago: executing program 5 (id=4445): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x900a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10001}, 0x6080, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x88, 0x2c6, &(0x7f0000000680)="$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") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000440)=""/171, 0xab}], 0x4}, 0x0) r7 = socket(0x11, 0x2, 0x0) setsockopt(r7, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9, @ANYBLOB="2637f1ff622bc3169c24ec72773931c2cfe3a82ebc4f010057f872948180ffa08a4d2d1961b3d2275ccdb665ecf4d6a69fc881a808764cc5c80c81178f0ae93a10d35b6c8d5f9794adb9521e6881ab0ec9fa9bcd6146c78276143b"], 0x40}}, 0x0) 127.403108ms ago: executing program 5 (id=4446): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) chdir(&(0x7f0000000300)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="cef4d2d04453646207094fb2c9bce147cfb97d33b577c675f4e16cb4e5916abd8704aa7c35822779f5ddf651598b7b42ab080504a01e23dd22b22d73acc9e49d25a807fdaef6df20bded90fc1da916cd3beedb649ec6d8a4ce0627eb894fbbb538c2bea645d77178b957ac6a76ef443061a224e9", @ANYRES16=r8, @ANYBLOB="040029bd7000fbdbdf25040000004000058008000100657468002c00028008000400070000000800030006000000080003000700000008000400e102000008000400a95f00000800010075647000040001801400058008000100657468000800010065746800340007800c000400000001000000000008000100f00300000800010099f100000c00030001000000000000000800020003000000ac000180080003000c00000044000400200001000a004e2000000001fe8000000000000000000000000000bb01000000200002000a004e220000008bfe8000000000000000000000000000bb08000000080003000700000008000300010400000800030003000000340002800800020006000000080002000e05000008000300000400000800030007000000080002000600000008000200000000000d0001007564703a73797a3100000000"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 1 (id=4447): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r2, &(0x7f00000000c0)='./mnt\x00', r2, &(0x7f0000000000)='./mnt\x00', 0x177) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='fscache_acquire\x00', 0xffffffffffffffff, 0x0, 0x6a7d}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='jbd2_end_commit\x00'}, 0x18) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x20000002, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x6fcf, 0xf8, "b72ca7a26413ef6ca5a76bf8224be84e070856", 0x1, 0x3}) r8 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x10000, 0x0, 0x240024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000480)=0xf8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="08000000000000000000080000000000000000001d916df1db989ad7cc4077810a3d3641af50e4e7f3ce7d5f9ff597bd230ce15277145c72204b6b31c5929b523d23c11764fd9fe000"/85, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000300"/28], 0x50) socket(0x10, 0x803, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): a37e54b099 code=0x7ffc0000 [ 418.381663][T16457] tipc: Enabling of bearer rejected, already enabled [ 418.930270][T16467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=16467 comm=syz.0.3811 [ 418.995426][T16471] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3813'. [ 419.311347][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 419.321209][T16484] validate_nla: 7 callbacks suppressed [ 419.321225][T16484] netlink: 'syz.5.3815': attribute type 5 has an invalid length. [ 419.334438][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3815'. [ 419.589759][T16495] SELinux: security_context_str_to_sid (Z2hR!oK[ehƊI@ֻd$DM0\u?~-Ш [ 419.589759][T16495] bVw֣@/F?66[6]06Br [ 419.589759][T16495] !r湉2 vղ8狼/NV}|8ygv瞓\TvV6{#+Ζ) failed with errno=-22 [ 420.430605][T16511] loop5: detected capacity change from 0 to 512 [ 420.568410][T16511] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3819: inode has both inline data and extents flags [ 420.609378][T16511] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3819: couldn't read orphan inode 15 (err -117) [ 420.657700][T16511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.784485][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.945117][T16520] loop5: detected capacity change from 0 to 512 [ 420.954673][T16520] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3821: inode has both inline data and extents flags [ 420.968221][T16520] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3821: couldn't read orphan inode 15 (err -117) [ 421.028320][T16520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.198461][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.371455][T16535] ipvlan3: entered promiscuous mode [ 421.591503][T16543] ip6t_srh: unknown srh match flags 4000 [ 421.734649][T16555] netlink: 'syz.0.3832': attribute type 6 has an invalid length. [ 421.743690][T16555] netlink: 'syz.0.3832': attribute type 6 has an invalid length. [ 421.752573][T16555] tipc: Enabling of bearer rejected, already enabled [ 421.798495][T16560] netlink: 'syz.0.3833': attribute type 6 has an invalid length. [ 421.807298][T16560] netlink: 'syz.0.3833': attribute type 6 has an invalid length. [ 421.817530][T16560] tipc: Enabling of bearer rejected, already enabled [ 422.733492][T16581] siw: device registration error -23 [ 422.888751][T16588] Q6\bY4 speed is unknown, defaulting to 1000 [ 422.897814][T16588] hsr0 speed is unknown, defaulting to 1000 [ 422.978900][T16588] lo speed is unknown, defaulting to 1000 [ 423.523499][T16596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3841'. [ 423.725191][ T29] kauditd_printk_skb: 1013 callbacks suppressed [ 423.725205][ T29] audit: type=1326 audit(423.691:557127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.810192][ T29] audit: type=1326 audit(423.741:557128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.835202][ T29] audit: type=1326 audit(423.741:557129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.860276][ T29] audit: type=1326 audit(423.741:557130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.884404][ T29] audit: type=1326 audit(423.741:557131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.909281][ T29] audit: type=1326 audit(423.741:557132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.933455][ T29] audit: type=1326 audit(423.741:557133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.958328][ T29] audit: type=1326 audit(423.751:557134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 423.982358][ T29] audit: type=1326 audit(423.751:557135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 424.009694][ T29] audit: type=1326 audit(423.751:557136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 424.045445][T16604] netlink: 'syz.1.3844': attribute type 6 has an invalid length. [ 424.057138][T16604] netlink: 'syz.1.3844': attribute type 6 has an invalid length. [ 424.077519][T16604] tipc: Enabling of bearer rejected, already enabled [ 425.120815][T16610] wireguard0: entered promiscuous mode [ 425.126658][T16610] wireguard0: entered allmulticast mode [ 425.889498][T16629] loop5: detected capacity change from 0 to 512 [ 425.907199][T16629] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3851: inode has both inline data and extents flags [ 425.938459][T16629] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3851: couldn't read orphan inode 15 (err -117) [ 425.953908][T16629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.015760][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.714438][T16643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3856'. [ 426.770730][T16647] loop5: detected capacity change from 0 to 164 [ 426.817004][T16649] Q6\bY4 speed is unknown, defaulting to 1000 [ 426.824472][T16649] hsr0 speed is unknown, defaulting to 1000 [ 426.887867][T16649] lo speed is unknown, defaulting to 1000 [ 427.718924][T16655] loop5: detected capacity change from 0 to 256 [ 427.903624][T16655] FAT-fs (loop5): bogus sectors per cluster 223 [ 428.003374][T16655] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.305989][T16665] wireguard0: entered promiscuous mode [ 428.311548][T16665] wireguard0: entered allmulticast mode [ 428.527116][T16672] loop5: detected capacity change from 0 to 512 [ 428.569766][T16672] ext4: Unknown parameter 'uid' [ 428.745223][T16677] netlink: 'syz.0.3865': attribute type 6 has an invalid length. [ 428.753745][T16677] netlink: 'syz.0.3865': attribute type 6 has an invalid length. [ 428.762293][T16677] tipc: Enabling of bearer rejected, already enabled [ 428.857236][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 428.857251][ T29] audit: type=1326 audit(428.711:557909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 428.888399][ T29] audit: type=1326 audit(428.711:557910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 428.912614][ T29] audit: type=1326 audit(428.711:557911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 428.936581][ T29] audit: type=1326 audit(428.711:557912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 428.959708][ T29] audit: type=1326 audit(428.711:557913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 428.984566][ T29] audit: type=1326 audit(428.711:557914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 429.009376][ T29] audit: type=1326 audit(428.711:557915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 429.033470][ T29] audit: type=1326 audit(428.711:557916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 429.058345][ T29] audit: type=1326 audit(428.711:557917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 429.082527][ T29] audit: type=1326 audit(428.711:557918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 430.539350][T16680] loop5: detected capacity change from 0 to 512 [ 430.548101][T16680] EXT4-fs: Ignoring removed oldalloc option [ 430.770577][T16680] EXT4-fs (loop5): 1 truncate cleaned up [ 430.776802][T16680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.807639][T16680] Q6\bY4 speed is unknown, defaulting to 1000 [ 430.814911][T16680] hsr0 speed is unknown, defaulting to 1000 [ 430.901839][T16680] lo speed is unknown, defaulting to 1000 [ 432.670292][T16699] Q6\bY4 speed is unknown, defaulting to 1000 [ 432.679361][T16699] hsr0 speed is unknown, defaulting to 1000 [ 432.727120][T16699] lo speed is unknown, defaulting to 1000 [ 433.095216][T16715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.217616][T16722] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.893371][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 433.893388][ T29] audit: type=1326 audit(433.821:558270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.0.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 433.925582][ T29] audit: type=1326 audit(433.861:558271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.0.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 433.950404][ T29] audit: type=1326 audit(433.861:558272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.0.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 434.184789][T16749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3879'. [ 434.255518][T16751] netlink: 'syz.0.3876': attribute type 6 has an invalid length. [ 434.300959][T16755] netlink: 'syz.0.3876': attribute type 6 has an invalid length. [ 434.314427][ T29] audit: type=1326 audit(434.071:558273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.0.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ab3160ee7 code=0x7ffc0000 [ 434.338303][ T29] audit: type=1326 audit(434.071:558274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.0.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7ab3160e5c code=0x7ffc0000 [ 434.361311][ T29] audit: type=1400 audit(434.151:558275): avc: denied { getopt } for pid=16745 comm="syz.1.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.381236][ T29] audit: type=1326 audit(434.281:558276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16753 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 434.404376][ T29] audit: type=1326 audit(434.281:558277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16753 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 434.437542][T16759] netlink: 'syz.1.3881': attribute type 6 has an invalid length. [ 434.446018][T16759] netlink: 'syz.1.3881': attribute type 6 has an invalid length. [ 434.454153][T16759] tipc: Enabling of bearer rejected, already enabled [ 434.510066][ T29] audit: type=1326 audit(434.481:558278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16753 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 434.538321][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.576591][ T29] audit: type=1326 audit(434.481:558279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16753 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 434.646370][T16763] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 434.654191][T16763] netlink: 'syz.1.3886': attribute type 2 has an invalid length. [ 434.898134][T16775] Q6\bY4 speed is unknown, defaulting to 1000 [ 434.907814][T16775] hsr0 speed is unknown, defaulting to 1000 [ 434.979711][T16775] lo speed is unknown, defaulting to 1000 [ 435.464395][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 435.513515][T16768] loop5: detected capacity change from 0 to 512 [ 435.547262][T16768] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3883: inode has both inline data and extents flags [ 435.597894][T16768] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3883: couldn't read orphan inode 15 (err -117) [ 435.620455][T16781] netlink: 'syz.0.3885': attribute type 12 has an invalid length. [ 435.631737][T16768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.962260][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.242545][T16807] netlink: 'syz.1.3896': attribute type 6 has an invalid length. [ 436.252146][T16807] netlink: 'syz.1.3896': attribute type 6 has an invalid length. [ 436.260442][T16807] tipc: Enabling of bearer rejected, already enabled [ 436.345446][T16810] vlan0: entered allmulticast mode [ 436.594142][T16819] netlink: 'syz.0.3894': attribute type 4 has an invalid length. [ 436.657235][ T2968] Q6\bY4 speed is unknown, defaulting to 1000 [ 436.664126][ T2968] syz2: Port: 1 Link DOWN [ 437.043768][T16823] wireguard0: entered promiscuous mode [ 437.050215][T16823] wireguard0: entered allmulticast mode [ 437.097649][T16826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16826 comm=syz.1.3899 [ 437.410475][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3905'. [ 437.421482][T16825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 437.421653][T16845] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 437.459285][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3904'. [ 437.480626][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3904'. [ 437.625033][T16855] vlan0: entered allmulticast mode [ 437.630318][T16855] bridge_slave_0: entered allmulticast mode [ 437.659817][T16862] tipc: Enabling of bearer rejected, already enabled [ 437.700434][T16864] netlink: 566 bytes leftover after parsing attributes in process `syz.5.3911'. [ 437.748265][T16868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3912'. [ 437.757332][T16868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3912'. [ 437.832924][T16874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3916'. [ 437.955738][T16881] wireguard2: entered promiscuous mode [ 437.961289][T16881] wireguard2: entered allmulticast mode [ 438.226958][T16907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=16907 comm=syz.4.3925 [ 438.269220][T16900] loop5: detected capacity change from 0 to 512 [ 438.270195][T16909] tipc: Enabling of bearer rejected, already enabled [ 438.293810][T16900] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3922: inode has both inline data and extents flags [ 438.294828][T16900] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3922: couldn't read orphan inode 15 (err -117) [ 438.295476][T16900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.396866][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3927'. [ 438.441843][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.675308][T16929] loop5: detected capacity change from 0 to 256 [ 438.694665][T16929] FAT-fs (loop5): bogus sectors per cluster 223 [ 438.694708][T16929] FAT-fs (loop5): Can't find a valid FAT filesystem [ 438.742029][T16934] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 439.008379][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 439.008398][ T29] audit: type=1400 audit(438.981:559251): avc: denied { unlink } for pid=3317 comm="syz-executor" name="cgroup" dev="tmpfs" ino=4246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 439.097447][ T29] audit: type=1400 audit(439.061:559252): avc: denied { ioctl } for pid=16938 comm="syz.4.3935" path="/783/file0" dev="tmpfs" ino=4256 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 439.193627][ T29] audit: type=1326 audit(439.161:559253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.193794][ T29] audit: type=1326 audit(439.161:559254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.195208][ T29] audit: type=1326 audit(439.161:559255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.195310][ T29] audit: type=1326 audit(439.161:559256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.195358][ T29] audit: type=1326 audit(439.161:559257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.198804][ T29] audit: type=1326 audit(439.161:559258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.198845][ T29] audit: type=1326 audit(439.161:559259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.204301][ T29] audit: type=1326 audit(439.171:559260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16942 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 439.380569][T16945] wireguard0: entered promiscuous mode [ 439.380591][T16945] wireguard0: entered allmulticast mode [ 439.387970][T16948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=16948 comm=syz.1.3937 [ 439.682173][T16959] __nla_validate_parse: 2 callbacks suppressed [ 439.682188][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3941'. [ 439.775368][T16964] vlan2: entered allmulticast mode [ 439.882657][T16974] Q6\bY4 speed is unknown, defaulting to 1000 [ 439.900282][T16974] hsr0 speed is unknown, defaulting to 1000 [ 440.112718][T16984] Q6\bY4 speed is unknown, defaulting to 1000 [ 440.121666][T16984] hsr0 speed is unknown, defaulting to 1000 [ 440.250701][T16983] syzkaller1: entered promiscuous mode [ 440.359403][T16983] syzkaller1: entered allmulticast mode [ 441.019497][T16984] lo speed is unknown, defaulting to 1000 [ 441.118894][T16974] lo speed is unknown, defaulting to 1000 [ 441.244923][T16989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=16989 comm=syz.3.3948 [ 441.416990][T16997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3952'. [ 441.657922][T17004] validate_nla: 6 callbacks suppressed [ 441.657938][T17004] netlink: 'syz.5.3953': attribute type 6 has an invalid length. [ 441.658201][T17004] netlink: 'syz.5.3953': attribute type 6 has an invalid length. [ 441.658472][T17004] tipc: Enabling of bearer rejected, already enabled [ 442.361453][T17008] wireguard2: entered promiscuous mode [ 442.361471][T17008] wireguard2: entered allmulticast mode [ 442.465600][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3955'. [ 442.710559][T17015] netlink: 'syz.3.3956': attribute type 6 has an invalid length. [ 442.736776][T17015] netlink: 'syz.3.3956': attribute type 6 has an invalid length. [ 442.770011][T17015] tipc: Enabling of bearer rejected, already enabled [ 443.003200][T17021] loop5: detected capacity change from 0 to 512 [ 443.009139][T17021] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3957: inode has both inline data and extents flags [ 443.009742][T17021] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3957: couldn't read orphan inode 15 (err -117) [ 443.011011][T17021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.063734][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 443.180061][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.263623][T17027] netlink: 'syz.5.3960': attribute type 30 has an invalid length. [ 443.491908][T17035] loop5: detected capacity change from 0 to 164 [ 443.519994][T17035] iso9660: Unknown parameter 'ܻQRֲYx{V]y$' [ 443.588036][T17035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=17035 comm=syz.5.3962 [ 443.624073][T17037] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 443.699009][T17037] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 443.726512][T17037] siw: device registration error -23 [ 443.777560][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'. [ 443.885616][T17044] vlan0: entered allmulticast mode [ 444.051841][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 444.051855][ T29] audit: type=1400 audit(444.021:559706): avc: denied { write } for pid=17050 comm="syz.3.3966" path="socket:[54127]" dev="sockfs" ino=54127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 444.329517][T17058] wireguard0: entered promiscuous mode [ 444.335059][T17058] wireguard0: entered allmulticast mode [ 444.419219][T17061] 9pnet_fd: Insufficient options for proto=fd [ 444.472103][T17061] Q6\bY4 speed is unknown, defaulting to 1000 [ 444.500273][T17061] hsr0 speed is unknown, defaulting to 1000 [ 444.513170][ T29] audit: type=1326 audit(444.481:559707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.537267][ T29] audit: type=1326 audit(444.481:559708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.560370][ T29] audit: type=1326 audit(444.481:559709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.584281][ T29] audit: type=1326 audit(444.481:559710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.663079][ T29] audit: type=1326 audit(444.491:559711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.674048][T17061] lo speed is unknown, defaulting to 1000 [ 444.686896][ T29] audit: type=1326 audit(444.491:559712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.686996][ T29] audit: type=1326 audit(444.491:559713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.687087][ T29] audit: type=1326 audit(444.581:559714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 444.687205][ T29] audit: type=1326 audit(444.581:559715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 445.026527][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3972'. [ 445.035726][T17078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3972'. [ 445.085681][T17078] bridge0: port 2(vlan0) entered blocking state [ 445.092102][T17078] bridge0: port 2(vlan0) entered disabled state [ 445.114156][T17078] vlan0: entered allmulticast mode [ 445.119405][T17078] bridge0: entered allmulticast mode [ 445.180126][T17078] vlan0: left allmulticast mode [ 445.185058][T17078] bridge0: left allmulticast mode [ 445.216896][T17087] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=17087 comm=syz.1.3974 [ 445.672014][T17094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=17094 comm=syz.4.3975 [ 445.950409][T17091] wireguard0: entered promiscuous mode [ 445.957246][T17091] wireguard0: entered allmulticast mode [ 446.079983][T17100] netlink: 'syz.1.3978': attribute type 6 has an invalid length. [ 446.112847][T17100] netlink: 'syz.1.3978': attribute type 6 has an invalid length. [ 446.158164][T17100] tipc: Enabling of bearer rejected, already enabled [ 446.227629][T17097] vlan0: entered promiscuous mode [ 446.232808][T17097] hsr_slave_1: entered promiscuous mode [ 446.240737][T17097] vlan0: entered allmulticast mode [ 446.247119][T17097] hsr_slave_1: entered allmulticast mode [ 446.282487][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 446.393712][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3977'. [ 446.698935][T17111] loop5: detected capacity change from 0 to 512 [ 446.738001][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 446.757564][T17120] batadv0 (unregistering): left allmulticast mode [ 446.758690][T17111] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3982: inode has both inline data and extents flags [ 446.764046][T17120] batadv0 (unregistering): left promiscuous mode [ 446.764079][T17120] bridge0: port 1(batadv0) entered disabled state [ 446.838658][T17111] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3982: couldn't read orphan inode 15 (err -117) [ 446.865270][T17111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.933289][T17123] wireguard0: entered promiscuous mode [ 446.938955][T17123] wireguard0: entered allmulticast mode [ 446.998950][T17125] netlink: 'syz.1.3986': attribute type 6 has an invalid length. [ 447.036920][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.061789][T17125] netlink: 'syz.1.3986': attribute type 6 has an invalid length. [ 447.091899][T17128] loop5: detected capacity change from 0 to 164 [ 447.099566][T17125] tipc: Enabling of bearer rejected, already enabled [ 447.109380][T17128] iso9660: Unknown parameter 'ܻQRֲYx{V]y$' [ 447.129750][T17128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=17128 comm=syz.5.3987 [ 447.239854][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3990'. [ 447.488307][T17137] loop5: detected capacity change from 0 to 512 [ 447.517352][T17137] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3992: inode has both inline data and extents flags [ 447.548520][T17137] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3992: couldn't read orphan inode 15 (err -117) [ 447.567439][T17140] netlink: 'syz.4.3993': attribute type 6 has an invalid length. [ 447.576364][T17137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.590655][T17140] netlink: 'syz.4.3993': attribute type 6 has an invalid length. [ 447.600022][T17140] tipc: Enabling of bearer rejected, already enabled [ 447.653455][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.772046][T17154] ref_ctr_offset mismatch. inode: 0x1120 offset: 0x0 ref_ctr_offset(old): 0x5c ref_ctr_offset(new): 0x200000000180 [ 448.085508][T17168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=17168 comm=syz.4.4000 [ 448.138771][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'. [ 448.148864][T17175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4002'. [ 448.165230][T17175] bridge0: port 1(vlan0) entered blocking state [ 448.172210][T17175] bridge0: port 1(vlan0) entered disabled state [ 448.179746][T17175] vlan0: entered allmulticast mode [ 448.184951][T17175] bridge0: entered allmulticast mode [ 448.201994][T17179] loop5: detected capacity change from 0 to 512 [ 448.210103][T17179] EXT4-fs: Ignoring removed oldalloc option [ 448.232859][T17179] EXT4-fs (loop5): 1 truncate cleaned up [ 448.240684][T17179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.318603][T17175] vlan0: left allmulticast mode [ 448.323611][T17175] bridge0: left allmulticast mode [ 448.372460][T17178] siw: device registration error -23 [ 448.409194][T17179] Q6\bY4 speed is unknown, defaulting to 1000 [ 448.418164][T17179] hsr0 speed is unknown, defaulting to 1000 [ 448.481306][T17179] lo speed is unknown, defaulting to 1000 [ 449.192613][ T29] kauditd_printk_skb: 1054 callbacks suppressed [ 449.192628][ T29] audit: type=1400 audit(449.161:560770): avc: denied { setopt } for pid=17197 comm="syz.4.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 449.257614][ T29] audit: type=1326 audit(449.221:560771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.282518][ T29] audit: type=1326 audit(449.221:560772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.307511][ T29] audit: type=1326 audit(449.221:560773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.331838][ T29] audit: type=1326 audit(449.221:560774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.356965][ T29] audit: type=1326 audit(449.221:560775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.381107][ T29] audit: type=1326 audit(449.221:560776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.406997][ T29] audit: type=1326 audit(449.221:560777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.430251][ T29] audit: type=1326 audit(449.221:560778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.454035][ T29] audit: type=1326 audit(449.221:560779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 449.537547][T17200] netlink: 'syz.1.4005': attribute type 6 has an invalid length. [ 449.556727][T17200] netlink: 'syz.1.4005': attribute type 6 has an invalid length. [ 449.577439][T17200] tipc: Enabling of bearer rejected, already enabled [ 449.990847][T17214] 9pnet_fd: Insufficient options for proto=fd [ 450.085289][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4010'. [ 450.182093][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4010'. [ 450.215568][T17214] Q6\bY4 speed is unknown, defaulting to 1000 [ 450.302857][T17214] hsr0 speed is unknown, defaulting to 1000 [ 450.753086][T17214] lo speed is unknown, defaulting to 1000 [ 451.360954][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 451.615064][T17237] netlink: 'syz.3.4015': attribute type 6 has an invalid length. [ 451.615401][T17237] netlink: 'syz.3.4015': attribute type 6 has an invalid length. [ 451.655491][T17237] tipc: Enabling of bearer rejected, already enabled [ 452.530763][T17242] wireguard0: entered promiscuous mode [ 452.537477][T17242] wireguard0: entered allmulticast mode [ 452.548250][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.807370][T17252] netlink: 'syz.5.4018': attribute type 6 has an invalid length. [ 452.807586][T17252] netlink: 'syz.5.4018': attribute type 6 has an invalid length. [ 452.807912][T17252] tipc: Enabling of bearer rejected, already enabled [ 453.057770][T17254] netlink: 'syz.4.4019': attribute type 6 has an invalid length. [ 453.068401][T17254] netlink: 'syz.4.4019': attribute type 6 has an invalid length. [ 453.077357][T17254] tipc: Enabling of bearer rejected, already enabled [ 453.118730][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 453.238899][T17258] sch_fq: defrate 4294967295 ignored. [ 453.275103][T17258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17258 comm=syz.4.4020 [ 453.276517][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 453.278987][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 453.279477][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 453.279543][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 453.620529][T17270] loop5: detected capacity change from 0 to 128 [ 453.709900][T17273] Q6\bY4 speed is unknown, defaulting to 1000 [ 453.718465][T17273] hsr0 speed is unknown, defaulting to 1000 [ 453.781514][T17273] lo speed is unknown, defaulting to 1000 [ 454.663763][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 454.663778][ T29] audit: type=1400 audit(454.631:561600): avc: denied { unmount } for pid=10025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 454.760486][ T29] audit: type=1326 audit(454.731:561601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.810621][ T29] audit: type=1326 audit(454.761:561602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.834988][ T29] audit: type=1326 audit(454.761:561603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.859400][ T29] audit: type=1326 audit(454.761:561604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.883597][ T29] audit: type=1326 audit(454.761:561605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.907777][ T29] audit: type=1326 audit(454.761:561606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.913984][T17290] netlink: 'syz.4.4027': attribute type 6 has an invalid length. [ 454.932089][ T29] audit: type=1326 audit(454.761:561607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.964794][ T29] audit: type=1326 audit(454.761:561608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 454.989266][ T29] audit: type=1326 audit(454.761:561609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17286 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 455.014681][T17293] netlink: 'syz.4.4027': attribute type 6 has an invalid length. [ 455.023799][T17295] tipc: Enabling of bearer rejected, already enabled [ 455.198356][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 455.208961][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 455.329796][T17303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.355748][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 455.362050][T17265] Bluetooth: hci0: command 0x1003 tx timeout [ 455.560134][T17303] can: request_module (can-proto-0) failed. [ 455.662160][T17306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4031'. [ 455.678092][T17306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 455.774418][T17310] loop5: detected capacity change from 0 to 512 [ 455.787676][T17310] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4032: inode has both inline data and extents flags [ 455.802533][T17310] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4032: couldn't read orphan inode 15 (err -117) [ 455.818087][T17310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.902815][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.933380][T17316] netlink: 'syz.1.4034': attribute type 6 has an invalid length. [ 455.941982][T17316] netlink: 'syz.1.4034': attribute type 6 has an invalid length. [ 455.953983][T17316] tipc: Enabling of bearer rejected, already enabled [ 455.965602][T17321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4035'. [ 455.977880][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4035'. [ 456.014239][T17321] random: crng reseeded on system resumption [ 456.121323][T17330] netlink: 'syz.1.4039': attribute type 6 has an invalid length. [ 456.137659][T17330] netlink: 'syz.1.4039': attribute type 6 has an invalid length. [ 456.149154][T17330] tipc: Enabling of bearer rejected, already enabled [ 456.194712][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'. [ 456.289889][T17342] loop5: detected capacity change from 0 to 4096 [ 456.323935][T17342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.341923][T17354] tipc: Enabling of bearer rejected, already enabled [ 456.428396][T17358] pim6reg: entered allmulticast mode [ 456.437736][T17358] pim6reg: left allmulticast mode [ 456.469577][T17362] binfmt_misc: register: failed to install interpreter file ./file0 [ 456.492194][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4050'. [ 456.502067][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4050'. [ 456.519984][T17363] random: crng reseeded on system resumption [ 456.600019][T17367] Q6\bY4 speed is unknown, defaulting to 1000 [ 456.608052][T17367] hsr0 speed is unknown, defaulting to 1000 [ 456.645507][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 456.651251][T17367] lo speed is unknown, defaulting to 1000 [ 457.925263][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.938787][T17377] Q6\bY4 speed is unknown, defaulting to 1000 [ 457.947416][T17377] hsr0 speed is unknown, defaulting to 1000 [ 457.990550][T17377] lo speed is unknown, defaulting to 1000 [ 458.616734][T17403] wireguard0: entered promiscuous mode [ 458.622339][T17403] wireguard0: entered allmulticast mode [ 458.691266][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4062'. [ 458.707069][T17407] veth0: entered promiscuous mode [ 458.727401][T17408] veth0 (unregistering): left promiscuous mode [ 459.083672][T17416] validate_nla: 2 callbacks suppressed [ 459.083689][T17416] netlink: 'syz.5.4054': attribute type 6 has an invalid length. [ 459.084440][T17416] netlink: 'syz.5.4054': attribute type 6 has an invalid length. [ 459.084697][T17416] tipc: Enabling of bearer rejected, already enabled [ 459.674676][ T29] kauditd_printk_skb: 1427 callbacks suppressed [ 459.674693][ T29] audit: type=1326 audit(459.641:563037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.4.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa37e5a5e67 code=0x7ffc0000 [ 459.674859][ T29] audit: type=1326 audit(459.641:563038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.4.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa37e54b099 code=0x7ffc0000 [ 459.675079][ T29] audit: type=1326 audit(459.641:563039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.4.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 459.684195][ T29] audit: type=1326 audit(459.661:563040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.4.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa37e5a5e67 code=0x7ffc0000 [ 459.684422][ T29] audit: type=1326 audit(459.661:563041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.4.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa37e54b099 code=0x7ffc0000 [ 459.684573][ T29] audit: type=1326 audit(459.661:563042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.4.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 460.003251][T17427] pim6reg: entered allmulticast mode [ 460.014924][T17427] pim6reg: left allmulticast mode [ 460.029376][ T29] audit: type=1400 audit(460.001:563043): avc: denied { create } for pid=17430 comm="syz.5.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 460.059944][T17429] sz1: rxe_newlink: already configured on lo [ 460.188580][T17429] Process accounting resumed [ 460.208306][ T29] audit: type=1326 audit(460.181:563044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 460.264554][ T29] audit: type=1326 audit(460.211:563045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 460.288714][ T29] audit: type=1326 audit(460.211:563046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 460.471113][T17453] Q6\bY4 speed is unknown, defaulting to 1000 [ 460.504672][T17453] hsr0 speed is unknown, defaulting to 1000 [ 460.512522][T17456] __nla_validate_parse: 1 callbacks suppressed [ 460.512539][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'. [ 460.642801][T17453] lo speed is unknown, defaulting to 1000 [ 461.142486][T17470] loop5: detected capacity change from 0 to 512 [ 461.207372][T17470] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4078: inode has both inline data and extents flags [ 461.207525][T17470] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4078: couldn't read orphan inode 15 (err -117) [ 461.208067][T17470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.310085][T17478] netlink: 'syz.3.4079': attribute type 6 has an invalid length. [ 461.318377][T17479] wireguard0: entered promiscuous mode [ 461.318398][T17479] wireguard0: entered allmulticast mode [ 461.381291][T17482] netlink: 'syz.3.4079': attribute type 6 has an invalid length. [ 461.394954][T17478] tipc: Enabling of bearer rejected, already enabled [ 461.410406][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.482592][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4080'. [ 461.774694][T17487] Q6\bY4 speed is unknown, defaulting to 1000 [ 461.783174][T17487] hsr0 speed is unknown, defaulting to 1000 [ 461.822653][T17487] lo speed is unknown, defaulting to 1000 [ 461.961722][T17491] loop5: detected capacity change from 0 to 128 [ 462.152293][T17503] netlink: 'syz.3.4086': attribute type 30 has an invalid length. [ 462.298521][T17450] syz.4.4074 (17450) used greatest stack depth: 6088 bytes left [ 462.356677][T17510] netlink: 'syz.1.4089': attribute type 6 has an invalid length. [ 462.373414][T17510] netlink: 'syz.1.4089': attribute type 6 has an invalid length. [ 462.383795][T17510] tipc: Enabling of bearer rejected, already enabled [ 462.393854][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'. [ 462.525081][ T31] bio_check_eod: 81 callbacks suppressed [ 462.525099][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.525099][ T31] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 462.547252][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.547252][ T31] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 462.589868][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.589868][ T31] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 462.603428][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.603428][ T31] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 462.627075][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.627075][ T31] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 462.652828][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.652828][ T31] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 462.666343][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.666343][ T31] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 462.694785][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.694785][ T31] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 462.725012][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.725012][ T31] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 462.742053][ T31] kworker/u8:1: attempt to access beyond end of device [ 462.742053][ T31] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 462.847964][T17529] loop5: detected capacity change from 0 to 512 [ 462.880945][T17529] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 462.918582][T17531] xt_hashlimit: max too large, truncated to 1048576 [ 462.926327][T17529] EXT4-fs (loop5): 1 truncate cleaned up [ 462.932860][T17529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.946875][T17531] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 462.976136][T17531] netlink: 'syz.3.4095': attribute type 10 has an invalid length. [ 462.983982][T17531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4095'. [ 463.036840][T17531] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 463.104420][T17529] bridge0: port 2(ipvlan0) entered blocking state [ 463.111065][T17529] bridge0: port 2(ipvlan0) entered disabled state [ 463.163729][T17529] ipvlan0: entered allmulticast mode [ 463.169140][T17529] bridge0: entered allmulticast mode [ 463.187277][T17529] ipvlan0: left allmulticast mode [ 463.192442][T17529] bridge0: left allmulticast mode [ 463.294626][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.500150][T17548] netlink: 'syz.5.4097': attribute type 6 has an invalid length. [ 463.500401][T17548] netlink: 'syz.5.4097': attribute type 6 has an invalid length. [ 463.500596][T17548] tipc: Enabling of bearer rejected, already enabled [ 463.567211][T17550] wireguard2: entered promiscuous mode [ 463.567230][T17550] wireguard2: entered allmulticast mode [ 464.638565][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 464.683855][ T29] kauditd_printk_skb: 885 callbacks suppressed [ 464.683876][ T29] audit: type=1326 audit(464.631:563932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 464.721601][T17565] loop5: detected capacity change from 0 to 512 [ 464.734983][ T29] audit: type=1326 audit(464.691:563933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 464.758386][ T29] audit: type=1326 audit(464.691:563934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7bbbff003 code=0x7ffc0000 [ 464.781301][ T29] audit: type=1326 audit(464.691:563935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb7bbbff087 code=0x7ffc0000 [ 464.805457][ T29] audit: type=1326 audit(464.691:563936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb7bbbb644d code=0x7ffc0000 [ 464.829506][ T29] audit: type=1326 audit(464.691:563937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb7bbc33709 code=0x7ffc0000 [ 464.853719][ T29] audit: type=1326 audit(464.691:563938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb7bbbb64b7 code=0x7ffc0000 [ 464.877991][ T29] audit: type=1326 audit(464.691:563939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 464.902049][ T29] audit: type=1326 audit(464.691:563940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 464.926348][ T29] audit: type=1326 audit(464.691:563941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb7bbbb5bc7 code=0x7ffc0000 [ 464.977925][T17565] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4102: inode has both inline data and extents flags [ 465.005100][T17565] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4102: couldn't read orphan inode 15 (err -117) [ 465.038086][T17565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.059171][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4101'. [ 465.177360][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.223241][T17576] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4105'. [ 465.343185][T17583] vlan0: entered allmulticast mode [ 465.570216][T17592] pim6reg: entered allmulticast mode [ 465.706095][T17597] pim6reg: left allmulticast mode [ 465.838427][T17605] netlink: 'syz.3.4112': attribute type 6 has an invalid length. [ 465.838736][T17605] netlink: 'syz.3.4112': attribute type 6 has an invalid length. [ 465.839096][T17605] tipc: Enabling of bearer rejected, already enabled [ 465.933969][T17596] loop5: detected capacity change from 0 to 256 [ 466.029000][T17596] FAT-fs (loop5): bogus sectors per cluster 223 [ 466.029101][T17596] FAT-fs (loop5): Can't find a valid FAT filesystem [ 466.169650][T17611] wireguard0: entered promiscuous mode [ 466.169668][T17611] wireguard0: entered allmulticast mode [ 466.514735][T17614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.751576][T17623] loop5: detected capacity change from 0 to 256 [ 466.759810][T17614] can: request_module (can-proto-0) failed. [ 466.804027][T17623] FAT-fs (loop5): bogus sectors per cluster 223 [ 466.843429][T17623] FAT-fs (loop5): Can't find a valid FAT filesystem [ 467.071146][T17625] wireguard0: entered promiscuous mode [ 467.077753][T17625] wireguard0: entered allmulticast mode [ 467.617511][T17637] team0: left allmulticast mode [ 467.622413][T17637] team0: left promiscuous mode [ 467.627492][T17637] bridge0: port 1(team0) entered disabled state [ 467.665021][T17637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.708127][T17642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 467.836044][T17651] netlink: 'syz.0.4124': attribute type 6 has an invalid length. [ 467.887588][T17657] netlink: 'syz.0.4124': attribute type 6 has an invalid length. [ 467.920003][T17659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4123'. [ 467.946441][T17659] macsec0: entered promiscuous mode [ 467.951708][T17659] bridge0: entered promiscuous mode [ 467.958588][T17659] bridge0: port 2(macsec0) entered blocking state [ 467.965162][T17659] bridge0: port 2(macsec0) entered disabled state [ 467.971831][T17659] macsec0: entered allmulticast mode [ 467.977197][T17659] bridge0: entered allmulticast mode [ 467.983199][T17646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17646 comm=syz.4.4123 [ 467.997536][T17659] macsec0: left allmulticast mode [ 468.002642][T17659] bridge0: left allmulticast mode [ 468.009233][T17659] bridge0: left promiscuous mode [ 468.017652][T17660] tipc: Enabling of bearer rejected, already enabled [ 468.080656][T17664] 9p: Unknown access argument : -22 [ 468.216370][T17668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 468.222970][T17668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 468.231344][T17668] vhci_hcd vhci_hcd.0: Device attached [ 468.271225][T17672] wireguard0: entered promiscuous mode [ 468.271954][T17674] vhci_hcd: connection closed [ 468.277806][T17672] wireguard0: entered allmulticast mode [ 468.282839][ T31] vhci_hcd: stop threads [ 468.293307][ T31] vhci_hcd: release socket [ 468.297848][ T31] vhci_hcd: disconnect device [ 468.593268][T17691] wireguard0: entered promiscuous mode [ 468.600026][T17691] wireguard0: entered allmulticast mode [ 469.192868][T17693] Q6\bY4 speed is unknown, defaulting to 1000 [ 469.202050][T17693] hsr0 speed is unknown, defaulting to 1000 [ 469.348217][T17693] lo speed is unknown, defaulting to 1000 [ 469.641879][T17708] loop5: detected capacity change from 0 to 512 [ 469.694173][T17709] netlink: 'syz.4.4135': attribute type 6 has an invalid length. [ 469.703426][ T29] kauditd_printk_skb: 1274 callbacks suppressed [ 469.703440][ T29] audit: type=1326 audit(469.661:565216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 469.744394][T17713] netlink: 'syz.4.4135': attribute type 6 has an invalid length. [ 469.752551][T17713] tipc: Enabling of bearer rejected, already enabled [ 469.797007][T17708] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4133: inode has both inline data and extents flags [ 469.887928][T17708] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4133: couldn't read orphan inode 15 (err -117) [ 469.911195][ T29] audit: type=1326 audit(469.711:565217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7bbbfd717 code=0x7ffc0000 [ 469.935445][ T29] audit: type=1326 audit(469.711:565218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb7bbc0076a code=0x7ffc0000 [ 469.960000][ T29] audit: type=1326 audit(469.751:565219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 469.984275][ T29] audit: type=1326 audit(469.751:565220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 470.067847][T17708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.257038][T17721] wireguard2: entered promiscuous mode [ 470.262576][T17721] wireguard2: entered allmulticast mode [ 470.319159][ T29] audit: type=1326 audit(470.071:565221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7bbbfd810 code=0x7ffc0000 [ 470.343460][ T29] audit: type=1326 audit(470.071:565222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb7bbbfdd17 code=0x7ffc0000 [ 470.367754][ T29] audit: type=1326 audit(470.071:565223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7bbbfd810 code=0x7ffc0000 [ 470.391903][ T29] audit: type=1326 audit(470.071:565224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 470.416186][ T29] audit: type=1326 audit(470.071:565225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.5.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bbbfefc9 code=0x7ffc0000 [ 470.640596][ T61] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.652634][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.664957][ T61] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.681631][T17720] siw: device registration error -23 [ 470.688607][ T61] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.730226][ T61] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.828713][T17732] loop5: detected capacity change from 0 to 256 [ 470.838521][T17732] FAT-fs (loop5): bogus sectors per cluster 223 [ 470.844820][T17732] FAT-fs (loop5): Can't find a valid FAT filesystem [ 470.953060][T17736] hub 1-0:1.0: USB hub found [ 470.960966][T17736] hub 1-0:1.0: 8 ports detected [ 471.067361][T17732] wireguard0: entered promiscuous mode [ 471.073018][T17732] wireguard0: entered allmulticast mode [ 471.257675][ T2968] hid_parser_main: 27 callbacks suppressed [ 471.257696][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x7 [ 471.272218][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.280724][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.289333][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.297953][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.305491][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.314124][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.322645][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.331251][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.339845][ T2968] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 471.367095][T17740] Q6\bY4 speed is unknown, defaulting to 1000 [ 471.387572][T17740] hsr0 speed is unknown, defaulting to 1000 [ 471.427346][T17734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 471.513832][T17736] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 471.617797][T17740] lo speed is unknown, defaulting to 1000 [ 471.693367][T17750] vlan0: entered allmulticast mode [ 471.751033][ T2968] hid-generic 0000:0000:10001.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 471.906787][T17759] netlink: 'syz.1.4147': attribute type 6 has an invalid length. [ 471.955284][T17760] netlink: 'syz.1.4147': attribute type 6 has an invalid length. [ 471.993658][T17759] tipc: Enabling of bearer rejected, already enabled [ 472.418976][T17776] rdma_op ffff888158f92180 conn xmit_rdma 0000000000000000 [ 472.437862][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'. [ 472.814060][T17757] loop5: detected capacity change from 0 to 256 [ 472.844951][T17757] FAT-fs (loop5): bogus sectors per cluster 223 [ 472.852057][T17757] FAT-fs (loop5): Can't find a valid FAT filesystem [ 473.100528][T17789] $H: left promiscuous mode [ 473.127829][T17789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.219003][T17794] wireguard0: entered promiscuous mode [ 473.224530][T17794] wireguard0: entered allmulticast mode [ 473.312237][T17799] vlan0: entered allmulticast mode [ 473.449568][T17805] Q6\bY4 speed is unknown, defaulting to 1000 [ 473.458199][T17805] hsr0 speed is unknown, defaulting to 1000 [ 473.504435][T17805] lo speed is unknown, defaulting to 1000 [ 473.521565][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 473.543690][T17809] loop5: detected capacity change from 0 to 128 [ 473.563417][T17809] EXT4-fs: Ignoring removed nobh option [ 473.587748][T17809] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.672213][T17814] netlink: 'syz.4.4162': attribute type 6 has an invalid length. [ 473.704279][T17814] netlink: 'syz.4.4162': attribute type 6 has an invalid length. [ 473.739568][T17814] tipc: Enabling of bearer rejected, already enabled [ 473.805564][T17820] netlink: 'syz.4.4163': attribute type 6 has an invalid length. [ 473.815863][T17820] netlink: 'syz.4.4163': attribute type 6 has an invalid length. [ 473.828406][T17820] tipc: Enabling of bearer rejected, already enabled [ 473.878900][T10025] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.979768][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 474.064656][T17826] loop5: detected capacity change from 0 to 512 [ 474.109812][T17826] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4166: inode has both inline data and extents flags [ 474.138129][T17830] wireguard0: entered promiscuous mode [ 474.143682][T17830] wireguard0: entered allmulticast mode [ 474.156202][T17826] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4166: couldn't read orphan inode 15 (err -117) [ 474.184976][T17826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.349360][T17837] netlink: 'syz.1.4169': attribute type 30 has an invalid length. [ 474.350271][T17838] bridge0: port 1(gretap0) entered blocking state [ 474.363784][T17838] bridge0: port 1(gretap0) entered disabled state [ 474.378735][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.410776][T17838] gretap0: entered allmulticast mode [ 474.420945][T17838] gretap0: entered promiscuous mode [ 474.433332][T17838] bridge0: port 1(gretap0) entered blocking state [ 474.439898][T17838] bridge0: port 1(gretap0) entered forwarding state [ 474.473271][T17844] netlink: 'syz.3.4168': attribute type 13 has an invalid length. [ 474.483534][T17841] gretap0: left allmulticast mode [ 474.489834][T17841] gretap0: left promiscuous mode [ 474.494966][T17841] bridge0: port 1(gretap0) entered disabled state [ 474.613299][T17843] loop5: detected capacity change from 0 to 256 [ 474.659255][T17843] FAT-fs (loop5): bogus sectors per cluster 223 [ 474.704563][T17843] FAT-fs (loop5): Can't find a valid FAT filesystem [ 474.713548][ T29] kauditd_printk_skb: 1308 callbacks suppressed [ 474.713563][ T29] audit: type=1326 audit(474.681:566534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 474.745136][ T29] audit: type=1326 audit(474.681:566535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 474.780503][ T29] audit: type=1326 audit(474.721:566536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 474.804985][ T29] audit: type=1326 audit(474.721:566537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ab315f003 code=0x7ffc0000 [ 474.829122][ T29] audit: type=1326 audit(474.721:566538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7ab315f087 code=0x7ffc0000 [ 474.853366][ T29] audit: type=1326 audit(474.721:566539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7ab311644d code=0x7ffc0000 [ 474.877661][ T29] audit: type=1326 audit(474.721:566540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7ab3193709 code=0x7ffc0000 [ 474.901866][ T29] audit: type=1326 audit(474.721:566541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7ab31164b7 code=0x7ffc0000 [ 474.925974][ T29] audit: type=1326 audit(474.721:566542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 474.950312][ T29] audit: type=1326 audit(474.721:566543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17835 comm="syz.0.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 475.016910][T17833] Q6\bY4 speed is unknown, defaulting to 1000 [ 475.024876][T17833] hsr0 speed is unknown, defaulting to 1000 [ 475.071553][T17833] lo speed is unknown, defaulting to 1000 [ 475.165021][T17847] wireguard0: entered promiscuous mode [ 475.171418][T17847] wireguard0: entered allmulticast mode [ 475.212922][T17849] netlink: 'syz.4.4171': attribute type 6 has an invalid length. [ 475.265043][T17849] netlink: 'syz.4.4171': attribute type 6 has an invalid length. [ 475.284590][T17849] tipc: Enabling of bearer rejected, already enabled [ 475.548562][T17858] vlan0: entered allmulticast mode [ 475.675071][T17869] SELinux: Context is not valid (left unmapped). [ 475.828892][T17871] tipc: Enabling of bearer rejected, already enabled [ 477.079530][T17904] validate_nla: 2 callbacks suppressed [ 477.079547][T17904] netlink: 'syz.5.4179': attribute type 6 has an invalid length. [ 477.079814][T17904] netlink: 'syz.5.4179': attribute type 6 has an invalid length. [ 477.080184][T17904] tipc: Enabling of bearer rejected, already enabled [ 477.168018][T17908] wireguard0: entered promiscuous mode [ 477.168040][T17908] wireguard0: entered allmulticast mode [ 478.061323][T17971] Q6\bY4 speed is unknown, defaulting to 1000 [ 478.072916][T17961] loop5: detected capacity change from 0 to 512 [ 478.111190][T17971] hsr0 speed is unknown, defaulting to 1000 [ 478.131825][T17961] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4181: inode #0: comm syz.5.4181: iget: illegal inode # [ 478.213804][T17971] lo speed is unknown, defaulting to 1000 [ 478.243884][T17961] EXT4-fs (loop5): get orphan inode failed [ 478.264968][T17961] EXT4-fs (loop5): mount failed [ 478.321786][T17990] netlink: 'syz.3.4184': attribute type 6 has an invalid length. [ 478.344264][T17990] netlink: 'syz.3.4184': attribute type 6 has an invalid length. [ 478.344576][T17990] tipc: Enabling of bearer rejected, already enabled [ 478.361692][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4181'. [ 478.894382][T18020] netlink: 'syz.4.4187': attribute type 4 has an invalid length. [ 478.946301][T18021] netlink: 'syz.4.4187': attribute type 4 has an invalid length. [ 479.102991][T18014] wireguard0: entered promiscuous mode [ 479.125493][T18014] wireguard0: entered allmulticast mode [ 479.261248][T18025] tipc: Enabling of bearer rejected, already enabled [ 479.268830][ T3394] lo speed is unknown, defaulting to 1000 [ 479.274646][ T3394] sz1: Port: 1 Link ACTIVE [ 479.279727][ T3394] lo speed is unknown, defaulting to 1000 [ 479.470810][T18037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=18037 comm=syz.1.4192 [ 479.488675][T18033] macvtap0: refused to change device tx_queue_len [ 479.657943][T18040] netlink: 'syz.1.4193': attribute type 6 has an invalid length. [ 479.697134][T18040] netlink: 'syz.1.4193': attribute type 6 has an invalid length. [ 479.712345][T18040] tipc: Enabling of bearer rejected, already enabled [ 479.720935][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 479.720952][ T29] audit: type=1326 audit(479.701:567143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 479.751361][ T29] audit: type=1326 audit(479.701:567144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 479.803259][ T29] audit: type=1326 audit(479.701:567145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 479.827984][ T29] audit: type=1326 audit(479.701:567146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 479.851760][ T29] audit: type=1326 audit(479.701:567147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 479.876134][ T29] audit: type=1326 audit(479.711:567148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba24b0ee7 code=0x7ffc0000 [ 479.900421][ T29] audit: type=1326 audit(479.711:567149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7ba24b0e5c code=0x7ffc0000 [ 479.924713][ T29] audit: type=1326 audit(479.711:567150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ba24b0d94 code=0x7ffc0000 [ 479.947870][ T29] audit: type=1326 audit(479.711:567151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ba24b0d94 code=0x7ffc0000 [ 479.972088][ T29] audit: type=1326 audit(479.711:567152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ba24adc2a code=0x7ffc0000 [ 479.992146][T18043] loop5: detected capacity change from 0 to 256 [ 480.043647][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4195'. [ 480.091949][T18043] FAT-fs (loop5): bogus sectors per cluster 223 [ 480.099290][T18043] FAT-fs (loop5): Can't find a valid FAT filesystem [ 480.373938][T18060] Q6\bY4 speed is unknown, defaulting to 1000 [ 480.391432][T18061] bridge0: port 1(gretap0) entered blocking state [ 480.397985][T18061] bridge0: port 1(gretap0) entered disabled state [ 480.442125][T18061] gretap0: entered allmulticast mode [ 480.448154][T18061] gretap0: entered promiscuous mode [ 480.454633][T18060] hsr0 speed is unknown, defaulting to 1000 [ 480.455773][T18062] gretap0: left allmulticast mode [ 480.466797][T18062] gretap0: left promiscuous mode [ 480.472127][T18062] bridge0: port 1(gretap0) entered disabled state [ 480.550486][T18064] netlink: 'syz.3.4198': attribute type 13 has an invalid length. [ 480.654821][T18060] lo speed is unknown, defaulting to 1000 [ 480.787091][T18069] netlink: 'syz.5.4200': attribute type 6 has an invalid length. [ 480.787616][T18069] tipc: Enabling of bearer rejected, already enabled [ 481.262787][T18076] vlan0: entered allmulticast mode [ 481.381528][T18083] wireguard0: entered promiscuous mode [ 481.381545][T18083] wireguard0: entered allmulticast mode [ 481.560565][T18094] Q6\bY4 speed is unknown, defaulting to 1000 [ 481.585404][T18096] tipc: Enabling of bearer rejected, already enabled [ 481.596862][T18094] hsr0 speed is unknown, defaulting to 1000 [ 481.617839][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4205'. [ 481.667380][T18094] lo speed is unknown, defaulting to 1000 [ 482.515319][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4213'. [ 482.611450][T18123] validate_nla: 3 callbacks suppressed [ 482.611468][T18123] netlink: 'syz.3.4212': attribute type 6 has an invalid length. [ 482.611882][T18123] netlink: 'syz.3.4212': attribute type 6 has an invalid length. [ 482.619127][T18123] tipc: Enabling of bearer rejected, already enabled [ 482.680964][T18125] Q6\bY4 speed is unknown, defaulting to 1000 [ 482.702203][T18125] hsr0 speed is unknown, defaulting to 1000 [ 482.771745][T18125] lo speed is unknown, defaulting to 1000 [ 483.205346][T18135] loop5: detected capacity change from 0 to 512 [ 483.215359][T18135] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4217: inode has both inline data and extents flags [ 483.219707][T18135] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4217: couldn't read orphan inode 15 (err -117) [ 483.223631][T18135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.361339][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.420068][T18143] netlink: 'syz.3.4219': attribute type 30 has an invalid length. [ 483.491249][T18147] netlink: 'syz.5.4218': attribute type 6 has an invalid length. [ 483.492308][T18147] netlink: 'syz.5.4218': attribute type 6 has an invalid length. [ 483.530306][T18147] tipc: Enabling of bearer rejected, already enabled [ 483.872256][T18170] ipvlan3: entered promiscuous mode [ 484.027881][T18168] Q6\bY4 speed is unknown, defaulting to 1000 [ 484.031000][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'. [ 484.055487][T18168] hsr0 speed is unknown, defaulting to 1000 [ 484.397019][T18176] loop5: detected capacity change from 0 to 512 [ 484.422869][T18176] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4227: inode has both inline data and extents flags [ 484.463556][T18176] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4227: couldn't read orphan inode 15 (err -117) [ 484.481657][T18168] lo speed is unknown, defaulting to 1000 [ 484.507525][T18176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.600323][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.677353][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4229'. [ 484.727617][ T29] kauditd_printk_skb: 2093 callbacks suppressed [ 484.727634][ T29] audit: type=1326 audit(484.703:569246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.758365][ T29] audit: type=1326 audit(484.703:569247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.782585][ T29] audit: type=1326 audit(484.703:569248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.860115][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4229'. [ 484.900115][ T29] audit: type=1326 audit(484.763:569249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.900170][ T29] audit: type=1326 audit(484.763:569250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.900278][ T29] audit: type=1326 audit(484.783:569251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.900317][ T29] audit: type=1326 audit(484.783:569252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.900418][ T29] audit: type=1326 audit(484.783:569253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.900458][ T29] audit: type=1326 audit(484.793:569254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 484.900499][ T29] audit: type=1326 audit(484.793:569255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 485.004064][T18193] netlink: 'syz.3.4230': attribute type 6 has an invalid length. [ 485.004298][T18193] netlink: 'syz.3.4230': attribute type 6 has an invalid length. [ 485.004587][T18193] tipc: Enabling of bearer rejected, already enabled [ 485.095402][T18195] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4233'. [ 485.110830][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4235'. [ 485.139057][T18201] loop5: detected capacity change from 0 to 128 [ 485.214253][ T3394] lo speed is unknown, defaulting to 1000 [ 485.214275][ T3394] sz1: Port: 1 Link DOWN [ 485.214330][ T3394] lo speed is unknown, defaulting to 1000 [ 485.214375][ T31] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.214477][ T31] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.214518][ T31] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.214642][ T31] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.302840][T18197] siw: device registration error -23 [ 485.923949][T18201] bio_check_eod: 101 callbacks suppressed [ 485.923970][T18201] syz.5.4236: attempt to access beyond end of device [ 485.923970][T18201] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 485.945784][T18201] buffer_io_error: 24 callbacks suppressed [ 485.945802][T18201] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 485.968029][T18206] syz.5.4236: attempt to access beyond end of device [ 485.968029][T18206] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 485.982137][T18206] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 486.118318][T18206] syz.5.4236: attempt to access beyond end of device [ 486.118318][T18206] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 486.131863][T18206] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 486.269925][T18204] geneve3: entered promiscuous mode [ 486.306797][T18004] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.360807][T18004] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.378164][T18004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.387825][T18004] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.663627][T18246] hsr0: entered promiscuous mode [ 486.669970][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4247'. [ 486.679313][T18246] hsr_slave_0: left promiscuous mode [ 486.690537][T18246] hsr_slave_1: left promiscuous mode [ 486.704191][T18246] hsr0 (unregistering): left promiscuous mode [ 486.719272][T18242] vlan1: entered allmulticast mode [ 486.863038][T18254] Q6\bY4 speed is unknown, defaulting to 1000 [ 486.874556][T18254] hsr0 speed is unknown, defaulting to 1000 [ 486.928391][T18254] lo speed is unknown, defaulting to 1000 [ 486.949770][T18262] netlink: 'syz.0.4250': attribute type 10 has an invalid length. [ 486.957826][T18262] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4250'. [ 487.422542][T18280] netlink: 'syz.3.4253': attribute type 6 has an invalid length. [ 487.423151][T18280] netlink: 'syz.3.4253': attribute type 6 has an invalid length. [ 487.423445][T18280] tipc: Enabling of bearer rejected, already enabled [ 487.454845][T18254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4248'. [ 487.465234][T18254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4248'. [ 487.476513][T18282] tipc: Enabling of bearer rejected, already enabled [ 488.307474][ T3005] udevd[3005]: worker [3305] terminated by signal 33 (Unknown signal 33) [ 488.324106][ T3005] udevd[3005]: worker [3305] failed while handling '/devices/virtual/block/loop5' [ 488.398306][T18313] validate_nla: 2 callbacks suppressed [ 488.398372][T18313] netlink: 'syz.3.4263': attribute type 6 has an invalid length. [ 488.433989][T18313] netlink: 'syz.3.4263': attribute type 6 has an invalid length. [ 488.434271][T18313] tipc: Enabling of bearer rejected, already enabled [ 488.484795][T18312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4264'. [ 488.591467][T18317] vlan0: entered allmulticast mode [ 488.680717][T18328] netlink: 'syz.4.4268': attribute type 6 has an invalid length. [ 488.681019][T18328] netlink: 'syz.4.4268': attribute type 6 has an invalid length. [ 488.689799][T18327] tipc: Enabling of bearer rejected, already enabled [ 488.759358][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4269'. [ 488.770005][T18331] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4269'. [ 488.770146][T18331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4269'. [ 488.800395][T18334] wireguard0: entered promiscuous mode [ 488.800417][T18334] wireguard0: entered allmulticast mode [ 488.888817][T18337] x_tables: ip_tables: ah match: only valid for protocol 51 [ 489.058704][T18341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.058789][ T1046] Q6\bY4 speed is unknown, defaulting to 1000 [ 489.058807][ T1046] syz2: Port: 1 Link ACTIVE [ 489.156938][T18343] netlink: 'syz.1.4272': attribute type 6 has an invalid length. [ 489.157546][T18343] netlink: 'syz.1.4272': attribute type 6 has an invalid length. [ 489.184142][T18343] tipc: Enabling of bearer rejected, already enabled [ 489.207928][T18345] xt_hashlimit: max too large, truncated to 1048576 [ 489.216279][T18345] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 489.231785][T18345] netlink: 'syz.5.4273': attribute type 10 has an invalid length. [ 489.246219][T18345] loop5: detected capacity change from 0 to 512 [ 489.253054][T18345] ext4: Unknown parameter 'smackfshat' [ 489.264970][T18349] netlink: 'syz.3.4274': attribute type 10 has an invalid length. [ 489.279694][T18349] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 489.425353][T18354] wireguard0: entered promiscuous mode [ 489.430919][T18354] wireguard0: entered allmulticast mode [ 489.694433][T18361] loop5: detected capacity change from 0 to 512 [ 489.727768][T18361] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4278: inode has both inline data and extents flags [ 489.742260][ T29] kauditd_printk_skb: 1534 callbacks suppressed [ 489.742275][ T29] audit: type=1326 audit(489.723:570790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 489.747877][T18365] netlink: 'syz.4.4279': attribute type 6 has an invalid length. [ 489.756260][ T29] audit: type=1326 audit(489.723:570791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 489.803136][ T29] audit: type=1326 audit(489.723:570792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 489.824364][T18368] netlink: 'syz.4.4279': attribute type 6 has an invalid length. [ 489.827043][ T29] audit: type=1326 audit(489.723:570793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 489.880962][T18361] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4278: couldn't read orphan inode 15 (err -117) [ 489.894579][T18365] tipc: Enabling of bearer rejected, already enabled [ 489.904135][T18361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.973428][ T29] audit: type=1326 audit(489.833:570794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 489.997387][ T29] audit: type=1326 audit(489.833:570795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 490.020489][ T29] audit: type=1326 audit(489.873:570796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 490.044136][ T29] audit: type=1326 audit(489.883:570797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 490.067972][ T29] audit: type=1326 audit(489.883:570798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 490.091337][ T29] audit: type=1326 audit(489.883:570799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 490.217086][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.609823][T18393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=18393 comm=syz.1.4286 [ 490.919370][T18373] wireguard0: entered promiscuous mode [ 490.919473][T18373] wireguard0: entered allmulticast mode [ 491.002632][T18402] tipc: Enabling of bearer rejected, already enabled [ 491.171506][T18384] wireguard0: entered promiscuous mode [ 491.171546][T18384] wireguard0: entered allmulticast mode [ 491.204593][T18401] team0 (unregistering): Port device bridge2 removed [ 491.222833][T18404] __nla_validate_parse: 3 callbacks suppressed [ 491.222852][T18404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4288'. [ 491.222879][T18404] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4288'. [ 491.222894][T18404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4288'. [ 491.223032][T18404] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4288'. [ 491.377838][T18415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4290'. [ 491.452603][T18420] loop5: detected capacity change from 0 to 256 [ 491.501941][T18420] FAT-fs (loop5): bogus sectors per cluster 223 [ 491.533239][T18420] FAT-fs (loop5): Can't find a valid FAT filesystem [ 491.754259][T18429] Q6\bY4 speed is unknown, defaulting to 1000 [ 491.763177][T18429] hsr0 speed is unknown, defaulting to 1000 [ 491.841518][T18429] lo speed is unknown, defaulting to 1000 [ 492.143930][T18432] wireguard0: entered promiscuous mode [ 492.150738][T18432] wireguard0: entered allmulticast mode [ 492.693319][T18434] wireguard0: entered promiscuous mode [ 492.699948][T18434] wireguard0: entered allmulticast mode [ 492.899402][T18444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=18444 comm=syz.4.4299 [ 493.045366][T18448] vlan0: entered allmulticast mode [ 493.928620][T18452] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 493.939399][T18452] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 493.951212][T18458] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 494.061256][T18469] validate_nla: 4 callbacks suppressed [ 494.061280][T18469] netlink: 'syz.5.4306': attribute type 30 has an invalid length. [ 494.183888][T18464] wireguard0: entered promiscuous mode [ 494.190514][T18464] wireguard0: entered allmulticast mode [ 494.372487][T18474] loop5: detected capacity change from 0 to 256 [ 494.631923][T18474] FAT-fs (loop5): bogus sectors per cluster 223 [ 494.670663][T18474] FAT-fs (loop5): Can't find a valid FAT filesystem [ 494.747130][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 494.747150][ T29] audit: type=1326 audit(494.713:571437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 494.866806][ T29] audit: type=1326 audit(494.753:571438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 494.891189][ T29] audit: type=1326 audit(494.753:571439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 494.915406][ T29] audit: type=1326 audit(494.753:571440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 494.939656][ T29] audit: type=1326 audit(494.753:571441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 494.963938][ T29] audit: type=1326 audit(494.753:571442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 494.987289][ T29] audit: type=1326 audit(494.753:571443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 495.010392][ T29] audit: type=1326 audit(494.753:571444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 495.034591][ T29] audit: type=1326 audit(494.753:571445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 495.058794][ T29] audit: type=1326 audit(494.833:571446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.3.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 495.307108][T18480] netlink: 'syz.3.4309': attribute type 6 has an invalid length. [ 495.327885][T18480] netlink: 'syz.3.4309': attribute type 6 has an invalid length. [ 495.386429][T18480] tipc: Enabling of bearer rejected, already enabled [ 495.538241][T18482] wireguard0: entered promiscuous mode [ 495.538264][T18482] wireguard0: entered allmulticast mode [ 495.694052][T18490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=18490 comm=syz.3.4312 [ 495.933963][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'. [ 496.369834][T18512] wireguard0: entered promiscuous mode [ 496.375426][T18512] wireguard0: entered allmulticast mode [ 496.788722][T18516] netlink: 'syz.3.4319': attribute type 6 has an invalid length. [ 496.867485][T18517] netlink: 'syz.3.4319': attribute type 6 has an invalid length. [ 496.886637][T18516] tipc: Enabling of bearer rejected, already enabled [ 497.400562][T18519] 9pnet_fd: Insufficient options for proto=fd [ 497.660367][T18531] netlink: 'syz.3.4322': attribute type 6 has an invalid length. [ 497.660679][T18531] netlink: 'syz.3.4322': attribute type 6 has an invalid length. [ 497.660927][T18531] tipc: Enabling of bearer rejected, already enabled [ 497.704238][T18533] siw: device registration error -23 [ 497.736564][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4325'. [ 498.045461][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4328'. [ 498.168420][T18545] Q6\bY4 speed is unknown, defaulting to 1000 [ 498.177164][T18545] hsr0 speed is unknown, defaulting to 1000 [ 498.264599][T18545] lo speed is unknown, defaulting to 1000 [ 499.379945][T18550] wireguard0: entered promiscuous mode [ 499.385548][T18550] wireguard0: entered allmulticast mode [ 499.849144][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 499.849159][ T29] audit: type=1326 audit(499.823:572273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 499.904016][ T29] audit: type=1326 audit(499.853:572274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 499.928386][ T29] audit: type=1326 audit(499.853:572275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 499.952647][ T29] audit: type=1326 audit(499.853:572276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 499.976884][ T29] audit: type=1326 audit(499.853:572277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 500.001115][ T29] audit: type=1326 audit(499.853:572278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 500.025321][ T29] audit: type=1326 audit(499.853:572279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 500.049445][ T29] audit: type=1326 audit(499.853:572280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 500.073779][ T29] audit: type=1326 audit(499.853:572281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 500.097933][ T29] audit: type=1326 audit(499.853:572282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.1.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba24aefc9 code=0x7ffc0000 [ 500.133911][T18557] netlink: 'syz.1.4333': attribute type 6 has an invalid length. [ 500.146484][T18557] netlink: 'syz.1.4333': attribute type 6 has an invalid length. [ 500.157002][T18557] tipc: Enabling of bearer rejected, already enabled [ 500.361305][T18555] Q6\bY4 speed is unknown, defaulting to 1000 [ 500.397319][T18555] hsr0 speed is unknown, defaulting to 1000 [ 500.518774][T18555] lo speed is unknown, defaulting to 1000 [ 501.063958][T18577] netlink: 'syz.3.4338': attribute type 10 has an invalid length. [ 501.073040][T18577] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4338'. [ 501.111022][T18573] loop5: detected capacity change from 0 to 256 [ 501.443568][T18573] FAT-fs (loop5): bogus sectors per cluster 223 [ 501.465456][T18573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 501.784334][T18591] wireguard0: entered promiscuous mode [ 501.791073][T18591] wireguard0: entered allmulticast mode [ 502.081464][T18595] Q6\bY4 speed is unknown, defaulting to 1000 [ 502.099398][T18595] hsr0 speed is unknown, defaulting to 1000 [ 502.227421][T18595] lo speed is unknown, defaulting to 1000 [ 502.252341][T18599] netlink: 'syz.0.4343': attribute type 6 has an invalid length. [ 502.262137][T18599] netlink: 'syz.0.4343': attribute type 6 has an invalid length. [ 502.271146][T18599] tipc: Enabling of bearer rejected, already enabled [ 502.281075][T18600] netlink: 'syz.4.4342': attribute type 30 has an invalid length. [ 502.521549][T18603] loop5: detected capacity change from 0 to 512 [ 502.551284][T18613] netlink: 'syz.4.4348': attribute type 10 has an invalid length. [ 502.571124][T18603] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4345: inode has both inline data and extents flags [ 502.594068][T18613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4348'. [ 502.595813][T18603] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4345: couldn't read orphan inode 15 (err -117) [ 502.604585][T18613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4348'. [ 502.625263][T18613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4348'. [ 502.639138][T18603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.648299][T18613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4348'. [ 502.811281][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.863687][T18625] loop5: detected capacity change from 0 to 128 [ 503.074699][T18636] netlink: 'syz.0.4354': attribute type 6 has an invalid length. [ 503.085180][T18636] netlink: 'syz.0.4354': attribute type 6 has an invalid length. [ 503.095482][T18636] tipc: Enabling of bearer rejected, already enabled [ 503.271860][T18625] syz.5.4350: attempt to access beyond end of device [ 503.271860][T18625] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 503.286542][T18625] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 503.297928][T18629] syz.5.4350: attempt to access beyond end of device [ 503.297928][T18629] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 503.312516][T18629] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 503.324356][T18629] syz.5.4350: attempt to access beyond end of device [ 503.324356][T18629] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 503.338975][T18629] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 503.357098][T18642] Q6\bY4 speed is unknown, defaulting to 1000 [ 503.364555][T18642] hsr0 speed is unknown, defaulting to 1000 [ 503.403248][T18645] Q6\bY4 speed is unknown, defaulting to 1000 [ 503.417840][T18645] hsr0 speed is unknown, defaulting to 1000 [ 503.474555][T18645] lo speed is unknown, defaulting to 1000 [ 503.548503][T18642] lo speed is unknown, defaulting to 1000 [ 503.858284][T18656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.877026][T18656] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 503.895658][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4357'. [ 503.906833][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4357'. [ 504.030202][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4360'. [ 504.334128][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 504.528687][T18670] Q6\bY4 speed is unknown, defaulting to 1000 [ 504.705369][T18670] hsr0 speed is unknown, defaulting to 1000 [ 504.870260][T18683] netlink: 'syz.5.4366': attribute type 6 has an invalid length. [ 504.871412][T18683] tipc: Enabling of bearer rejected, already enabled [ 504.905708][ T29] kauditd_printk_skb: 1451 callbacks suppressed [ 504.905728][ T29] audit: type=1326 audit(504.833:573734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.905832][ T29] audit: type=1326 audit(504.833:573735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.905881][ T29] audit: type=1326 audit(504.833:573736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.905931][ T29] audit: type=1326 audit(504.833:573737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.906019][ T29] audit: type=1326 audit(504.833:573738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.906050][ T29] audit: type=1326 audit(504.833:573739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.906197][ T29] audit: type=1326 audit(504.833:573740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 504.906270][ T29] audit: type=1326 audit(504.833:573741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.3.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f6efc9 code=0x7ffc0000 [ 505.715704][ T29] audit: type=1326 audit(505.683:573742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18666 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 505.940495][T18670] lo speed is unknown, defaulting to 1000 [ 506.137060][ T29] audit: type=1326 audit(506.043:573743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18666 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa37e5aefc9 code=0x7ffc0000 [ 506.291087][T18690] pim6reg: left allmulticast mode [ 506.485331][T18693] loop5: detected capacity change from 0 to 512 [ 506.572176][T18693] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4369: inode has both inline data and extents flags [ 506.629565][T18693] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4369: couldn't read orphan inode 15 (err -117) [ 506.697709][T18693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.791812][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.797442][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 506.912574][T18712] loop5: detected capacity change from 0 to 512 [ 506.953828][T18712] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4375: inode has both inline data and extents flags [ 506.996739][T18712] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4375: couldn't read orphan inode 15 (err -117) [ 507.029467][T18712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.175203][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.211569][T18723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4377'. [ 507.361801][T18726] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.4378' sets config #-1 [ 507.526568][T18728] vlan1: entered allmulticast mode [ 507.737871][T18742] dvmrp1: entered allmulticast mode [ 507.752587][T18742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4381'. [ 507.817832][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4382'. [ 507.837868][T18741] validate_nla: 1 callbacks suppressed [ 507.837883][T18741] netlink: 'syz.4.4382': attribute type 13 has an invalid length. [ 507.952738][ T2353] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.977317][ T2353] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.006845][ T2353] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.019354][ T2353] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.235034][T18751] wireguard0: entered promiscuous mode [ 508.242050][T18751] wireguard0: entered allmulticast mode [ 508.253270][T18749] loop5: detected capacity change from 0 to 512 [ 508.269225][T18749] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4384: inode has both inline data and extents flags [ 508.289193][T18749] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4384: couldn't read orphan inode 15 (err -117) [ 508.304786][T18749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.366268][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.509968][T18756] loop5: detected capacity change from 0 to 512 [ 508.528902][T18756] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4385: inode has both inline data and extents flags [ 508.555839][T18756] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4385: couldn't read orphan inode 15 (err -117) [ 508.579521][T18756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.702560][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.705792][T18766] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.4398'. [ 508.880259][T18776] block device autoloading is deprecated and will be removed. [ 508.954262][T18785] netlink: 'syz.3.4393': attribute type 6 has an invalid length. [ 508.954504][T18785] netlink: 'syz.3.4393': attribute type 6 has an invalid length. [ 508.954850][T18785] tipc: Enabling of bearer rejected, already enabled [ 509.792834][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4399'. [ 510.000520][T18808] wireguard2: entered promiscuous mode [ 510.006107][T18808] wireguard2: entered allmulticast mode [ 510.574155][ T29] kauditd_printk_skb: 1600 callbacks suppressed [ 510.574169][ T29] audit: type=1326 audit(510.543:575344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.632343][T18813] netlink: 'syz.1.4402': attribute type 3 has an invalid length. [ 510.666212][ T29] audit: type=1326 audit(510.583:575345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.690063][ T29] audit: type=1326 audit(510.583:575346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.713276][ T29] audit: type=1326 audit(510.583:575347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.737136][ T29] audit: type=1326 audit(510.583:575348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.760164][ T29] audit: type=1326 audit(510.583:575349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.784140][ T29] audit: type=1326 audit(510.583:575350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.808113][ T29] audit: type=1326 audit(510.583:575351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.831285][ T29] audit: type=1326 audit(510.583:575352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.837310][T18821] random: crng reseeded on system resumption [ 510.855191][ T29] audit: type=1326 audit(510.583:575353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.0.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 510.926649][T18825] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.071421][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4411'. [ 511.335211][T18847] wireguard0: entered promiscuous mode [ 511.341563][T18847] wireguard0: entered allmulticast mode [ 511.488655][T18839] netlink: 'syz.0.4408': attribute type 6 has an invalid length. [ 511.502521][T18846] SELinux: failed to load policy [ 511.564162][T18850] netlink: 'syz.0.4408': attribute type 6 has an invalid length. [ 511.617612][T18856] tipc: Enabling of bearer rejected, already enabled [ 511.716114][T18858] Q6\bY4 speed is unknown, defaulting to 1000 [ 511.733649][T18858] hsr0 speed is unknown, defaulting to 1000 [ 511.820345][T18858] lo speed is unknown, defaulting to 1000 [ 511.853853][T18826] rdma_op ffff88814ac32180 conn xmit_rdma 0000000000000000 [ 511.996936][T18861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4414'. [ 512.047812][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4416'. [ 512.057834][T18865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4416'. [ 512.102756][T18867] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 512.483748][T18885] loop5: detected capacity change from 0 to 512 [ 512.523362][T18861] Q6\bY4 speed is unknown, defaulting to 1000 [ 512.537928][T18885] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4420: inode has both inline data and extents flags [ 512.573280][T18885] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4420: couldn't read orphan inode 15 (err -117) [ 512.589469][T18885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.625491][T18890] wireguard0: entered promiscuous mode [ 512.631309][T18890] wireguard0: entered allmulticast mode [ 512.707887][T18861] hsr0 speed is unknown, defaulting to 1000 [ 512.750050][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.948349][T18897] loop5: detected capacity change from 0 to 512 [ 512.971504][T18897] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4422: inode has both inline data and extents flags [ 512.972448][T18903] netlink: 'syz.3.4424': attribute type 6 has an invalid length. [ 513.008436][T18903] netlink: 'syz.3.4424': attribute type 6 has an invalid length. [ 513.008691][T18903] tipc: Enabling of bearer rejected, already enabled [ 513.027454][T18897] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4422: couldn't read orphan inode 15 (err -117) [ 513.028087][T18897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.140025][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.314161][T18913] loop5: detected capacity change from 0 to 256 [ 513.344283][T18913] FAT-fs (loop5): bogus sectors per cluster 223 [ 513.351545][T18913] FAT-fs (loop5): Can't find a valid FAT filesystem [ 513.418260][T18861] lo speed is unknown, defaulting to 1000 [ 513.495450][T18922] wireguard0: entered promiscuous mode [ 513.495473][T18922] wireguard0: entered allmulticast mode [ 514.001281][T18937] Q6\bY4 speed is unknown, defaulting to 1000 [ 514.023234][T18937] hsr0 speed is unknown, defaulting to 1000 [ 514.091940][T18940] Q6\bY4 speed is unknown, defaulting to 1000 [ 514.111201][T18940] hsr0 speed is unknown, defaulting to 1000 [ 514.119468][T18937] lo speed is unknown, defaulting to 1000 [ 514.135365][T18942] loop5: detected capacity change from 0 to 512 [ 514.174497][T18942] EXT4-fs (loop5): too many log groups per flexible block group [ 514.193479][T18942] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 514.210146][T18942] EXT4-fs (loop5): mount failed [ 514.228247][T18940] lo speed is unknown, defaulting to 1000 [ 515.005544][T18954] loop5: detected capacity change from 0 to 256 [ 515.068536][T18964] netlink: 'syz.0.4436': attribute type 6 has an invalid length. [ 515.118297][T18968] netlink: 'syz.0.4436': attribute type 6 has an invalid length. [ 515.132330][T18954] FAT-fs (loop5): bogus sectors per cluster 223 [ 515.160457][T18954] FAT-fs (loop5): Can't find a valid FAT filesystem [ 515.222849][T18959] tipc: Enabling of bearer rejected, already enabled [ 515.234204][T18966] netlink: 'syz.1.4439': attribute type 6 has an invalid length. [ 515.285088][T18969] netlink: 'syz.1.4439': attribute type 6 has an invalid length. [ 515.304617][T18966] tipc: Enabling of bearer rejected, already enabled [ 515.335173][T18972] wireguard0: entered promiscuous mode [ 515.342055][T18972] wireguard0: entered allmulticast mode [ 515.412298][T18981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=18981 comm=syz.4.4443 [ 515.580387][ T29] kauditd_printk_skb: 1771 callbacks suppressed [ 515.580407][ T29] audit: type=1326 audit(515.553:577125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.611598][ T29] audit: type=1326 audit(515.553:577126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.634901][ T29] audit: type=1326 audit(515.553:577127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.704653][ T29] audit: type=1326 audit(515.663:577128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.728999][ T29] audit: type=1326 audit(515.663:577129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.753242][ T29] audit: type=1326 audit(515.663:577130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.777504][ T29] audit: type=1326 audit(515.663:577131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.801628][ T29] audit: type=1326 audit(515.663:577132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.826058][ T29] audit: type=1326 audit(515.663:577133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab315efc9 code=0x7ffc0000 [ 515.850189][ T29] audit: type=1326 audit(515.663:577134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18978 comm="syz.0.4441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ab315da7f code=0x7ffc0000 [ 515.904862][T18989] loop5: detected capacity change from 0 to 256 [ 515.959547][T18989] FAT-fs (loop5): bogus sectors per cluster 223 [ 515.989866][T18989] FAT-fs (loop5): Can't find a valid FAT filesystem [ 516.253820][T18994] netlink: 'syz.5.4446': attribute type 6 has an invalid length. [ 516.253925][T18993] ================================================================== [ 516.253949][T18993] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 516.253975][T18993] [ 516.253983][T18993] write to 0xffffffff86869d98 of 8 bytes by task 18994 on cpu 0: [ 516.254002][T18993] data_alloc+0x274/0x2e0 [ 516.254023][T18993] prb_reserve+0x807/0xaf0 [ 516.254044][T18993] vprintk_store+0x56d/0x860 [ 516.254070][T18993] vprintk_emit+0x10d/0x580 [ 516.254097][T18993] vprintk_default+0x26/0x30 [ 516.254116][T18994] netlink: 'syz.5.4446': attribute type 6 has an invalid length. [ 516.254124][T18993] vprintk+0x1d/0x30 [ 516.254151][T18993] _printk+0x79/0xa0 [ 516.254180][T18993] __nla_validate_parse+0x1227/0x1d00 [ 516.254219][T18993] __nla_validate+0x40/0x60 [ 516.254242][T18993] rtm_to_fib_config+0x79/0x950 [ 516.254265][T18993] inet_rtm_newroute+0x75/0x140 [ 516.254284][T18993] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 516.254305][T18993] netlink_rcv_skb+0x123/0x220 [ 516.254340][T18993] rtnetlink_rcv+0x1c/0x30 [ 516.254364][T18993] netlink_unicast+0x5c0/0x690 [ 516.254397][T18993] netlink_sendmsg+0x58b/0x6b0 [ 516.254417][T18993] __sock_sendmsg+0x145/0x180 [ 516.254443][T18993] ____sys_sendmsg+0x31e/0x4e0 [ 516.254477][T18993] ___sys_sendmsg+0x17b/0x1d0 [ 516.254506][T18993] __x64_sys_sendmsg+0xd4/0x160 [ 516.254543][T18993] x64_sys_call+0x191e/0x3000 [ 516.254571][T18993] do_syscall_64+0xd2/0x200 [ 516.254592][T18993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.254618][T18993] [ 516.254625][T18993] read to 0xffffffff86869d98 of 16 bytes by task 18993 on cpu 1: [ 516.254643][T18993] _prb_read_valid+0x1bc/0x920 [ 516.254660][T18993] prb_read_valid+0x3c/0x60 [ 516.254678][T18993] printk_get_next_message+0xc8/0x510 [ 516.254709][T18993] console_flush_all+0x290/0x6a0 [ 516.254739][T18993] console_unlock+0xa1/0x2e0 [ 516.254765][T18993] con_flush_chars+0xb2/0x1b0 [ 516.254795][T18993] con_write+0x2e/0x40 [ 516.254826][T18993] n_tty_write+0x7ca/0xb40 [ 516.254856][T18993] file_tty_write+0x378/0x690 [ 516.254880][T18993] tty_write+0x25/0x30 [ 516.254902][T18993] vfs_write+0x52a/0x960 [ 516.254930][T18993] ksys_write+0xda/0x1a0 [ 516.254958][T18993] __x64_sys_write+0x40/0x50 [ 516.254984][T18993] x64_sys_call+0x2802/0x3000 [ 516.255010][T18993] do_syscall_64+0xd2/0x200 [ 516.255031][T18993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.255052][T18993] [ 516.255056][T18993] Reported by Kernel Concurrency Sanitizer on: [ 516.255070][T18993] CPU: 1 UID: 0 PID: 18993 Comm: syz.5.4446 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 516.255101][T18993] Tainted: [W]=WARN [ 516.255110][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.255126][T18993] ================================================================== [ 516.255196][T18994] tipc: Enabling of bearer rejected, already enabled [ 516.555431][T18997] Q6\bY4 speed is unknown, defaulting to 1000 [ 516.571917][T18997] hsr0 speed is unknown, defaulting to 1000 [ 516.704900][T18997] lo speed is unknown, defaulting to 1000