last executing test programs: 3m26.041418999s ago: executing program 2 (id=58): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000004c0)={{0x10, 0xc}, 0x1, 0x2, 0xfffffff9, {0x8, 0x96}, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2000000005}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x4, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r9, 0x1, 0x4002) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 3m25.702299396s ago: executing program 2 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000035c0)='./file0\x00', 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646f74732c666c7573682c6e6f646f74732c757365667265652c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c756d61736b3d30303030303030303030303030303030303030303030312c000df51212a7f6e36f8f76f775f7a4f5dd"], 0x1, 0x11f1, &(0x7f0000001240)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001780)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000005c0)={r2, 0x4}) syz_clone3(&(0x7f0000000280)={0x80, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x58) r3 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000003580)=0x9b, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x68000) ioctl$EVIOCGLED(r4, 0x80284504, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = add_key$keyring(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000003440)='id_legacy\x00', &(0x7f0000003480)={'syz', 0x1}, &(0x7f00000034c0)='\\((,}}D.#\\\x00', r7) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1, 0x4000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002440)={{r2, 0xc6, 0x3, 0x1, 0x3, 0x1, 0x3, 0x5, 0x1, 0x9, 0x3, 0x80000001, 0x2, 0x4, 0x2}}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r13}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{r2, 0xb, 0x3, 0x4, 0x7, 0x40, 0xffffffffffffff80, 0x0, 0xc, 0x9, 0x361c, 0x79c6, 0x1, 0x0, 0x6}}) 3m25.082800987s ago: executing program 2 (id=75): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040880) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) kexec_load(0x5, 0x0, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00.'], 0x48}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) 3m24.707642195s ago: executing program 2 (id=79): chdir(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000440)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) symlink(&(0x7f0000001780)='./bus\x00', &(0x7f0000000240)='./cgroup\x00') 3m23.877418001s ago: executing program 2 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x20000000000001fd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x17, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="3979b09f1d7d67579ae8d0697c051fcc66fbb4620051508f0e9c0d15d863cd4176f91bbb6840763274ef1b43108f1bf7584d37", 0x33}, {&(0x7f0000000640)="349fa0ec0659a550945cd1e8b252f82949c9fe8163c295466406ae7f684e988ea079859ccb7ba82dee0b50d2b20c333113d806c915269a4cb21abcb4927ac54f3911ae100d64716f6703b4e78e535f14ff237569bf54eff1902719a1b95a1469f4522ae3b2d92abeb55660de84d0f4f27ba30c8b3c616869f4a562ff874a0a4b65cfbe59b0c8d0a1a64fac3bac842c6a8a803910797d34de4fd74121e90ed25a1a1f91ac3c9c015b67352b4a452367db058f155dd64dada5fbac375ce1a7f9da0eaf37d837a8380fa9", 0xc9}], 0x2, &(0x7f0000000780)=[{0x58, 0x10f, 0x1000, "0bb014f56309287c98372866f6ef04b1c060ab1bd95809c186733fe7a3f64e6a06ecc588b40e108128504271fefa4f5debf2daebb909f836e30dc3e59600d3207d29e207e99540c9"}], 0x58}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x1}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r8, &(0x7f0000000300)=0x4078c1d5, 0x12) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="faffffff000000181100"/20, @ANYRES32=r5, @ANYRESOCT=r4], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) r11 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r11, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x4808, &(0x7f0000000140), 0x1, 0x52c, &(0x7f0000000e80)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88580, 0x1a7) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 3m23.719671294s ago: executing program 2 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101040, 0x0) unshare(0x24020400) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0xfffffffd, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000840000000010000000db5c4896e0b276bf42adc7ac008f9d61a939bb13ab44c2529714919af12478e931701acf78ff12cbb4da8c18eef94187364da4407b67afd1f18233b1b9646534237a7a6f651a25553962560e9f61669894f67e0bfd756d6d05cce99e3fe15035aae4d4ff9880ec3e39b4e07ab76417800a55fd6ac1923b28eb15a75ea4348f0e6b6fa1520c2535dcbadf74e0d7cad55bc1310cbe01c93169b6309025604c3b3901b16c3e198cb288ac107bc3852037fe5cb6cd77f617e612e567cd75f84bf6309ae98ade5f4ca882921cd9b01d50cedcf06c7b76b3affe52de6a5456c78f56fef", @ANYRES8=r2, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000005e000000b703009700000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) connect$netlink(r1, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, r7, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411eff0ffffffffffffff00000000", 0x39}, {&(0x7f0000000200)="840d519d558cb7d4ee8f8e290d7db7e74adeacc8b6d2a1e1cc5e6a5344929e06b14b1db32315cbf7fbec4be0adf84472f0706f609e7f1b8514f7aee00ca9b8f47574e0d3e039b569ea49907a48bfa734731e9fb0bcde95e3feb74ffcfdba9f84a3998de4ea9aa3add750098127daca003754b62bcc48b57861ea1a1c4cb13d51073cf2af7a67f6e9ae", 0x89}, {&(0x7f00000002c0)="28cddb6c1c58fbba8fd7c58b41aa843014cecda240e0c90c2fd27c8b8b9bb986a8b2c1ee647694aa177c82399b491a6837e6db4192278e3bc4e7c5a2553ba59381543c1c76190d5e2ee8ad126c067cb995", 0x51}], 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r10, &(0x7f0000000080)='./file0\x00') readlinkat(r10, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) setsockopt$sock_void(r10, 0x1, 0xe9723bab108ea983, 0x0, 0x0) 3m23.703153884s ago: executing program 32 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101040, 0x0) unshare(0x24020400) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0xfffffffd, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000840000000010000000db5c4896e0b276bf42adc7ac008f9d61a939bb13ab44c2529714919af12478e931701acf78ff12cbb4da8c18eef94187364da4407b67afd1f18233b1b9646534237a7a6f651a25553962560e9f61669894f67e0bfd756d6d05cce99e3fe15035aae4d4ff9880ec3e39b4e07ab76417800a55fd6ac1923b28eb15a75ea4348f0e6b6fa1520c2535dcbadf74e0d7cad55bc1310cbe01c93169b6309025604c3b3901b16c3e198cb288ac107bc3852037fe5cb6cd77f617e612e567cd75f84bf6309ae98ade5f4ca882921cd9b01d50cedcf06c7b76b3affe52de6a5456c78f56fef", @ANYRES8=r2, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000005e000000b703009700000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) connect$netlink(r1, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, r7, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411eff0ffffffffffffff00000000", 0x39}, {&(0x7f0000000200)="840d519d558cb7d4ee8f8e290d7db7e74adeacc8b6d2a1e1cc5e6a5344929e06b14b1db32315cbf7fbec4be0adf84472f0706f609e7f1b8514f7aee00ca9b8f47574e0d3e039b569ea49907a48bfa734731e9fb0bcde95e3feb74ffcfdba9f84a3998de4ea9aa3add750098127daca003754b62bcc48b57861ea1a1c4cb13d51073cf2af7a67f6e9ae", 0x89}, {&(0x7f00000002c0)="28cddb6c1c58fbba8fd7c58b41aa843014cecda240e0c90c2fd27c8b8b9bb986a8b2c1ee647694aa177c82399b491a6837e6db4192278e3bc4e7c5a2553ba59381543c1c76190d5e2ee8ad126c067cb995", 0x51}], 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r10, &(0x7f0000000080)='./file0\x00') readlinkat(r10, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) setsockopt$sock_void(r10, 0x1, 0xe9723bab108ea983, 0x0, 0x0) 2m59.569771629s ago: executing program 4 (id=256): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0)="4e661217581307dfa38cb3", &(0x7f00000002c0)=""/65, 0x4}, 0x20) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m58.445152581s ago: executing program 4 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480601080000000000000000050000000400078000000300856173683a6e65742c2e6574000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200400c1}, 0x8000000) syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000008000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000000000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x5}) close_range(r10, 0xffffffffffffffff, 0x0) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19a0c4ca4ef123fbb8da9471d241b5b758702ad677d6f8a515c6813080b2a97c030f99b9044e5698891530d4d318b1d3"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r11}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000015f, &(0x7f0000000880)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r14, 0x0, 0xfffffffffffffffe}, 0x18) 2m57.741943035s ago: executing program 4 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) unshare(0x2c020400) shutdown(r4, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x3}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) mknodat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x7f) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 2m57.48118877s ago: executing program 4 (id=270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x95bda107d86ebb57, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$getown(r1, 0x9) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x2, 0x9}}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) creat(&(0x7f0000000340)='./file1\x00', 0x1d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) 2m54.905076949s ago: executing program 4 (id=276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000080735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdirat(r4, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="a774384bd57221bc000000000000", 0x0, 0x43b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x100}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 2m54.607457005s ago: executing program 4 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000035c0)='./file0\x00', 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646f74732c666c7573682c6e6f646f74732c757365667265652c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c756d61736b3d30303030303030303030303030303030303030303030312c000df51212a7f6e36f8f76f775f7a4f5dd"], 0x1, 0x11f1, &(0x7f0000001240)="$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") r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000005c0)={r3, 0x4}) syz_clone3(&(0x7f0000000280)={0x80, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x58) r4 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000003580)=0x9b, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x68000) ioctl$EVIOCGLED(r5, 0x80284504, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = add_key$keyring(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000003440)='id_legacy\x00', &(0x7f0000003480)={'syz', 0x1}, &(0x7f00000034c0)='\\((,}}D.#\\\x00', r8) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1, 0x4000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002440)={{r3, 0xc6, 0x3, 0x1, 0x3, 0x1, 0x3, 0x5, 0x1, 0x9, 0x3, 0x80000001, 0x2, 0x4, 0x2}}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r14}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{r3, 0xb, 0x3, 0x4, 0x7, 0x40, 0xffffffffffffff80, 0x0, 0xc, 0x9, 0x361c, 0x79c6, 0x1, 0x0, 0x6}}) 2m54.606858665s ago: executing program 33 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000035c0)='./file0\x00', 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646f74732c666c7573682c6e6f646f74732c757365667265652c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c756d61736b3d30303030303030303030303030303030303030303030312c000df51212a7f6e36f8f76f775f7a4f5dd"], 0x1, 0x11f1, &(0x7f0000001240)="$eJzs3U1rY1UYB/CnmYzNpNPO+DY6s/GgG91cHBeu3BRpQSagzEyEGVd3aKohMQm9WSQiWHDnyg/i0p0gfgE/SXGjm66MtElfsS/S2Dd+v00f+r/PveeewIUbziEbH/34dWu1yFbzfpRmZqLci0ibKVKU4kaMrcd73y//9cOTZ88fLdZqS49TWl58+vDDlNLCW79+8e1Pb//Wn/v854VfZqM06bj3+/2Nv59+1SxSs0idbj/l6UW3289ftBtppVm0spQ+aze2zt/sFI21A/lqu9vrDVPeWZmv9tYaRZHyzjC1GsPU76bvIiL/Mm92UpZlab4aVM7QW9/5iEc346UYjUajW1GNubgd87EQd+JuvByvxKvxWrwe9+KNeDPubx+1e4L1Mw8fAAAAAAAAAAAAAAAAAAAAiM3t3fyjE/f/z/37/n8AAAAAAAAAAAAAAAAAAABgCk67//+I3/8HAAAAAAAAAAAAAAAAAAAApsD+fwAAAAAAAAAAAAAAAAAAALh4T549f7RYqy09TqkS8cf6oD6oj/+O8+VPakvvp23lva4/B4P6jd384ThP46w8yWejOsk/OJDv9Ffi3XfG+Vb28ae1Q/mDWDmfKQAAAIBrL0u77u79d+/9PsuOysfVvu8HDr2/l+NBOSJuH7xe+f+9Hf6jYvhNK2+3G2vHFVHad/DspPPErukVdyaXPI9rTa+YOfVE3YyIyzHmK1pUJlN9WcZzHYrzfhJxEfY95AEAAAAAAAAAALhCjl0GOJosvD3jcsKIWxd9mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCpAAAA///tjHSh") r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000005c0)={r3, 0x4}) syz_clone3(&(0x7f0000000280)={0x80, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x58) r4 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000003580)=0x9b, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x68000) ioctl$EVIOCGLED(r5, 0x80284504, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = add_key$keyring(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000003440)='id_legacy\x00', &(0x7f0000003480)={'syz', 0x1}, &(0x7f00000034c0)='\\((,}}D.#\\\x00', r8) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1, 0x4000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002440)={{r3, 0xc6, 0x3, 0x1, 0x3, 0x1, 0x3, 0x5, 0x1, 0x9, 0x3, 0x80000001, 0x2, 0x4, 0x2}}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r14}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{r3, 0xb, 0x3, 0x4, 0x7, 0x40, 0xffffffffffffff80, 0x0, 0xc, 0x9, 0x361c, 0x79c6, 0x1, 0x0, 0x6}}) 1.955048793s ago: executing program 1 (id=4166): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x6) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) close(0x3) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040880) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/108, 0x58, 0x6c, 0x1, 0xdb0, 0x10000, @value=r0}, 0x28) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) kexec_load(0x5, 0x0, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00.'], 0x48}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) 1.865458585s ago: executing program 6 (id=4168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000005140)=[{0x4, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)=""/246, 0xf6}, {&(0x7f0000000f80)=""/239, 0xef}, {&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/195, 0xc3}], &(0x7f0000000500)=[0x8, 0xaf, 0xd5e8]}, {0x4, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/126, 0x7e}, {&(0x7f0000001280)=""/75, 0x4b}, {&(0x7f0000001300)=""/226, 0xe2}, {&(0x7f0000001400)=""/129, 0x81}], &(0x7f00000014c0)=[0x679, 0x7, 0x2, 0x5, 0x8000, 0x0, 0x80]}, {0x5, 0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/104, 0x68}, {&(0x7f0000002580)=""/66, 0x42}, {&(0x7f0000002600)=""/176, 0xb0}, {&(0x7f0000003e40)=""/42, 0x2a}], &(0x7f0000002700)=[0xfff, 0x869c, 0x6, 0x8, 0x4040000000, 0xc19, 0x2, 0x5, 0x425c]}, {0x1, 0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002780)=""/8, 0x8}], &(0x7f0000002800)=[0x6, 0x7fff, 0x3ff]}, {0x2, 0x1, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)=""/248, 0xf8}, {&(0x7f0000002940)=""/74, 0x4a}], &(0x7f0000002a00)=[0x1, 0x100, 0x80, 0x7, 0x8000000000000000, 0x7]}, {0x2, 0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/23, 0x17}], &(0x7f0000002bc0)=[0x1, 0x200294, 0x2, 0x9, 0x6, 0xfffffffffffeffff, 0x3]}, {0x8, 0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002c00)=""/133, 0x85}, {&(0x7f0000002cc0)=""/224, 0xe0}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/104, 0x68}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/180, 0xb4}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000005240)=""/194, 0xc2}], &(0x7f00000050c0)=[0x2, 0x7fffffff, 0xffffffffffffffff, 0x7e8, 0x3, 0x4, 0x400, 0xffffffffffff7fff, 0xa19c, 0x5]}], 0x7) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x8, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095", @ANYRES16=r4, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000ff0200000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000f30000000001000000003cf87af4cc53c7bf418f4e77ad34c80000000a0101000000000000000000000000000400000000000000060000000000000000000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000000000001000000cc000000000000000000000000000000f60000000000000000000000000000000000001c00040002004e21002700"/196], 0x10c}}, 0x804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r9, r10+10000000}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4c900000ea5d7ead9870d9c3afeda3fef5148380481c876cd402eec1447634a7e4d179891852423c4134ce0d4782f4963510d89e8e3bcb6579c2174c457a2a", @ANYRES16=0x0, @ANYBLOB="080428bd7000fddbdf250e000000080004000000800030000280080003000100000006000f009400000014000100ffffffff0000000000000000000000000800050008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x90) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.54888205s ago: executing program 6 (id=4173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000, 0x10000, 0x3}, 0x20) 1.505254491s ago: executing program 6 (id=4177): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) 1.445696233s ago: executing program 6 (id=4178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000005140)=[{0x4, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)=""/246, 0xf6}, {&(0x7f0000000f80)=""/239, 0xef}, {&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/195, 0xc3}], &(0x7f0000000500)=[0x8, 0xaf, 0xd5e8]}, {0x4, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/126, 0x7e}, {&(0x7f0000001280)=""/75, 0x4b}, {&(0x7f0000001300)=""/226, 0xe2}, {&(0x7f0000001400)=""/129, 0x81}], &(0x7f00000014c0)=[0x679, 0x7, 0x2, 0x5, 0x8000, 0x0, 0x80]}, {0x5, 0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/104, 0x68}, {&(0x7f0000002580)=""/66, 0x42}, {&(0x7f0000002600)=""/176, 0xb0}, {&(0x7f0000003e40)=""/42, 0x2a}], &(0x7f0000002700)=[0xfff, 0x869c, 0x6, 0x8, 0x4040000000, 0xc19, 0x2, 0x5, 0x425c]}, {0x1, 0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002780)=""/8, 0x8}], &(0x7f0000002800)=[0x6, 0x7fff, 0x3ff]}, {0x2, 0x1, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)=""/248, 0xf8}, {&(0x7f0000002940)=""/74, 0x4a}], &(0x7f0000002a00)=[0x1, 0x100, 0x80, 0x7, 0x8000000000000000, 0x7]}, {0x2, 0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/23, 0x17}], &(0x7f0000002bc0)=[0x1, 0x200294, 0x2, 0x8, 0x9, 0x6, 0xfffffffffffeffff, 0x3]}, {0x8, 0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002c00)=""/133, 0x85}, {&(0x7f0000002cc0)=""/224, 0xe0}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/104, 0x68}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/180, 0xb4}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000005240)=""/194, 0xc2}], &(0x7f00000050c0)}], 0x7) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x8, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095", @ANYRES16=r4, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000ff0200000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000f30000000001000000003cf87af4cc53c7bf418f4e77ad34c80000000a0101000000000000000000000000000400000000000000060000000000000000000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000000000001000000cc000000000000000000000000000000f60000000000000000000000000000000000001c00040002004e21002700"/196], 0x10c}}, 0x804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r9, r10+10000000}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4c900000ea5d7ead9870d9c3afeda3fef5148380481c876cd402eec1447634a7e4d179891852423c4134ce0d4782f4963510d89e8e3bcb6579c2174c457a2a", @ANYRES16=0x0, @ANYBLOB="080428bd7000fddbdf250e000000080004000000800030000280080003000100000006000f009400000014000100ffffffff0000000000000000000000000800050008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x90) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.073667429s ago: executing program 5 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.022075111s ago: executing program 0 (id=4186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) 931.803942ms ago: executing program 0 (id=4188): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800490000"], 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 930.809582ms ago: executing program 6 (id=4189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000080735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdirat(r4, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="a774384bd57221bc000000000000", 0x0, 0x43b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x100}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 885.446813ms ago: executing program 3 (id=4190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 884.725173ms ago: executing program 5 (id=4191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2f00000018"], 0x20) 881.225073ms ago: executing program 0 (id=4192): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfff, 0x0, 0x0, 0x0}) 849.734424ms ago: executing program 1 (id=4193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='htcp\x00', 0x12) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 848.990444ms ago: executing program 0 (id=4194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 836.569944ms ago: executing program 5 (id=4195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffee8, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480601080000000000000000050000000400078000000300856173683a6e65742c2e65740000000000000780000003000100000005000400000000000900020073797a31000000a98b0004000200000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200400c1}, 0x8000000) syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000008000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000000000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x5}) close_range(r10, 0xffffffffffffffff, 0x0) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19a0c4ca4ef123fbb8da9471d241b5b758702ad677d6f8a515c6813080b2a97c030f99b9044e5698891530d4d318b1d3"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r11}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000015f, &(0x7f0000000880)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r14, 0x0, 0xfffffffffffffffe}, 0x18) 807.783845ms ago: executing program 1 (id=4196): socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 793.279845ms ago: executing program 3 (id=4197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) 748.532926ms ago: executing program 3 (id=4198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ustat(0xd, &(0x7f0000000680)) 730.719316ms ago: executing program 1 (id=4199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') 720.083327ms ago: executing program 0 (id=4200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x5, 0x4}}}}}, 0x28}}, 0x44) 705.213647ms ago: executing program 3 (id=4201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 650.735468ms ago: executing program 0 (id=4202): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 644.153588ms ago: executing program 1 (id=4203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffee8, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480601080000000000000000050000000400078000000300856173683a6e65742c2e65740000000000000780000003000100000005000400000000000900020073797a31000000a98b0004000200000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200400c1}, 0x8000000) syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000008000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000000000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x5}) close_range(r10, 0xffffffffffffffff, 0x0) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad", 0x499}], 0x1}}], 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19a0c4ca4ef123fbb8da9471d241b5b758702ad677d6f8a515c6813080b2a97c030f99b9044e5698891530d4d318b1d3"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r11}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000015f, &(0x7f0000000880)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r14, 0x0, 0xfffffffffffffffe}, 0x18) 636.099698ms ago: executing program 3 (id=4204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x20}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 556.76495ms ago: executing program 6 (id=4205): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6bba}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x2, 0x0, [0x8, 0x7, 0x401, 0x4, 0x8, 0x6, 0x0, 0xc40a, 0x1b3, 0x5, 0x5, 0x5, 0x10, 0x3, 0x3c00000, 0x39]}, {0xa, 0x0, [0x2, 0x7, 0x10, 0x5d98, 0x100, 0x6, 0x7, 0xffffff2d, 0x0, 0x1, 0xac19, 0x2, 0xa, 0x200, 0x5, 0x2]}, {0x8, 0x0, [0x5, 0x1000, 0x7, 0x80000000, 0x3, 0x4, 0x1, 0x9, 0xfffffff8, 0x6, 0x3ff, 0x80000001, 0xffffff3b, 0x9, 0x3, 0x4]}], r7, 0x1, 0x1, 0xd8}}, 0x20) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000300)={0x8000000000000, 0x5, 0x7, 0x2, 0xffffffffffffffff, 0x1, 0x3, 0x2}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x10001]}, 0x8}) syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r9, 0x0, 0x0) syz_usbip_server_init(0x4) 499.672411ms ago: executing program 3 (id=4206): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000007b00), 0x40040, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x400005, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 422.672742ms ago: executing program 5 (id=4207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) eventfd(0xec2) ioprio_get$pid(0x2, 0x0) 292.804245ms ago: executing program 1 (id=4208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f2c666c7573682c008eb4d920a22020bfdff5756435b12a0741fd1d465211f5e7b380a7ee206d42a73a617299a081afae08d58be01e67c53899fbbe703082609ea782556e161a2850300c071e10398738f9ee2d29a732e66c2cd256bd7cdd55b6ff8ce37a4300"/155], 0x1, 0x11ab, &(0x7f0000001280)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) 256.886746ms ago: executing program 5 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 0s ago: executing program 5 (id=4210): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x0) listen(r0, 0x0) kernel console output (not intermixed with test programs): 82.866883][T11329] lo speed is unknown, defaulting to 1000 [ 182.868946][ T29] audit: type=1326 audit(182.768:12096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 182.896863][ T29] audit: type=1326 audit(182.770:12097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 182.920694][ T29] audit: type=1326 audit(182.770:12098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 182.943525][ T29] audit: type=1326 audit(182.770:12099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 182.967359][ T29] audit: type=1326 audit(182.770:12100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 182.990963][ T29] audit: type=1326 audit(182.770:12101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 183.014211][ T29] audit: type=1326 audit(182.770:12102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 183.475173][T11371] lo speed is unknown, defaulting to 1000 [ 183.589855][T11371] lo speed is unknown, defaulting to 1000 [ 183.659262][T11371] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 183.665924][T11371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.673400][T11371] vhci_hcd vhci_hcd.0: Device attached [ 183.858524][ T5765] vhci_hcd: vhci_device speed not set [ 183.939213][ T5765] usb 11-1: new full-speed USB device number 8 using vhci_hcd [ 184.058316][T11388] lo speed is unknown, defaulting to 1000 [ 184.182173][T11373] vhci_hcd: connection reset by peer [ 184.188426][ T70] vhci_hcd: stop threads [ 184.192206][T11388] lo speed is unknown, defaulting to 1000 [ 184.192709][ T70] vhci_hcd: release socket [ 184.203017][ T70] vhci_hcd: disconnect device [ 184.490108][T11424] lo speed is unknown, defaulting to 1000 [ 184.559721][T11424] lo speed is unknown, defaulting to 1000 [ 184.609739][T11424] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 184.616372][T11424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.623949][T11424] vhci_hcd vhci_hcd.0: Device attached [ 184.658591][T11428] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 184.665237][T11428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.673416][T11428] vhci_hcd vhci_hcd.0: Device attached [ 184.741717][T11423] lo speed is unknown, defaulting to 1000 [ 185.094973][T11440] __nla_validate_parse: 2 callbacks suppressed [ 185.095107][T11440] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2733'. [ 185.152773][T11426] vhci_hcd: connection closed [ 185.168765][ T70] vhci_hcd: stop threads [ 185.177789][ T70] vhci_hcd: release socket [ 185.183146][ T70] vhci_hcd: disconnect device [ 185.225097][T11429] vhci_hcd: connection closed [ 185.227060][ T70] vhci_hcd: stop threads [ 185.236043][ T70] vhci_hcd: release socket [ 185.241174][ T70] vhci_hcd: disconnect device [ 185.278879][T11423] lo speed is unknown, defaulting to 1000 [ 185.294226][T11448] team0: Device gtp0 is of different type [ 185.415802][T11459] netlink: 'syz.3.2741': attribute type 9 has an invalid length. [ 185.424340][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2741'. [ 185.435718][T11446] lo speed is unknown, defaulting to 1000 [ 185.444772][T11459] macvlan3: entered promiscuous mode [ 185.450844][T11459] team0: entered promiscuous mode [ 185.456114][T11459] macvlan3: entered allmulticast mode [ 185.461644][T11459] team0: entered allmulticast mode [ 185.466777][T11459] team_slave_0: entered allmulticast mode [ 185.472617][T11459] team_slave_1: entered allmulticast mode [ 185.480438][T11459] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 185.497971][T11457] lo speed is unknown, defaulting to 1000 [ 185.583666][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 185.618361][T11446] lo speed is unknown, defaulting to 1000 [ 185.742365][T11457] lo speed is unknown, defaulting to 1000 [ 185.841839][ T5761] usb 13-1: enqueue for inactive port 0 [ 185.847542][ T5761] usb 13-1: enqueue for inactive port 0 [ 185.916595][T11478] ref_ctr_offset mismatch. inode: 0xc9c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 185.948558][ T5761] vhci_hcd: vhci_device speed not set [ 186.017248][T11487] macvtap0: refused to change device tx_queue_len [ 186.196895][T11515] netlink: 'syz.6.2765': attribute type 21 has an invalid length. [ 186.214264][T11515] netlink: 'syz.6.2765': attribute type 1 has an invalid length. [ 186.222178][T11515] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2765'. [ 186.485150][T11557] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2784'. [ 186.549978][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'. [ 186.571488][T11564] lo speed is unknown, defaulting to 1000 [ 186.579954][T11571] program syz.6.2792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.598858][T11572] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2791'. [ 186.607837][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2791'. [ 186.689222][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2797'. [ 186.731298][T11583] loop6: detected capacity change from 0 to 512 [ 186.741235][T11564] lo speed is unknown, defaulting to 1000 [ 186.760315][T11583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2797: error while reading EA inode 32 err=-116 [ 186.778338][ T5764] hid_parser_main: 33 callbacks suppressed [ 186.778358][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.791714][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.799252][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.800953][T11583] EXT4-fs (loop6): Remounting filesystem read-only [ 186.806730][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.814128][T11583] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 186.820769][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.838503][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.846190][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.854099][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.861695][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.869356][ T5764] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 186.877695][ T5764] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 186.887957][T11583] EXT4-fs (loop6): 1 orphan inode deleted [ 186.894239][T11583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.931641][T11604] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 186.939813][T11602] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 186.967297][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.976145][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.989409][T11583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.162835][T11625] loop6: detected capacity change from 0 to 8192 [ 187.604519][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'. [ 187.680035][ T5760] usb 3-1: enqueue for inactive port 0 [ 187.708653][T11644] lo speed is unknown, defaulting to 1000 [ 187.718077][ T5760] usb 3-1: enqueue for inactive port 0 [ 187.809244][ T5760] vhci_hcd: vhci_device speed not set [ 187.815595][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 187.815612][ T29] audit: type=1400 audit(187.799:12289): avc: denied { unmount } for pid=4860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 188.080863][ T29] audit: type=1326 audit(188.069:12290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.104191][ T29] audit: type=1326 audit(188.069:12291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.127395][ T29] audit: type=1326 audit(188.069:12292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.165850][T11659] loop6: detected capacity change from 0 to 512 [ 188.198730][T11644] lo speed is unknown, defaulting to 1000 [ 188.231873][ T29] audit: type=1326 audit(188.139:12293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.255775][ T29] audit: type=1326 audit(188.139:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.257087][T11659] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2828: error while reading EA inode 32 err=-116 [ 188.280663][ T29] audit: type=1326 audit(188.149:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.292603][T11659] EXT4-fs (loop6): Remounting filesystem read-only [ 188.315025][ T29] audit: type=1326 audit(188.149:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.320811][T11659] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 188.344586][ T29] audit: type=1326 audit(188.149:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.377576][ T29] audit: type=1326 audit(188.149:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 188.386632][T11659] EXT4-fs (loop6): 1 orphan inode deleted [ 188.418345][T11659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.455033][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.581402][T11688] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 188.685251][T11700] loop6: detected capacity change from 0 to 512 [ 188.700097][T11700] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2848: error while reading EA inode 32 err=-116 [ 188.714608][T11700] EXT4-fs (loop6): Remounting filesystem read-only [ 188.721278][T11700] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 188.732458][T11700] EXT4-fs (loop6): 1 orphan inode deleted [ 188.738755][T11700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.749786][T11703] lo speed is unknown, defaulting to 1000 [ 188.758643][T11700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.863005][T11703] lo speed is unknown, defaulting to 1000 [ 188.896180][T11716] lo speed is unknown, defaulting to 1000 [ 189.005814][T11716] lo speed is unknown, defaulting to 1000 [ 189.038210][ T5765] usb 11-1: enqueue for inactive port 0 [ 189.043821][ T5765] usb 11-1: enqueue for inactive port 0 [ 189.054398][T11733] loop6: detected capacity change from 0 to 1024 [ 189.061935][T11733] EXT4-fs: Ignoring removed orlov option [ 189.094199][T11733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.126460][ T4860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.135555][ T5765] vhci_hcd: vhci_device speed not set [ 189.223728][T11748] loop6: detected capacity change from 0 to 512 [ 189.238026][T11748] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2864: error while reading EA inode 32 err=-116 [ 189.286310][T11748] EXT4-fs (loop6): Remounting filesystem read-only [ 189.293010][T11748] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 189.303384][T11748] EXT4-fs (loop6): 1 orphan inode deleted [ 189.309654][T11748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.324206][T11748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.390727][T11764] lo speed is unknown, defaulting to 1000 [ 189.485107][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0) [ 189.492163][T11764] lo speed is unknown, defaulting to 1000 [ 190.517342][T11804] __nla_validate_parse: 10 callbacks suppressed [ 190.517364][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'. [ 190.542748][T11806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 190.549445][T11806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.556935][T11806] vhci_hcd vhci_hcd.0: Device attached [ 190.581289][T11812] lo speed is unknown, defaulting to 1000 [ 190.662235][T11812] lo speed is unknown, defaulting to 1000 [ 190.715262][T11808] vhci_hcd: connection closed [ 190.717265][ T3454] vhci_hcd: stop threads [ 190.726345][ T3454] vhci_hcd: release socket [ 190.730823][ T3454] vhci_hcd: disconnect device [ 190.736303][T11812] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 190.742925][T11812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.750560][T11812] vhci_hcd vhci_hcd.0: Device attached [ 190.791751][ T5760] vhci_hcd: vhci_device speed not set [ 190.835670][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2892'. [ 190.865548][T11814] vhci_hcd: connection closed [ 190.866680][ T3454] vhci_hcd: stop threads [ 190.875739][ T3454] vhci_hcd: release socket [ 190.880249][ T3454] vhci_hcd: disconnect device [ 190.926976][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2896'. [ 190.936808][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2896'. [ 190.986454][T11834] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2898'. [ 191.275883][T11876] tmpfs: Bad value for 'mpol' [ 191.319333][T11881] lo speed is unknown, defaulting to 1000 [ 191.386170][T11888] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.401607][ T5764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.409411][ T5764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.412682][T11881] lo speed is unknown, defaulting to 1000 [ 191.417119][ T5764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.430278][ T5764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.437686][ T5764] rtc rtc0: __rtc_set_alarm: err=-22 [ 191.534044][T11898] loop6: detected capacity change from 0 to 8192 [ 191.934415][T11970] sg_write: data in/out 79/246 bytes for SCSI command 0x0-- guessing data in; [ 191.934415][T11970] program syz.5.2958 not setting count and/or reply_len properly [ 191.986758][T11975] lo speed is unknown, defaulting to 1000 [ 192.069860][T11975] lo speed is unknown, defaulting to 1000 [ 192.202493][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.211268][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.319298][T12015] 9pnet_fd: Insufficient options for proto=fd [ 192.329503][T12016] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 192.329503][T12016] program syz.0.2979 not setting count and/or reply_len properly [ 192.406293][T12013] lo speed is unknown, defaulting to 1000 [ 192.416331][T12022] lo speed is unknown, defaulting to 1000 [ 192.502860][T12013] lo speed is unknown, defaulting to 1000 [ 192.585274][T12022] lo speed is unknown, defaulting to 1000 [ 192.893067][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 192.893087][ T29] audit: type=1400 audit(192.878:12559): avc: denied { setcheckreqprot } for pid=12059 comm="syz.3.2995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 193.021333][ T29] audit: type=1400 audit(193.008:12560): avc: denied { relabelfrom } for pid=12071 comm="syz.0.3001" name="NETLINK" dev="sockfs" ino=38017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.021368][T12072] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 193.056845][ T29] audit: type=1400 audit(193.008:12561): avc: denied { mac_admin } for pid=12071 comm="syz.0.3001" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.077758][ T29] audit: type=1400 audit(193.008:12562): avc: denied { relabelto } for pid=12071 comm="syz.0.3001" name="NETLINK" dev="sockfs" ino=38017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:load_policy_exec_t:s0" [ 193.150095][ T29] audit: type=1400 audit(193.138:12563): avc: denied { read write } for pid=12077 comm="syz.3.3003" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 193.175427][ T29] audit: type=1400 audit(193.138:12564): avc: denied { ioctl open } for pid=12077 comm="syz.3.3003" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 193.221900][ T29] audit: type=1400 audit(193.188:12565): avc: denied { setattr } for pid=12079 comm="syz.5.3004" name="" dev="pipefs" ino=6337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.358319][T12084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 193.365054][T12084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.372600][T12084] vhci_hcd vhci_hcd.0: Device attached [ 193.558220][ T5760] vhci_hcd: vhci_device speed not set [ 193.618161][ T5760] usb 1-1: new full-speed USB device number 14 using vhci_hcd [ 193.739636][T12102] batman_adv: batadv0: Interface deactivated: dummy0 [ 193.746806][T12102] batman_adv: batadv0: Removing interface: dummy0 [ 193.765152][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 193.767219][T12103] lo speed is unknown, defaulting to 1000 [ 193.795903][T12100] lo speed is unknown, defaulting to 1000 [ 193.852558][T12103] lo speed is unknown, defaulting to 1000 [ 193.917192][T12100] lo speed is unknown, defaulting to 1000 [ 193.956016][T12085] vhci_hcd: connection reset by peer [ 193.962083][ T1957] vhci_hcd: stop threads [ 193.966628][ T1957] vhci_hcd: release socket [ 193.971152][ T1957] vhci_hcd: disconnect device [ 194.021884][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 194.053074][ T29] audit: type=1326 audit(194.038:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 194.076311][ T29] audit: type=1326 audit(194.038:12567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 194.077436][T12122] lo speed is unknown, defaulting to 1000 [ 194.099654][ T29] audit: type=1326 audit(194.038:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 194.243875][T12131] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 194.388505][T12122] lo speed is unknown, defaulting to 1000 [ 194.502349][T12156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3032'. [ 194.557530][T12157] lo speed is unknown, defaulting to 1000 [ 194.591181][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3036'. [ 194.617048][T12164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 194.623789][T12164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.631280][T12164] vhci_hcd vhci_hcd.0: Device attached [ 194.640557][T12159] batman_adv: batadv0: Adding interface: dummy0 [ 194.646826][T12159] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.689035][T12159] batman_adv: batadv0: Interface activated: dummy0 [ 194.774544][T12178] netlink: 404 bytes leftover after parsing attributes in process `+}[@'. [ 194.919764][ T5762] vhci_hcd: vhci_device speed not set [ 195.066441][ T5762] usb 7-1: new full-speed USB device number 14 using vhci_hcd [ 195.095915][T12157] lo speed is unknown, defaulting to 1000 [ 195.211949][T12191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 195.218605][T12191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.226352][T12191] vhci_hcd vhci_hcd.0: Device attached [ 195.920350][T12192] vhci_hcd: connection closed [ 195.928880][ T2337] vhci_hcd: stop threads [ 195.937929][ T2337] vhci_hcd: release socket [ 195.942423][ T2337] vhci_hcd: disconnect device [ 196.194391][T12165] vhci_hcd: connection reset by peer [ 196.201412][ T70] vhci_hcd: stop threads [ 196.205715][ T70] vhci_hcd: release socket [ 196.210870][ T70] vhci_hcd: disconnect device [ 196.237831][T12210] loop6: detected capacity change from 0 to 2048 [ 196.253600][T12210] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.277632][T12218] IPv6: Can't replace route, no match found [ 196.292751][T12210] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3052: bg 0: block 120: padding at end of block bitmap is not set [ 196.403823][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3059'. [ 196.430503][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 196.509538][T12233] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3063'. [ 196.611887][T12242] lo speed is unknown, defaulting to 1000 [ 196.719181][T12242] lo speed is unknown, defaulting to 1000 [ 196.766432][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3069'. [ 197.088163][T12267] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 197.094908][T12267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.102373][T12267] vhci_hcd vhci_hcd.0: Device attached [ 197.288273][ T5765] vhci_hcd: vhci_device speed not set [ 197.348644][ T5765] usb 11-1: new full-speed USB device number 9 using vhci_hcd [ 197.545788][T12283] loop6: detected capacity change from 0 to 2048 [ 197.586032][T12286] lo speed is unknown, defaulting to 1000 [ 197.654295][T12286] lo speed is unknown, defaulting to 1000 [ 197.695164][T12286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 197.701807][T12286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.709347][T12286] vhci_hcd vhci_hcd.0: Device attached [ 197.743280][T12270] vhci_hcd: connection reset by peer [ 197.756897][ T70] vhci_hcd: stop threads [ 197.761376][ T70] vhci_hcd: release socket [ 197.766012][ T70] vhci_hcd: disconnect device [ 197.813338][T12283] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.880531][T12281] lo speed is unknown, defaulting to 1000 [ 197.918237][ T5764] vhci_hcd: vhci_device speed not set [ 197.935816][T12283] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3082: bg 0: block 120: padding at end of block bitmap is not set [ 197.978192][ T5764] usb 3-1: new full-speed USB device number 13 using vhci_hcd [ 198.176864][T12281] lo speed is unknown, defaulting to 1000 [ 198.236134][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 198.301558][T12288] vhci_hcd: connection reset by peer [ 198.317794][ T3454] vhci_hcd: stop threads [ 198.322122][ T3454] vhci_hcd: release socket [ 198.326594][ T3454] vhci_hcd: disconnect device [ 198.333514][T12305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 198.354499][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 198.354514][ T29] audit: type=1326 audit(198.331:12661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.428209][ T29] audit: type=1326 audit(198.351:12662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.451922][ T29] audit: type=1326 audit(198.351:12663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.475205][ T29] audit: type=1326 audit(198.351:12664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.498436][ T29] audit: type=1326 audit(198.351:12665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.522491][ T29] audit: type=1326 audit(198.363:12666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.545542][ T29] audit: type=1326 audit(198.363:12667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.569193][ T29] audit: type=1326 audit(198.363:12668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.592242][ T29] audit: type=1326 audit(198.363:12669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.615943][ T29] audit: type=1326 audit(198.363:12670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.3.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 198.645517][ T5760] usb 1-1: enqueue for inactive port 0 [ 198.664985][ T5760] usb 1-1: enqueue for inactive port 0 [ 198.760072][ T5760] vhci_hcd: vhci_device speed not set [ 198.795034][T12328] lo speed is unknown, defaulting to 1000 [ 198.815748][T12336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 198.822398][T12336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.830044][T12336] vhci_hcd vhci_hcd.0: Device attached [ 198.858806][T12340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3100'. [ 198.898902][T12340] loop6: detected capacity change from 0 to 512 [ 198.907503][T12340] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3100: error while reading EA inode 32 err=-116 [ 198.924238][T12340] EXT4-fs (loop6): Remounting filesystem read-only [ 198.930973][T12340] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 198.942340][T12340] EXT4-fs (loop6): 1 orphan inode deleted [ 198.959427][T12340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.984030][T12340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.202217][T12328] lo speed is unknown, defaulting to 1000 [ 199.249104][ T5760] vhci_hcd: vhci_device speed not set [ 199.399915][T12337] vhci_hcd: connection closed [ 199.400057][ T12] vhci_hcd: stop threads [ 199.409059][ T12] vhci_hcd: release socket [ 199.413499][ T12] vhci_hcd: disconnect device [ 199.418418][ T5760] usb 1-1: enqueue for inactive port 0 [ 199.424462][ T5760] usb 1-1: enqueue for inactive port 0 [ 199.430140][ T5760] usb 1-1: enqueue for inactive port 0 [ 199.498168][ T5760] vhci_hcd: vhci_device speed not set [ 200.046775][T12369] syz.3.3113 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 200.061183][T12369] CPU: 1 UID: 0 PID: 12369 Comm: syz.3.3113 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.061225][T12369] Tainted: [W]=WARN [ 200.061235][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.061333][T12369] Call Trace: [ 200.061339][T12369] [ 200.061347][T12369] __dump_stack+0x1d/0x30 [ 200.061369][T12369] dump_stack_lvl+0xe8/0x140 [ 200.061395][T12369] dump_stack+0x15/0x1b [ 200.061456][T12369] dump_header+0x81/0x220 [ 200.061494][T12369] oom_kill_process+0x342/0x400 [ 200.061532][T12369] out_of_memory+0x979/0xb80 [ 200.061657][T12369] try_charge_memcg+0x5e6/0x9e0 [ 200.061749][T12369] obj_cgroup_charge_pages+0xa6/0x150 [ 200.061793][T12369] __memcg_kmem_charge_page+0x9f/0x170 [ 200.061910][T12369] __alloc_frozen_pages_noprof+0x188/0x360 [ 200.061962][T12369] alloc_pages_mpol+0xb3/0x250 [ 200.062040][T12369] alloc_pages_noprof+0x90/0x130 [ 200.062073][T12369] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 200.062126][T12369] __kvmalloc_node_noprof+0x30f/0x4e0 [ 200.062168][T12369] ? ip_set_alloc+0x1f/0x30 [ 200.062256][T12369] ? ip_set_alloc+0x1f/0x30 [ 200.062281][T12369] ? __kmalloc_cache_noprof+0x189/0x320 [ 200.062368][T12369] ip_set_alloc+0x1f/0x30 [ 200.062394][T12369] hash_netiface_create+0x282/0x740 [ 200.062420][T12369] ? __pfx_hash_netiface_create+0x10/0x10 [ 200.062444][T12369] ip_set_create+0x3c9/0x960 [ 200.062533][T12369] ? __nla_parse+0x40/0x60 [ 200.062570][T12369] nfnetlink_rcv_msg+0x4c3/0x590 [ 200.062626][T12369] netlink_rcv_skb+0x123/0x220 [ 200.062656][T12369] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.062702][T12369] nfnetlink_rcv+0x16b/0x1690 [ 200.062730][T12369] ? nlmon_xmit+0x4f/0x60 [ 200.062767][T12369] ? consume_skb+0x49/0x150 [ 200.062798][T12369] ? nlmon_xmit+0x4f/0x60 [ 200.062964][T12369] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 200.063005][T12369] ? __dev_queue_xmit+0x1200/0x2000 [ 200.063104][T12369] ? __dev_queue_xmit+0x182/0x2000 [ 200.063157][T12369] ? ref_tracker_free+0x37d/0x3e0 [ 200.063197][T12369] ? __netlink_deliver_tap+0x4dc/0x500 [ 200.063275][T12369] netlink_unicast+0x5bd/0x690 [ 200.063308][T12369] netlink_sendmsg+0x58b/0x6b0 [ 200.063400][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.063431][T12369] __sock_sendmsg+0x145/0x180 [ 200.063468][T12369] ____sys_sendmsg+0x31e/0x4e0 [ 200.063503][T12369] ___sys_sendmsg+0x17b/0x1d0 [ 200.063609][T12369] __x64_sys_sendmsg+0xd4/0x160 [ 200.063647][T12369] x64_sys_call+0x191e/0x2ff0 [ 200.063726][T12369] do_syscall_64+0xd2/0x200 [ 200.063762][T12369] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 200.063810][T12369] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.063845][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.063871][T12369] RIP: 0033:0x7f5bfa7bec29 [ 200.063889][T12369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.063922][T12369] RSP: 002b:00007f5bf9227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.063941][T12369] RAX: ffffffffffffffda RBX: 00007f5bfaa05fa0 RCX: 00007f5bfa7bec29 [ 200.063953][T12369] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 200.064029][T12369] RBP: 00007f5bfa841e41 R08: 0000000000000000 R09: 0000000000000000 [ 200.064042][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.064055][T12369] R13: 00007f5bfaa06038 R14: 00007f5bfaa05fa0 R15: 00007ffc80623d78 [ 200.064079][T12369] [ 200.064154][T12369] memory: usage 307200kB, limit 307200kB, failcnt 524 [ 200.183127][T12393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3123'. [ 200.186412][T12369] memory+swap: usage 324216kB, limit 9007199254740988kB, failcnt 0 [ 200.186432][T12369] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 200.192533][T12393] netlink: 'syz.0.3123': attribute type 7 has an invalid length. [ 200.197624][T12369] Memory cgroup stats for /syz3: [ 200.202363][T12393] netlink: 'syz.0.3123': attribute type 8 has an invalid length. [ 200.207424][ T5762] usb 7-1: enqueue for inactive port 0 [ 200.211743][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 200.220200][ T5762] usb 7-1: enqueue for inactive port 0 [ 200.220566][T12369] cache 0 [ 200.220577][T12369] rss 0 [ 200.220585][T12369] shmem 0 [ 200.220593][T12369] mapped_file 0 [ 200.220601][T12369] dirty 0 [ 200.220607][T12369] writeback 0 [ 200.220616][T12369] workingset_refault_anon 136 [ 200.220625][T12369] workingset_refault_file 1226 [ 200.220633][T12369] swap 17424384 [ 200.220699][T12369] swapcached 0 [ 200.516509][T12369] pgpgin 225912 [ 200.520039][T12369] pgpgout 225912 [ 200.523580][T12369] pgfault 235543 [ 200.527145][T12369] pgmajfault 69 [ 200.530623][T12369] inactive_anon 0 [ 200.534254][T12369] active_anon 0 [ 200.537926][T12369] inactive_file 0 [ 200.541575][T12369] active_file 0 [ 200.545024][T12369] unevictable 0 [ 200.548504][T12369] hierarchical_memory_limit 314572800 [ 200.553981][T12369] hierarchical_memsw_limit 9223372036854771712 [ 200.560244][T12369] total_cache 0 [ 200.563698][T12369] total_rss 0 [ 200.566978][T12369] total_shmem 0 [ 200.570471][T12369] total_mapped_file 0 [ 200.574462][T12369] total_dirty 0 [ 200.577920][T12369] total_writeback 0 [ 200.581749][T12369] total_workingset_refault_anon 136 [ 200.586941][T12369] total_workingset_refault_file 1226 [ 200.592246][T12369] total_swap 17424384 [ 200.596283][T12369] total_swapcached 0 [ 200.600304][T12369] total_pgpgin 225912 [ 200.604315][T12369] total_pgpgout 225912 [ 200.608404][T12369] total_pgfault 235543 [ 200.612464][T12369] total_pgmajfault 69 [ 200.616436][T12369] total_inactive_anon 0 [ 200.620636][T12369] total_active_anon 0 [ 200.624629][T12369] total_inactive_file 0 [ 200.628811][T12369] total_active_file 0 [ 200.632892][T12369] total_unevictable 0 [ 200.636866][T12369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3113,pid=12368,uid=0 [ 200.651756][T12369] Memory cgroup out of memory: Killed process 12368 (syz.3.3113) total-vm:95808kB, anon-rss:1076kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 200.669349][ T5762] vhci_hcd: vhci_device speed not set [ 200.790883][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 200.877734][T12424] hub 8-0:1.0: USB hub found [ 200.882634][T12424] hub 8-0:1.0: 8 ports detected [ 200.916882][T12426] lo speed is unknown, defaulting to 1000 [ 200.963032][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'. [ 200.991094][T12431] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 200.997734][T12431] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.005224][T12431] vhci_hcd vhci_hcd.0: Device attached [ 201.086068][T12441] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3139'. [ 201.117820][T12441] netlink: 'syz.0.3139': attribute type 9 has an invalid length. [ 201.256908][T12426] lo speed is unknown, defaulting to 1000 [ 201.414238][T12457] lo speed is unknown, defaulting to 1000 [ 201.538323][T12457] lo speed is unknown, defaulting to 1000 [ 201.632599][T12457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 201.639278][T12457] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.647527][T12457] vhci_hcd vhci_hcd.0: Device attached [ 201.838289][ T5750] vhci_hcd: vhci_device speed not set [ 201.874127][T12432] vhci_hcd: connection closed [ 201.874411][ T2337] vhci_hcd: stop threads [ 201.883584][ T2337] vhci_hcd: release socket [ 201.888838][ T2337] vhci_hcd: disconnect device [ 201.891898][T12467] IPv6: Can't replace route, no match found [ 201.908764][ T5750] usb 1-1: new full-speed USB device number 15 using vhci_hcd [ 201.946700][T12471] __nla_validate_parse: 3 callbacks suppressed [ 201.946720][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3149'. [ 202.014049][T12476] loop6: detected capacity change from 0 to 512 [ 202.050793][T12476] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3149: error while reading EA inode 32 err=-116 [ 202.065736][T12476] EXT4-fs (loop6): Remounting filesystem read-only [ 202.072428][T12476] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 202.090084][T12459] vhci_hcd: connection reset by peer [ 202.095477][ T2337] vhci_hcd: stop threads [ 202.095902][T12476] EXT4-fs (loop6): 1 orphan inode deleted [ 202.099995][ T2337] vhci_hcd: release socket [ 202.100012][ T2337] vhci_hcd: disconnect device [ 202.130316][T12476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.179244][T12476] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.345468][T12492] loop6: detected capacity change from 0 to 2048 [ 202.362561][T12495] sd 0:0:1:0: device reset [ 202.370117][T12492] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.398267][ T5765] usb 11-1: enqueue for inactive port 0 [ 202.406353][ T5765] usb 11-1: enqueue for inactive port 0 [ 202.478457][ T5765] vhci_hcd: vhci_device speed not set [ 202.575140][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 202.619520][T12513] lo speed is unknown, defaulting to 1000 [ 202.667284][T12535] sd 0:0:1:0: device reset [ 202.718461][T12513] lo speed is unknown, defaulting to 1000 [ 202.957759][T12554] lo speed is unknown, defaulting to 1000 [ 202.996538][T12558] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 203.003190][T12558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.010741][T12558] vhci_hcd vhci_hcd.0: Device attached [ 203.039254][ T5764] usb 3-1: enqueue for inactive port 0 [ 203.044765][ T5764] usb 3-1: enqueue for inactive port 0 [ 203.117146][T12569] lo speed is unknown, defaulting to 1000 [ 203.168875][ T5764] vhci_hcd: vhci_device speed not set [ 203.188181][ T5762] vhci_hcd: vhci_device speed not set [ 203.245211][T12571] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 203.251932][T12571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.259515][T12571] vhci_hcd vhci_hcd.0: Device attached [ 203.269936][ T5762] usb 13-1: new full-speed USB device number 8 using vhci_hcd [ 203.518659][ T5764] vhci_hcd: vhci_device speed not set [ 203.533685][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 203.533700][ T29] audit: type=1400 audit(203.512:12804): avc: denied { mount } for pid=12583 comm="syz.3.3190" name="/" dev="mqueue" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.645432][T12569] lo speed is unknown, defaulting to 1000 [ 203.677262][T12573] lo speed is unknown, defaulting to 1000 [ 203.678699][T12563] vhci_hcd: connection reset by peer [ 203.689363][ T2337] vhci_hcd: stop threads [ 203.693652][ T2337] vhci_hcd: release socket [ 203.698224][ T2337] vhci_hcd: disconnect device [ 203.714614][T12590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3192'. [ 203.752342][ T29] audit: type=1326 audit(203.712:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.775575][ T29] audit: type=1326 audit(203.712:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.798667][ T29] audit: type=1326 audit(203.712:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.821766][ T29] audit: type=1326 audit(203.712:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.844771][ T29] audit: type=1326 audit(203.726:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.867884][ T29] audit: type=1326 audit(203.726:12810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.890737][ T29] audit: type=1326 audit(203.726:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.913886][ T29] audit: type=1326 audit(203.726:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.937620][ T29] audit: type=1326 audit(203.726:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 203.968927][T12574] vhci_hcd: connection closed [ 203.969036][T12576] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 204.130234][ T2337] vhci_hcd: stop threads [ 204.134576][ T2337] vhci_hcd: release socket [ 204.139109][ T2337] vhci_hcd: disconnect device [ 204.173044][T12554] lo speed is unknown, defaulting to 1000 [ 204.235435][T12594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3193'. [ 204.273604][T12573] lo speed is unknown, defaulting to 1000 [ 204.338217][T12603] SELinux: failed to load policy [ 204.564231][T12623] unsupported nla_type 52263 [ 204.606095][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3209'. [ 204.679218][T12637] futex_wake_op: syz.6.3213 tries to shift op by -1; fix this program [ 204.813771][ T5765] hid_parser_main: 8 callbacks suppressed [ 204.813792][ T5765] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 204.827228][ T5765] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 204.834869][ T5765] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 204.864261][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3225'. [ 204.867740][ T5765] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 204.889840][T12661] loop6: detected capacity change from 0 to 512 [ 204.901035][T12661] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3225: error while reading EA inode 32 err=-116 [ 204.913744][T12661] EXT4-fs (loop6): Remounting filesystem read-only [ 204.920363][T12661] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 204.932251][T12661] EXT4-fs (loop6): 1 orphan inode deleted [ 204.938990][T12661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.953261][T12661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.151343][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3232'. [ 205.296455][T12682] lo speed is unknown, defaulting to 1000 [ 205.356321][T12682] lo speed is unknown, defaulting to 1000 [ 205.419982][T12689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.464165][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 205.489036][T12694] lo speed is unknown, defaulting to 1000 [ 205.568786][T12694] lo speed is unknown, defaulting to 1000 [ 205.719840][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 206.011307][T12726] loop6: detected capacity change from 0 to 8192 [ 206.031948][T12738] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3260'. [ 206.321959][T12770] lo speed is unknown, defaulting to 1000 [ 206.352756][T12769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 206.359427][T12769] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 206.366973][T12769] vhci_hcd vhci_hcd.0: Device attached [ 206.726306][T12770] lo speed is unknown, defaulting to 1000 [ 206.751746][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3275'. [ 206.838663][T12783] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 206.896427][T12788] lo speed is unknown, defaulting to 1000 [ 207.009101][T12771] vhci_hcd: connection closed [ 207.010066][ T2337] vhci_hcd: stop threads [ 207.019119][ T2337] vhci_hcd: release socket [ 207.023668][ T2337] vhci_hcd: disconnect device [ 207.033946][T12792] lo speed is unknown, defaulting to 1000 [ 207.151895][T12792] lo speed is unknown, defaulting to 1000 [ 207.247771][T12793] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 207.254429][T12793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.262082][T12793] vhci_hcd vhci_hcd.0: Device attached [ 207.403330][ T5750] usb 1-1: enqueue for inactive port 0 [ 207.409228][ T5750] usb 1-1: enqueue for inactive port 0 [ 207.448543][ T5761] vhci_hcd: vhci_device speed not set [ 207.470146][T12788] lo speed is unknown, defaulting to 1000 [ 207.488179][ T5750] vhci_hcd: vhci_device speed not set [ 207.509047][ T5761] usb 11-1: new full-speed USB device number 10 using vhci_hcd [ 207.691869][T12795] vhci_hcd: connection reset by peer [ 207.701205][ T4946] vhci_hcd: stop threads [ 207.705485][ T4946] vhci_hcd: release socket [ 207.709986][ T4946] vhci_hcd: disconnect device [ 208.046450][T12835] lo speed is unknown, defaulting to 1000 [ 208.128670][T12835] lo speed is unknown, defaulting to 1000 [ 208.128849][T12839] __nla_validate_parse: 1 callbacks suppressed [ 208.128866][T12839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3298'. [ 208.308666][T12842] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 208.315307][T12842] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.322912][T12842] vhci_hcd vhci_hcd.0: Device attached [ 208.583875][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3296'. [ 208.640858][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 208.640878][ T29] audit: type=1400 audit(208.624:13289): avc: denied { write } for pid=12852 comm="syz.1.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 208.702748][ T29] audit: type=1326 audit(208.624:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.725931][ T29] audit: type=1326 audit(208.624:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.749208][ T29] audit: type=1326 audit(208.624:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.772348][ T29] audit: type=1326 audit(208.624:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.795762][ T29] audit: type=1326 audit(208.634:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.818848][ T29] audit: type=1326 audit(208.634:13295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.842187][ T29] audit: type=1326 audit(208.634:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.865352][ T29] audit: type=1326 audit(208.634:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.888500][ T29] audit: type=1326 audit(208.634:13298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.3.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 208.923552][T12843] vhci_hcd: connection reset by peer [ 208.930716][ T1957] vhci_hcd: stop threads [ 208.935122][ T1957] vhci_hcd: release socket [ 208.939724][ T1957] vhci_hcd: disconnect device [ 208.980379][T12876] netlink: 'syz.0.3312': attribute type 21 has an invalid length. [ 208.989617][T12876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3312'. [ 209.038228][ T5764] usb 3-1: enqueue for inactive port 0 [ 209.044025][ T5764] usb 3-1: enqueue for inactive port 0 [ 209.087551][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 209.118304][ T5764] vhci_hcd: vhci_device speed not set [ 209.180979][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3325'. [ 209.235706][T12896] lo speed is unknown, defaulting to 1000 [ 209.292901][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3331'. [ 209.346519][T12896] lo speed is unknown, defaulting to 1000 [ 209.400993][T12925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3333'. [ 209.521162][T12936] loop6: detected capacity change from 0 to 8192 [ 209.529326][T12936] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.566177][T12936] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 209.575727][T12936] FAT-fs (loop6): Filesystem has been set read-only [ 209.583973][T12945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3342'. [ 209.676693][T12949] lo speed is unknown, defaulting to 1000 [ 209.755916][T12949] lo speed is unknown, defaulting to 1000 [ 209.854132][T12959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3346'. [ 209.914694][T12957] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 209.921362][T12957] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 209.928899][T12957] vhci_hcd vhci_hcd.0: Device attached [ 210.108466][ T5763] vhci_hcd: vhci_device speed not set [ 210.172786][ T5763] usb 7-1: new full-speed USB device number 15 using vhci_hcd [ 210.352413][T12984] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 210.369419][T12987] loop6: detected capacity change from 0 to 128 [ 210.388550][T12987] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.450230][ T4860] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.500851][T13009] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 210.509978][T13009] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 210.517119][T12958] vhci_hcd: connection reset by peer [ 210.524897][ T1957] vhci_hcd: stop threads [ 210.529222][ T1957] vhci_hcd: release socket [ 210.533660][ T1957] vhci_hcd: disconnect device [ 210.606638][T13016] loop6: detected capacity change from 0 to 1024 [ 210.634040][T13018] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3369'. [ 210.881129][T13036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.592050][T13061] lo speed is unknown, defaulting to 1000 [ 211.637146][T13062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 211.643874][T13062] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.651353][T13062] vhci_hcd vhci_hcd.0: Device attached [ 211.699910][T13061] lo speed is unknown, defaulting to 1000 [ 211.754333][T13072] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 211.940509][T13086] lo speed is unknown, defaulting to 1000 [ 212.058085][T13086] lo speed is unknown, defaulting to 1000 [ 212.321579][T13109] loop0: detected capacity change from 0 to 2048 [ 212.361777][T13109] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.374311][T13063] vhci_hcd: connection closed [ 212.376994][ T70] vhci_hcd: stop threads [ 212.377008][ T70] vhci_hcd: release socket [ 212.377023][ T70] vhci_hcd: disconnect device [ 212.404875][T13115] loop6: detected capacity change from 0 to 8192 [ 212.427303][T13109] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3405: bg 0: block 120: padding at end of block bitmap is not set [ 212.504606][T13122] lo speed is unknown, defaulting to 1000 [ 212.587855][T13122] lo speed is unknown, defaulting to 1000 [ 212.614107][ T5761] usb 11-1: enqueue for inactive port 0 [ 212.637413][ T5761] usb 11-1: enqueue for inactive port 0 [ 212.678064][T13134] netlink: 'syz.1.3412': attribute type 21 has an invalid length. [ 212.687134][T13134] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 212.708169][ T5761] vhci_hcd: vhci_device speed not set [ 212.759987][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 212.993597][T13153] team0: Port device team_slave_0 removed [ 213.100068][T13165] netlink: 'syz.0.3425': attribute type 10 has an invalid length. [ 213.130631][T13158] lo speed is unknown, defaulting to 1000 [ 213.193655][T13163] lo speed is unknown, defaulting to 1000 [ 213.233407][T13158] lo speed is unknown, defaulting to 1000 [ 213.339113][T13180] loop0: detected capacity change from 0 to 128 [ 213.352720][T13163] lo speed is unknown, defaulting to 1000 [ 213.424114][T13182] loop6: detected capacity change from 0 to 2048 [ 213.446212][T13189] IPVS: Error connecting to the multicast addr [ 213.468881][T13182] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.582484][T13196] __nla_validate_parse: 15 callbacks suppressed [ 213.582580][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3437'. [ 213.667023][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 213.667037][ T29] audit: type=1326 audit(213.642:13905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13190 comm="syz.1.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x50000 [ 213.709444][T13182] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3432: bg 0: block 120: padding at end of block bitmap is not set [ 213.894347][ T29] audit: type=1326 audit(213.682:13906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13190 comm="syz.1.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9adc7eec29 code=0x50000 [ 213.917239][ T29] audit: type=1400 audit(213.862:13907): avc: denied { write } for pid=13203 comm="syz.5.3439" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.917797][T13205] loop0: detected capacity change from 0 to 1024 [ 213.998690][ T5762] usb 13-1: enqueue for inactive port 0 [ 214.055900][T13205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.068231][ T5762] vhci_hcd: vhci_device speed not set [ 214.109816][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 214.124763][T13205] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 214.137635][ T29] audit: type=1400 audit(214.102:13908): avc: denied { remount } for pid=13200 comm="syz.0.3438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.233653][ T29] audit: type=1326 audit(214.182:13909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 214.236831][T13219] geneve2: entered promiscuous mode [ 214.256865][ T29] audit: type=1326 audit(214.182:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 214.256900][ T29] audit: type=1326 audit(214.182:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 214.256927][ T29] audit: type=1326 audit(214.182:13912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 214.333066][T13219] geneve2: entered allmulticast mode [ 214.341410][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.350977][ T29] audit: type=1400 audit(214.322:13913): avc: denied { connect } for pid=13221 comm="syz.1.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.370598][ T29] audit: type=1400 audit(214.332:13914): avc: denied { write } for pid=13221 comm="syz.1.3447" laddr=fe80::11 lport=27 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.504295][T13230] loop0: detected capacity change from 0 to 2048 [ 214.540672][T13234] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.548596][T13230] EXT4-fs: dax option not supported [ 214.552501][T13234] vhci_hcd: invalid port number 253 [ 214.562983][T13241] loop6: detected capacity change from 0 to 128 [ 214.587978][T13241] syz.6.3456: attempt to access beyond end of device [ 214.587978][T13241] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 214.682074][T13247] lo speed is unknown, defaulting to 1000 [ 214.797645][T13247] lo speed is unknown, defaulting to 1000 [ 214.901617][T13247] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 214.908266][T13247] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.915927][T13247] vhci_hcd vhci_hcd.0: Device attached [ 214.960002][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3460'. [ 215.086791][T13254] loop6: detected capacity change from 0 to 512 [ 215.098692][ T5760] vhci_hcd: vhci_device speed not set [ 215.128641][T13254] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3460: error while reading EA inode 32 err=-116 [ 215.159506][ T5760] usb 3-1: new full-speed USB device number 14 using vhci_hcd [ 215.176797][T13254] EXT4-fs (loop6): Remounting filesystem read-only [ 215.183459][T13254] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 215.221774][T13254] EXT4-fs (loop6): 1 orphan inode deleted [ 215.233239][T13254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.249986][T13254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.278291][ T5763] usb 7-1: enqueue for inactive port 0 [ 215.293812][T13273] netlink: 'syz.0.3468': attribute type 10 has an invalid length. [ 215.303262][ T5763] usb 7-1: enqueue for inactive port 0 [ 215.308054][T13273] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.362262][T13279] loop0: detected capacity change from 0 to 2048 [ 215.379893][T13279] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.391488][T13249] vhci_hcd: connection reset by peer [ 215.397874][ T2337] vhci_hcd: stop threads [ 215.398032][ T5763] vhci_hcd: vhci_device speed not set [ 215.402226][ T2337] vhci_hcd: release socket [ 215.412067][ T2337] vhci_hcd: disconnect device [ 215.423768][T13279] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3471: bg 0: block 120: padding at end of block bitmap is not set [ 215.458025][T13279] bond0: (slave dummy0): Releasing backup interface [ 215.519234][T13288] lo speed is unknown, defaulting to 1000 [ 215.637052][T13288] lo speed is unknown, defaulting to 1000 [ 215.711780][T13288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 215.718455][T13288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.726657][T13288] vhci_hcd vhci_hcd.0: Device attached [ 215.736852][T13295] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 215.743624][T13295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.751222][T13295] vhci_hcd vhci_hcd.0: Device attached [ 215.800681][T13298] lo speed is unknown, defaulting to 1000 [ 215.930025][ T5764] vhci_hcd: vhci_device speed not set [ 215.977673][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 215.981470][T13289] lo speed is unknown, defaulting to 1000 [ 215.993562][ T5764] usb 13-1: new full-speed USB device number 9 using vhci_hcd [ 216.047573][T13303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3477'. [ 216.081993][T13303] netem: change failed [ 216.147078][T13305] loop0: detected capacity change from 0 to 2048 [ 216.151811][T13289] lo speed is unknown, defaulting to 1000 [ 216.173258][ T5763] vhci_hcd: vhci_device speed not set [ 216.202069][T13293] vhci_hcd: connection closed [ 216.202310][ T2337] vhci_hcd: stop threads [ 216.211379][ T2337] vhci_hcd: release socket [ 216.213067][T13305] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.215820][ T2337] vhci_hcd: disconnect device [ 216.240869][T13296] vhci_hcd: connection reset by peer [ 216.247984][T13305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3475: bg 0: block 120: padding at end of block bitmap is not set [ 216.263879][ T2337] vhci_hcd: stop threads [ 216.268292][ T2337] vhci_hcd: release socket [ 216.272741][ T2337] vhci_hcd: disconnect device [ 216.273628][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3479'. [ 216.277460][T13298] lo speed is unknown, defaulting to 1000 [ 216.348167][ T5763] usb 7-1: enqueue for inactive port 0 [ 216.353698][ T5763] usb 7-1: enqueue for inactive port 0 [ 216.366160][ T5763] usb 7-1: enqueue for inactive port 0 [ 216.382640][T13317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3480'. [ 216.438177][ T5763] vhci_hcd: vhci_device speed not set [ 216.483531][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 216.550250][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 216.573909][T13326] loop0: detected capacity change from 0 to 512 [ 216.590961][T13326] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3484: error while reading EA inode 32 err=-116 [ 216.628750][T13326] EXT4-fs (loop0): Remounting filesystem read-only [ 216.635329][T13326] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 216.649467][T13331] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 216.660047][T13326] EXT4-fs (loop0): 1 orphan inode deleted [ 216.666452][T13326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.752260][T13326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.764389][T13337] netlink: 'syz.3.3489': attribute type 19 has an invalid length. [ 216.772401][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 216.803682][T13337] netlink: 'syz.3.3489': attribute type 19 has an invalid length. [ 216.811604][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 216.828443][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.845952][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.879125][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.887406][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.001933][T13349] lo speed is unknown, defaulting to 1000 [ 217.096945][T13349] lo speed is unknown, defaulting to 1000 [ 217.169877][T13362] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 217.202976][T13364] loop6: detected capacity change from 0 to 512 [ 217.226630][T13368] loop0: detected capacity change from 0 to 2048 [ 217.237393][T13364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.274084][T13368] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.337076][T13378] lo speed is unknown, defaulting to 1000 [ 217.459711][T13378] lo speed is unknown, defaulting to 1000 [ 217.524526][T13378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 217.531169][T13378] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 217.539469][T13378] vhci_hcd vhci_hcd.0: Device attached [ 217.655482][T13368] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3501: bg 0: block 120: padding at end of block bitmap is not set [ 217.775805][ T4860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.890398][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 217.925500][T13399] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.972682][T13408] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 218.052189][T13380] vhci_hcd: connection closed [ 218.052467][ T12] vhci_hcd: stop threads [ 218.061840][ T12] vhci_hcd: release socket [ 218.066306][ T12] vhci_hcd: disconnect device [ 218.092245][T13409] lo speed is unknown, defaulting to 1000 [ 218.114993][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3519'. [ 218.130739][T13422] loop6: detected capacity change from 0 to 512 [ 218.143351][T13422] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3519: error while reading EA inode 32 err=-116 [ 218.157509][T13422] EXT4-fs (loop6): Remounting filesystem read-only [ 218.158983][T13424] loop3: detected capacity change from 32768 to 64 [ 218.164237][T13422] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 218.181652][T13422] EXT4-fs (loop6): 1 orphan inode deleted [ 218.191782][T13422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.225213][T13422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.260564][T13409] lo speed is unknown, defaulting to 1000 [ 218.347762][T13445] loop6: detected capacity change from 0 to 256 [ 218.634461][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3540'. [ 218.671848][T13472] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3541'. [ 218.681649][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 218.681666][ T29] audit: type=1326 audit(218.665:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.1.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.749901][T13477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3544'. [ 218.753750][ T29] audit: type=1326 audit(218.695:14133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.1.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.782827][ T29] audit: type=1326 audit(218.695:14134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.1.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.784540][T13477] loop0: detected capacity change from 0 to 512 [ 218.805937][ T29] audit: type=1326 audit(218.695:14135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.1.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.836404][ T29] audit: type=1326 audit(218.745:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.860297][ T29] audit: type=1326 audit(218.745:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.883433][ T29] audit: type=1326 audit(218.745:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.907394][ T29] audit: type=1326 audit(218.745:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.931298][ T29] audit: type=1326 audit(218.745:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.954425][ T29] audit: type=1326 audit(218.745:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adc7eec29 code=0x7ffc0000 [ 218.979572][T13477] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3544: error while reading EA inode 32 err=-116 [ 218.998875][T13477] EXT4-fs (loop0): Remounting filesystem read-only [ 219.005714][T13477] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 219.023244][T13477] EXT4-fs (loop0): 1 orphan inode deleted [ 219.043532][T13485] loop6: detected capacity change from 0 to 2048 [ 219.051106][T13477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.064890][T13477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.076322][T13485] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.093007][T13485] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3547: bg 0: block 120: padding at end of block bitmap is not set [ 219.296348][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 219.454122][T13515] lo speed is unknown, defaulting to 1000 [ 219.609353][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3564'. [ 219.626665][T13515] lo speed is unknown, defaulting to 1000 [ 219.771960][T13544] lo speed is unknown, defaulting to 1000 [ 219.893512][T13544] lo speed is unknown, defaulting to 1000 [ 219.937486][T13564] atomic_op ffff88810afc5528 conn xmit_atomic 0000000000000000 [ 219.979057][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 220.120809][T13581] wireguard3: entered promiscuous mode [ 220.126535][T13581] wireguard3: entered allmulticast mode [ 220.238253][ T5760] usb 3-1: enqueue for inactive port 0 [ 220.250873][ T5760] usb 3-1: enqueue for inactive port 0 [ 220.318750][ T5760] vhci_hcd: vhci_device speed not set [ 220.813811][T13602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 220.820455][T13602] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.828032][T13602] vhci_hcd vhci_hcd.0: Device attached [ 221.168364][ T5764] usb 13-1: enqueue for inactive port 0 [ 221.173985][ T5764] usb 13-1: enqueue for inactive port 0 [ 221.298401][ T5763] vhci_hcd: vhci_device speed not set [ 221.304213][ T5764] vhci_hcd: vhci_device speed not set [ 221.428075][ T5763] usb 1-1: new full-speed USB device number 16 using vhci_hcd [ 221.435861][T13603] vhci_hcd: connection closed [ 221.436350][ T12] vhci_hcd: stop threads [ 221.445445][ T12] vhci_hcd: release socket [ 221.449940][ T12] vhci_hcd: disconnect device [ 221.559308][T13606] loop6: detected capacity change from 0 to 8192 [ 221.567998][T13601] lo speed is unknown, defaulting to 1000 [ 221.633845][T13601] lo speed is unknown, defaulting to 1000 [ 221.754441][T13625] lo speed is unknown, defaulting to 1000 [ 221.872365][T13625] lo speed is unknown, defaulting to 1000 [ 221.979471][T13625] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 221.986125][T13625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.993638][T13625] vhci_hcd vhci_hcd.0: Device attached [ 222.178882][ T5747] vhci_hcd: vhci_device speed not set [ 222.205716][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 222.249020][ T5747] usb 11-1: new full-speed USB device number 11 using vhci_hcd [ 222.316446][T13642] loop0: detected capacity change from 0 to 2048 [ 222.341206][T13642] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.365946][T13642] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3607: bg 0: block 120: padding at end of block bitmap is not set [ 222.381368][T13656] loop6: detected capacity change from 0 to 512 [ 222.408829][T13656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.442568][T13656] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3611: corrupted xattr block 19: overlapping e_value [ 222.457577][T13656] EXT4-fs (loop6): Remounting filesystem read-only [ 222.464268][T13656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.473386][T13627] vhci_hcd: connection reset by peer [ 222.480066][T13656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.489447][ T12] vhci_hcd: stop threads [ 222.489920][T13656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.493751][ T12] vhci_hcd: release socket [ 222.493769][ T12] vhci_hcd: disconnect device [ 222.532677][ T4860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.564559][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 222.583016][T13669] IPv4: Oversized IP packet from 127.202.26.0 [ 222.828338][T13691] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 222.835069][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 222.842547][T13691] vhci_hcd vhci_hcd.0: Device attached [ 223.090474][ T5764] vhci_hcd: vhci_device speed not set [ 223.167496][ T5764] usb 13-1: new full-speed USB device number 10 using vhci_hcd [ 223.198056][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3627'. [ 223.237265][T13702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 223.243985][T13702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.252282][T13702] vhci_hcd vhci_hcd.0: Device attached [ 223.294353][T13709] IPv4: Oversized IP packet from 127.202.26.0 [ 223.330032][T13699] lo speed is unknown, defaulting to 1000 [ 223.443662][T13714] lo speed is unknown, defaulting to 1000 [ 223.450167][ T9] vhci_hcd: vhci_device speed not set [ 223.466008][T13715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3631'. [ 223.512414][T13692] vhci_hcd: connection reset by peer [ 223.519850][ T1957] vhci_hcd: stop threads [ 223.524162][ T1957] vhci_hcd: release socket [ 223.528631][ T1957] vhci_hcd: disconnect device [ 223.541612][T13716] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 223.548416][T13716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.556654][T13716] vhci_hcd vhci_hcd.0: Device attached [ 223.565622][ T9] usb 3-1: new full-speed USB device number 15 using vhci_hcd [ 223.683326][T13714] lo speed is unknown, defaulting to 1000 [ 224.066792][T13723] tipc: New replicast peer: dc02:0000:0000:0000:0000:0000:0000:0000 [ 224.074923][T13723] tipc: Enabled bearer , priority 7 [ 224.084240][T13703] vhci_hcd: connection reset by peer [ 224.095907][ T12] vhci_hcd: stop threads [ 224.100224][ T12] vhci_hcd: release socket [ 224.104756][ T12] vhci_hcd: disconnect device [ 224.126071][T13699] lo speed is unknown, defaulting to 1000 [ 224.157207][T13717] vhci_hcd: connection closed [ 224.157474][ T12] vhci_hcd: stop threads [ 224.166466][ T12] vhci_hcd: release socket [ 224.170968][ T12] vhci_hcd: disconnect device [ 224.198279][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 224.198302][ T29] audit: type=1404 audit(224.177:14349): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 224.250797][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3640'. [ 224.275123][ T29] audit: type=1400 audit(224.187:14350): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 224.298728][ T29] audit: type=1400 audit(224.217:14351): avc: denied { prog_load } for pid=13738 comm="syz.6.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 224.305300][T13739] loop6: detected capacity change from 0 to 512 [ 224.317422][ T29] audit: type=1404 audit(224.217:14352): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 224.338146][ T29] audit: type=1400 audit(224.217:14353): avc: denied { map_create } for pid=13737 comm="syz.0.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.357821][ T29] audit: type=1400 audit(224.217:14354): avc: denied { map_read map_write } for pid=13737 comm="syz.0.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.377375][ T29] audit: type=1400 audit(224.217:14355): avc: denied { bpf } for pid=13738 comm="syz.6.3640" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.398717][ T29] audit: type=1400 audit(224.217:14356): avc: denied { prog_load } for pid=13737 comm="syz.0.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.403096][T13739] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3640: error while reading EA inode 32 err=-116 [ 224.417472][ T29] audit: type=1400 audit(224.217:14357): avc: denied { perfmon } for pid=13737 comm="syz.0.3641" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.450997][ T29] audit: type=1400 audit(224.217:14358): avc: denied { prog_run } for pid=13737 comm="syz.0.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.470618][T13739] EXT4-fs (loop6): Remounting filesystem read-only [ 224.477250][T13739] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 224.488944][T13739] EXT4-fs (loop6): 1 orphan inode deleted [ 224.495725][T13739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.509757][T13739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.541603][T13745] loop0: detected capacity change from 0 to 1024 [ 224.568229][T13748] ALSA: seq fatal error: cannot create timer (-22) [ 224.586342][T13745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.643644][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.682942][T13757] lo speed is unknown, defaulting to 1000 [ 224.716328][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3648'. [ 224.731496][T13761] loop0: detected capacity change from 0 to 512 [ 224.740601][T13761] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3648: error while reading EA inode 32 err=-116 [ 224.795911][T13761] EXT4-fs (loop0): Remounting filesystem read-only [ 224.803025][T13761] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 224.813290][T13761] EXT4-fs (loop0): 1 orphan inode deleted [ 224.829217][T13761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.854031][T13766] blktrace: Concurrent blktraces are not allowed on sg0 [ 224.901642][T13757] lo speed is unknown, defaulting to 1000 [ 224.933370][T13761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.024677][T13771] loop6: detected capacity change from 0 to 2048 [ 225.051950][T13769] lo speed is unknown, defaulting to 1000 [ 225.068990][T13771] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.102145][T13771] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3652: bg 0: block 120: padding at end of block bitmap is not set [ 225.169905][T13769] lo speed is unknown, defaulting to 1000 [ 225.230090][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.247248][T13784] lo speed is unknown, defaulting to 1000 [ 225.250703][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.341858][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 225.466578][T13808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.474561][T13784] lo speed is unknown, defaulting to 1000 [ 225.505326][T13813] loop6: detected capacity change from 0 to 1024 [ 225.537866][T13813] EXT4-fs: Ignoring removed oldalloc option [ 225.543907][T13813] EXT4-fs: Ignoring removed bh option [ 225.595713][T13821] can0: slcan on ttyS3. [ 225.602992][T13813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.615730][T13816] loop0: detected capacity change from 0 to 8192 [ 225.628474][T13813] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3665: Allocating blocks 497-513 which overlap fs metadata [ 225.645209][T13813] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 257:freeing already freed block (bit 16); block bitmap corrupt. [ 225.672444][ T4860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.681662][T13821] can0 (unregistered): slcan off ttyS3. [ 225.696764][T13824] can0: slcan on ttyS3. [ 225.737564][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3673'. [ 225.746701][T13820] can0 (unregistered): slcan off ttyS3. [ 225.753663][T13830] loop6: detected capacity change from 0 to 512 [ 225.771094][T13830] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3673: error while reading EA inode 32 err=-116 [ 225.784502][T13830] EXT4-fs (loop6): Remounting filesystem read-only [ 225.791194][T13830] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 225.801591][T13830] EXT4-fs (loop6): 1 orphan inode deleted [ 225.807702][T13830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.822057][T13832] loop0: detected capacity change from 0 to 8192 [ 225.829138][T13830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.984362][T13847] lo speed is unknown, defaulting to 1000 [ 226.123179][T13847] lo speed is unknown, defaulting to 1000 [ 226.135293][T13868] SELinux: failed to load policy [ 226.157555][T13866] hub 2-0:1.0: USB hub found [ 226.162614][T13866] hub 2-0:1.0: 8 ports detected [ 226.273971][T13887] random: crng reseeded on system resumption [ 226.320802][T13888] lo speed is unknown, defaulting to 1000 [ 226.434068][T13888] lo speed is unknown, defaulting to 1000 [ 227.123859][T13909] SELinux: failed to load policy [ 227.278255][ T5747] usb 11-1: enqueue for inactive port 0 [ 227.295796][ T5747] usb 11-1: enqueue for inactive port 0 [ 227.359074][ T5763] usb 1-1: enqueue for inactive port 0 [ 227.364640][ T5763] usb 1-1: enqueue for inactive port 0 [ 227.379292][ T5747] vhci_hcd: vhci_device speed not set [ 227.449005][ T5763] vhci_hcd: vhci_device speed not set [ 227.840584][T13938] lo speed is unknown, defaulting to 1000 [ 227.927263][T13938] lo speed is unknown, defaulting to 1000 [ 228.002816][T13959] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3721'. [ 228.018687][T13959] loop6: detected capacity change from 0 to 512 [ 228.029299][T13959] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3721: error while reading EA inode 32 err=-116 [ 228.042396][T13959] EXT4-fs (loop6): Remounting filesystem read-only [ 228.049003][T13959] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 228.059191][T13959] EXT4-fs (loop6): 1 orphan inode deleted [ 228.065523][T13959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.078531][T13959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.098483][T13957] lo speed is unknown, defaulting to 1000 [ 228.207815][T13957] lo speed is unknown, defaulting to 1000 [ 228.226225][T13974] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3727'. [ 228.240613][T13974] loop6: detected capacity change from 0 to 512 [ 228.248490][ T5764] usb 13-1: enqueue for inactive port 0 [ 228.254203][ T5764] usb 13-1: enqueue for inactive port 0 [ 228.255249][T13974] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3727: error while reading EA inode 32 err=-116 [ 228.290184][T13974] EXT4-fs (loop6): Remounting filesystem read-only [ 228.296748][T13974] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 228.307331][T13974] EXT4-fs (loop6): 1 orphan inode deleted [ 228.313565][T13974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.328134][ T5764] vhci_hcd: vhci_device speed not set [ 228.339886][T13974] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.360740][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3731'. [ 228.383376][T13986] loop0: detected capacity change from 0 to 1024 [ 228.423271][T13986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.446382][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3734'. [ 228.519888][T13986] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3732: Allocating blocks 449-513 which overlap fs metadata [ 228.537125][T13985] EXT4-fs (loop0): pa ffff8881071ca540: logic 48, phys. 177, len 21 [ 228.545349][T13985] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 228.560077][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3739'. [ 228.570616][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.605586][T14007] loop0: detected capacity change from 0 to 512 [ 228.716149][T14007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.732191][T14015] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 228.738976][T14015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 228.746444][T14015] vhci_hcd vhci_hcd.0: Device attached [ 228.801114][T14007] EXT4-fs (loop0): 1 truncate cleaned up [ 228.819134][ T9] usb 3-1: enqueue for inactive port 0 [ 228.837516][T14007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.863040][T14018] lo speed is unknown, defaulting to 1000 [ 228.888715][ T9] usb 3-1: enqueue for inactive port 0 [ 228.978153][ T5747] vhci_hcd: vhci_device speed not set [ 228.988214][ T9] vhci_hcd: vhci_device speed not set [ 229.038169][ T5747] usb 11-1: new full-speed USB device number 12 using vhci_hcd [ 229.082450][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.125772][T14018] lo speed is unknown, defaulting to 1000 [ 229.136888][T14023] loop0: detected capacity change from 0 to 1024 [ 229.144019][T14023] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.174339][T14023] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.3745: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.188661][T14023] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3745: Failed to acquire dquot type 0 [ 229.209053][T14023] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.3745: Freeing blocks not in datazone - block = 0, count = 4096 [ 229.223909][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3746'. [ 229.234302][T14023] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3745: Invalid inode bitmap blk 0 in block_group 0 [ 229.248319][ T4946] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.264279][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 229.264296][ T29] audit: type=1326 audit(229.249:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.270939][ T4946] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 229.294097][ T29] audit: type=1326 audit(229.249:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.303507][ T4946] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 229.325648][ T29] audit: type=1326 audit(229.249:14881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.360197][ T29] audit: type=1326 audit(229.249:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.381094][T14016] vhci_hcd: connection reset by peer [ 229.383444][ T29] audit: type=1326 audit(229.256:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.411832][ T29] audit: type=1326 audit(229.256:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.434895][ T29] audit: type=1326 audit(229.256:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.435902][ T4946] vhci_hcd: stop threads [ 229.458004][ T29] audit: type=1326 audit(229.256:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.458101][ T29] audit: type=1326 audit(229.256:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 229.487020][T14023] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 229.509827][ T4946] vhci_hcd: release socket [ 229.522121][ T4946] vhci_hcd: disconnect device [ 229.537790][T14023] EXT4-fs (loop0): 1 orphan inode deleted [ 229.550749][T14023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.568962][T14029] loop6: detected capacity change from 0 to 2048 [ 229.586751][T14029] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.611479][T14023] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.628770][T14035] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 229.635322][T14035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.636641][T14029] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3747: bg 0: block 120: padding at end of block bitmap is not set [ 229.642895][T14035] vhci_hcd vhci_hcd.0: Device attached [ 229.682071][T14036] vhci_hcd: connection closed [ 229.682188][ T2337] vhci_hcd: stop threads [ 229.691327][ T2337] vhci_hcd: release socket [ 229.695801][ T2337] vhci_hcd: disconnect device [ 229.748046][T14048] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.810733][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 230.117576][T14070] lo speed is unknown, defaulting to 1000 [ 230.180641][T14070] lo speed is unknown, defaulting to 1000 [ 230.223709][T14072] syzkaller0: entered promiscuous mode [ 230.229344][T14072] syzkaller0: entered allmulticast mode [ 230.237865][T14075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.290801][T14077] SELinux: ebitmap: truncated map [ 230.305862][T14077] SELinux: failed to load policy [ 230.713663][T14104] lo speed is unknown, defaulting to 1000 [ 230.764776][T14110] loop6: detected capacity change from 0 to 2048 [ 230.781755][T14110] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.796163][T14115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3777'. [ 230.801103][T14104] lo speed is unknown, defaulting to 1000 [ 230.822140][T14110] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3776: bg 0: block 120: padding at end of block bitmap is not set [ 230.951539][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 231.154727][T14133] lo speed is unknown, defaulting to 1000 [ 231.265732][T14133] lo speed is unknown, defaulting to 1000 [ 231.320615][T14154] netlink: 'syz.6.3792': attribute type 1 has an invalid length. [ 231.329242][T14154] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3792'. [ 231.403189][T14166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.418625][T14166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.419094][T14169] netlink: 'syz.6.3799': attribute type 40 has an invalid length. [ 231.570731][T14183] lo speed is unknown, defaulting to 1000 [ 231.610724][T14181] lo speed is unknown, defaulting to 1000 [ 231.640699][T14185] lo speed is unknown, defaulting to 1000 [ 231.703950][T14183] lo speed is unknown, defaulting to 1000 [ 231.710743][T14186] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 231.717621][T14186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.725129][T14186] vhci_hcd vhci_hcd.0: Device attached [ 231.841642][T14192] lo speed is unknown, defaulting to 1000 [ 231.908972][T14181] lo speed is unknown, defaulting to 1000 [ 231.919162][ T9] vhci_hcd: vhci_device speed not set [ 231.969922][T14185] lo speed is unknown, defaulting to 1000 [ 232.018830][ T9] usb 13-1: new full-speed USB device number 11 using vhci_hcd [ 232.248149][T14214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3815'. [ 232.301658][T14214] loop0: detected capacity change from 0 to 512 [ 232.345850][T14214] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3815: error while reading EA inode 32 err=-116 [ 232.375333][T14187] vhci_hcd: connection reset by peer [ 232.382077][ T2337] vhci_hcd: stop threads [ 232.386475][ T2337] vhci_hcd: release socket [ 232.391866][ T2337] vhci_hcd: disconnect device [ 232.412227][T14214] EXT4-fs (loop0): Remounting filesystem read-only [ 232.419573][T14214] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 232.447879][T14214] EXT4-fs (loop0): 1 orphan inode deleted [ 232.454160][T14192] lo speed is unknown, defaulting to 1000 [ 232.454563][T14214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.473876][T14214] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.694323][T14229] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3820'. [ 233.064007][T14263] lo speed is unknown, defaulting to 1000 [ 233.131159][T14263] lo speed is unknown, defaulting to 1000 [ 233.219328][T14263] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 233.226048][T14263] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 233.233574][T14263] vhci_hcd vhci_hcd.0: Device attached [ 233.306713][T14261] lo speed is unknown, defaulting to 1000 [ 233.418307][ T5762] vhci_hcd: vhci_device speed not set [ 233.478636][ T5762] usb 1-1: new full-speed USB device number 17 using vhci_hcd [ 233.639403][T14261] lo speed is unknown, defaulting to 1000 [ 233.709359][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 233.781442][T14268] vhci_hcd: connection reset by peer [ 233.789356][ T2337] vhci_hcd: stop threads [ 233.793753][ T2337] vhci_hcd: release socket [ 233.798337][ T2337] vhci_hcd: disconnect device [ 233.903869][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3852'. [ 233.905395][T14301] lo speed is unknown, defaulting to 1000 [ 233.972148][T14311] lo speed is unknown, defaulting to 1000 [ 233.980829][T14312] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 233.987461][T14312] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 233.995046][T14312] vhci_hcd vhci_hcd.0: Device attached [ 234.092442][T14311] lo speed is unknown, defaulting to 1000 [ 234.171278][ T5747] usb 11-1: enqueue for inactive port 0 [ 234.200990][T14301] lo speed is unknown, defaulting to 1000 [ 234.218148][ T5747] usb 11-1: enqueue for inactive port 0 [ 234.288146][ T5747] vhci_hcd: vhci_device speed not set [ 234.361596][T14337] netlink: 'syz.0.3860': attribute type 3 has an invalid length. [ 234.393075][T14339] loop0: detected capacity change from 0 to 1024 [ 234.414601][T14340] lo speed is unknown, defaulting to 1000 [ 234.432752][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 234.432769][ T29] audit: type=1400 audit(234.416:15170): avc: denied { read write } for pid=14303 comm="syz.3.3850" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 234.462221][ T29] audit: type=1400 audit(234.416:15171): avc: denied { open } for pid=14303 comm="syz.3.3850" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 234.551337][ T29] audit: type=1400 audit(234.476:15172): avc: denied { ioctl } for pid=14303 comm="syz.3.3850" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 234.575931][ T29] audit: type=1400 audit(234.486:15173): avc: denied { kexec_image_load } for pid=14303 comm="syz.3.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 234.611979][T14340] lo speed is unknown, defaulting to 1000 [ 234.613496][T14316] vhci_hcd: connection closed [ 234.649434][ T12] vhci_hcd: stop threads [ 234.650640][T14339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.654211][ T12] vhci_hcd: release socket [ 234.654229][ T12] vhci_hcd: disconnect device [ 234.684154][ T29] audit: type=1400 audit(234.656:15174): avc: denied { read } for pid=14338 comm="syz.0.3861" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 234.765416][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.828240][ T29] audit: type=1400 audit(234.806:15175): avc: denied { ioctl } for pid=14354 comm="syz.0.3864" path="socket:[46246]" dev="sockfs" ino=46246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.891316][ T29] audit: type=1400 audit(234.876:15176): avc: denied { read write } for pid=14356 comm="syz.0.3866" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.915947][ T29] audit: type=1400 audit(234.876:15177): avc: denied { open } for pid=14356 comm="syz.0.3866" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 235.015493][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3869'. [ 235.032661][ T29] audit: type=1400 audit(234.926:15178): avc: denied { ioctl } for pid=14356 comm="syz.0.3866" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 235.058630][ T29] audit: type=1326 audit(234.996:15179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.5.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16496bec29 code=0x7ffc0000 [ 235.092785][T14372] loop0: detected capacity change from 0 to 512 [ 235.133920][T14372] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3869: error while reading EA inode 32 err=-116 [ 235.180926][T14372] EXT4-fs (loop0): Remounting filesystem read-only [ 235.187584][T14372] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 235.215971][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3874'. [ 235.235344][T14372] EXT4-fs (loop0): 1 orphan inode deleted [ 235.278767][T14372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.299560][T14372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.401806][T14394] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 235.558821][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3891'. [ 235.581487][ T5750] Process accounting resumed [ 235.599555][T14416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3889'. [ 236.057640][T14438] lo speed is unknown, defaulting to 1000 [ 236.131527][T14444] loop6: detected capacity change from 0 to 512 [ 236.152893][T14444] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.191801][T14444] EXT4-fs (loop6): 1 truncate cleaned up [ 236.213261][T14444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.288910][T14438] lo speed is unknown, defaulting to 1000 [ 236.305595][ T4860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.476598][T14453] netlink: 'syz.1.3904': attribute type 1 has an invalid length. [ 236.484501][T14453] __nla_validate_parse: 1 callbacks suppressed [ 236.484520][T14453] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3904'. [ 236.505951][T14455] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 236.632755][T14467] ALSA: seq fatal error: cannot create timer (-22) [ 236.724687][T14477] loop0: detected capacity change from 0 to 164 [ 236.729633][T14478] lo speed is unknown, defaulting to 1000 [ 236.783069][T14477] syz.0.3915: attempt to access beyond end of device [ 236.783069][T14477] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 236.803743][T14482] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 236.810454][T14482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.818831][T14482] vhci_hcd vhci_hcd.0: Device attached [ 236.834540][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3918'. [ 236.844372][T14477] syz.0.3915: attempt to access beyond end of device [ 236.844372][T14477] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 236.921956][T14495] SELinux: Context @ is not valid (left unmapped). [ 236.960515][T14478] lo speed is unknown, defaulting to 1000 [ 237.181474][T14517] loop0: detected capacity change from 0 to 2048 [ 237.210845][T14517] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.245876][T14517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3931: bg 0: block 120: padding at end of block bitmap is not set [ 237.491934][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 237.526695][T14483] vhci_hcd: connection reset by peer [ 237.543178][ T12] vhci_hcd: stop threads [ 237.547571][ T12] vhci_hcd: release socket [ 237.552103][ T12] vhci_hcd: disconnect device [ 237.577680][T14536] loop0: detected capacity change from 0 to 2048 [ 237.604784][T14536] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.632486][T14536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3935: bg 0: block 120: padding at end of block bitmap is not set [ 237.889657][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 238.034386][T14565] lo speed is unknown, defaulting to 1000 [ 238.126103][T14565] lo speed is unknown, defaulting to 1000 [ 238.235985][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'. [ 238.346055][T14590] loop6: detected capacity change from 0 to 2048 [ 238.408879][T14590] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.441971][T14590] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3959: bg 0: block 120: padding at end of block bitmap is not set [ 238.559328][ T5762] usb 1-1: enqueue for inactive port 0 [ 238.565145][ T5762] usb 1-1: enqueue for inactive port 0 [ 238.716712][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 239.305536][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3979'. [ 239.408391][T14644] sg_write: data in/out 127/8 bytes for SCSI command 0x7f-- guessing data in; [ 239.408391][T14644] program syz.3.3980 not setting count and/or reply_len properly [ 239.495744][T14648] wireguard0: entered promiscuous mode [ 239.502116][T14648] wireguard0: entered allmulticast mode [ 239.530661][ T5762] vhci_hcd: vhci_device speed not set [ 239.553294][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 239.553311][ T29] audit: type=1400 audit(239.531:15397): avc: denied { create } for pid=14655 comm="syz.3.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 239.581366][ T29] audit: type=1400 audit(239.541:15398): avc: denied { ioctl } for pid=14655 comm="syz.3.3984" path="socket:[46721]" dev="sockfs" ino=46721 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 239.614890][ T29] audit: type=1400 audit(239.591:15399): avc: denied { append } for pid=14659 comm="syz.1.3986" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.650974][ T29] audit: type=1326 audit(239.631:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.3.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 239.674705][ T29] audit: type=1326 audit(239.631:15401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.3.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 239.701615][ T29] audit: type=1326 audit(239.631:15402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.3.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 239.724766][ T29] audit: type=1326 audit(239.631:15403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.3.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 239.749075][ T29] audit: type=1326 audit(239.681:15404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.3.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7bec29 code=0x7ffc0000 [ 239.806550][T14670] SELinux: failed to load policy [ 239.837738][T14673] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 239.893767][T14681] loop0: detected capacity change from 0 to 128 [ 239.904900][ T29] audit: type=1326 audit(239.861:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4472ec29 code=0x7ffc0000 [ 239.929044][ T29] audit: type=1326 audit(239.861:15406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4472ec29 code=0x7ffc0000 [ 240.062734][T14702] ALSA: seq fatal error: cannot create timer (-22) [ 240.141062][T14714] ipvlan2: entered promiscuous mode [ 240.151337][T14714] bridge0: port 1(ipvlan2) entered blocking state [ 240.157928][T14714] bridge0: port 1(ipvlan2) entered disabled state [ 240.166524][T14714] ipvlan2: entered allmulticast mode [ 240.172027][T14714] bridge0: entered allmulticast mode [ 240.182043][T14714] ipvlan2: left allmulticast mode [ 240.187117][T14714] bridge0: left allmulticast mode [ 240.209646][T14723] loop0: detected capacity change from 0 to 2048 [ 240.220682][T14723] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.236136][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4017'. [ 240.249750][T14723] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4015: bg 0: block 120: padding at end of block bitmap is not set [ 240.268307][T14731] lo speed is unknown, defaulting to 1000 [ 240.352397][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 240.366117][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 240.377863][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 240.400158][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 240.410217][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 240.506838][T14731] lo speed is unknown, defaulting to 1000 [ 240.605953][T14778] 9pnet: p9_errstr2errno: server reported unknown error  [ 240.620453][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4031'. [ 240.701388][T14781] vhci_hcd: invalid port number 96 [ 240.706580][T14781] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 240.731444][T14790] ref_ctr_offset mismatch. inode: 0xff4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 240.855454][T14807] SELinux: security_context_str_to_sid () failed with errno=-22 [ 240.887397][T14810] wireguard6: entered promiscuous mode [ 240.893015][T14810] wireguard6: entered allmulticast mode [ 241.349992][T14842] loop0: detected capacity change from 0 to 2048 [ 241.391891][T14842] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.429197][T14850] loop6: detected capacity change from 0 to 512 [ 241.439862][T14850] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4062: error while reading EA inode 32 err=-116 [ 241.469357][T14842] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4060: bg 0: block 120: padding at end of block bitmap is not set [ 241.498188][T14850] EXT4-fs (loop6): Remounting filesystem read-only [ 241.504861][T14850] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 241.546482][T14859] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.556050][T14850] EXT4-fs (loop6): 1 orphan inode deleted [ 241.581362][T14850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.600791][T14850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.642781][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 241.792747][T14886] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 241.852259][T14885] loop0: detected capacity change from 0 to 8192 [ 241.986687][T14909] program syz.1.4089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.998144][T14909] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.151691][T14929] loop6: detected capacity change from 0 to 512 [ 242.159487][T14929] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 242.169351][T14929] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 242.194446][T14927] lo speed is unknown, defaulting to 1000 [ 242.270440][T14927] lo speed is unknown, defaulting to 1000 [ 242.479388][T14951] netlink: 'syz.0.4108': attribute type 13 has an invalid length. [ 242.487246][T14951] netlink: 'syz.0.4108': attribute type 17 has an invalid length. [ 242.520280][T14951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.558173][ T9] usb 13-1: enqueue for inactive port 0 [ 242.566124][T14954] netlink: 'syz.1.4109': attribute type 10 has an invalid length. [ 242.608953][T14954] team0: Port device hsr_slave_0 added [ 242.640534][ T9] vhci_hcd: vhci_device speed not set [ 242.759370][T14979] __nla_validate_parse: 3 callbacks suppressed [ 242.759388][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4119'. [ 242.887622][T14986] SELinux: failed to load policy [ 243.061169][T15001] lo speed is unknown, defaulting to 1000 [ 243.113500][T15003] loop6: detected capacity change from 0 to 8192 [ 243.133138][T15001] lo speed is unknown, defaulting to 1000 [ 243.209576][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4131'. [ 243.232030][T15008] loop6: detected capacity change from 0 to 512 [ 243.247021][T15008] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4131: error while reading EA inode 32 err=-116 [ 243.260186][T15008] EXT4-fs (loop6): Remounting filesystem read-only [ 243.267021][T15008] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 243.273738][T15016] pimreg: entered allmulticast mode [ 243.277640][T15008] EXT4-fs (loop6): 1 orphan inode deleted [ 243.289120][T15008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.302251][T15008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.313136][T15016] pimreg: left allmulticast mode [ 243.380165][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.399172][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.409266][T15030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4142'. [ 243.623422][T15051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4151'. [ 243.848791][T15067] lo speed is unknown, defaulting to 1000 [ 243.908692][T15067] lo speed is unknown, defaulting to 1000 [ 243.970750][T15075] netlink: 'syz.6.4161': attribute type 3 has an invalid length. [ 244.023780][T15081] loop6: detected capacity change from 0 to 2048 [ 244.040592][T15081] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.058804][T15081] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4163: bg 0: block 120: padding at end of block bitmap is not set [ 244.187459][T15094] lo speed is unknown, defaulting to 1000 [ 244.222433][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 244.268030][T15098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4168'. [ 244.313407][T15098] loop6: detected capacity change from 0 to 512 [ 244.340632][T15094] lo speed is unknown, defaulting to 1000 [ 244.347743][T15098] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4168: error while reading EA inode 32 err=-116 [ 244.365577][T15098] EXT4-fs (loop6): Remounting filesystem read-only [ 244.372242][T15098] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 244.400280][T15098] EXT4-fs (loop6): 1 orphan inode deleted [ 244.407294][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4169'. [ 244.417978][T15101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4169'. [ 244.437896][T15098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.500140][T15098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.664269][T15123] lo speed is unknown, defaulting to 1000 [ 244.672898][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 244.672916][ T29] audit: type=1400 audit(244.649:15939): avc: denied { create } for pid=15124 comm="syz.5.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.712711][ T29] audit: type=1400 audit(244.689:15940): avc: denied { ioctl } for pid=15124 comm="syz.5.4179" path="socket:[48544]" dev="sockfs" ino=48544 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.742388][T15127] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4178'. [ 244.752067][ T29] audit: type=1326 audit(244.739:15941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.775774][T15127] loop6: detected capacity change from 0 to 512 [ 244.787838][T15129] program GPL is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.790771][T15123] lo speed is unknown, defaulting to 1000 [ 244.802881][T15129] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.824553][ T29] audit: type=1326 audit(244.739:15942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.847613][ T29] audit: type=1326 audit(244.739:15943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.870873][ T29] audit: type=1326 audit(244.739:15944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.894044][ T29] audit: type=1326 audit(244.744:15945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.917138][ T29] audit: type=1326 audit(244.744:15946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.919366][T15127] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4178: error while reading EA inode 32 err=-116 [ 244.940208][ T29] audit: type=1326 audit(244.744:15947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 244.940245][ T29] audit: type=1326 audit(244.744:15948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.6.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dccafec29 code=0x7ffc0000 [ 245.016388][T15127] EXT4-fs (loop6): Remounting filesystem read-only [ 245.023205][T15127] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 245.034301][T15127] EXT4-fs (loop6): 1 orphan inode deleted [ 245.045492][T15140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4184'. [ 245.071970][T15127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.085446][T15127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.090135][T15143] netlink: 'syz.0.4186': attribute type 298 has an invalid length. [ 245.183773][T15151] blktrace: Concurrent blktraces are not allowed on sg0 [ 245.241588][T15149] loop6: detected capacity change from 0 to 2048 [ 245.280269][T15149] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.296699][T15149] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4189: bg 0: block 120: padding at end of block bitmap is not set [ 245.349802][T15159] lo speed is unknown, defaulting to 1000 [ 245.471891][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4204'. [ 245.525166][T15159] lo speed is unknown, defaulting to 1000 [ 245.542519][ T4860] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 245.555005][T15187] lo speed is unknown, defaulting to 1000 [ 245.656912][T15187] lo speed is unknown, defaulting to 1000 [ 245.807732][T15199] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 245.814410][T15199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 245.821887][T15199] vhci_hcd vhci_hcd.0: Device attached [ 246.010318][ T5762] vhci_hcd: vhci_device speed not set [ 246.069780][ T5762] usb 13-1: new full-speed USB device number 12 using vhci_hcd [ 246.093129][T15189] ================================================================== [ 246.101832][T15189] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 246.109319][T15189] [ 246.111677][T15189] read-write to 0xffff888102364388 of 8 bytes by interrupt on cpu 0: [ 246.119883][T15189] rtc_pie_update_irq+0x93/0xf0 [ 246.124876][T15189] __hrtimer_run_queues+0x20f/0x5a0 [ 246.130100][T15189] hrtimer_interrupt+0x21a/0x460 [ 246.135062][T15189] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 246.141079][T15189] sysvec_apic_timer_interrupt+0x6f/0x80 [ 246.146840][T15189] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.152945][T15189] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 246.158610][T15189] __unix_dgram_recvmsg+0x3a7/0x810 [ 246.163834][T15189] unix_dgram_recvmsg+0x81/0x90 [ 246.168723][T15189] sock_recvmsg_nosec+0x107/0x130 [ 246.173791][T15189] ____sys_recvmsg+0x26f/0x280 [ 246.178586][T15189] ___sys_recvmsg+0x11f/0x370 [ 246.183419][T15189] do_recvmmsg+0x1ef/0x540 [ 246.187887][T15189] __x64_sys_recvmmsg+0xe5/0x170 [ 246.192851][T15189] x64_sys_call+0x27a6/0x2ff0 [ 246.198176][T15189] do_syscall_64+0xd2/0x200 [ 246.202729][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.208645][T15189] [ 246.210982][T15189] read to 0xffff888102364388 of 8 bytes by task 15189 on cpu 1: [ 246.218619][T15189] rtc_dev_poll+0x78/0xb0 [ 246.222979][T15189] __io_arm_poll_handler+0x1ee/0xb70 [ 246.228293][T15189] io_poll_add+0x69/0xe0 [ 246.232665][T15189] __io_issue_sqe+0xfe/0x2e0 [ 246.237290][T15189] io_issue_sqe+0x53/0x970 [ 246.241822][T15189] io_req_task_submit+0x6b/0xd0 [ 246.246706][T15189] io_poll_task_func+0x645/0x910 [ 246.251789][T15189] io_handle_tw_list+0xcc/0x1c0 [ 246.256664][T15189] tctx_task_work_run+0x6d/0x1a0 [ 246.261800][T15189] tctx_task_work+0x3f/0x80 [ 246.266327][T15189] task_work_run+0x12e/0x1a0 [ 246.271206][T15189] get_signal+0xe13/0xf70 [ 246.275580][T15189] arch_do_signal_or_restart+0x96/0x480 [ 246.281384][T15189] exit_to_user_mode_loop+0x7a/0x100 [ 246.286785][T15189] do_syscall_64+0x1d6/0x200 [ 246.291416][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.297537][T15189] [ 246.299871][T15189] value changed: 0x00000000001009c0 -> 0x0000000000100ac0 [ 246.307076][T15189] [ 246.309411][T15189] Reported by Kernel Concurrency Sanitizer on: [ 246.315834][T15189] CPU: 1 UID: 0 PID: 15189 Comm: syz.3.4206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.327839][T15189] Tainted: [W]=WARN [ 246.331659][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.341900][T15189] ================================================================== [ 246.498396][T15201] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 246.512757][ T51] vhci_hcd: stop threads [ 246.517061][ T51] vhci_hcd: release socket [ 246.521714][ T51] vhci_hcd: disconnect device [ 249.134929][T15189] ================================================================== [ 249.143064][T15189] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 249.150501][T15189] [ 249.152846][T15189] read-write to 0xffff888102364388 of 8 bytes by interrupt on cpu 0: [ 249.160930][T15189] rtc_pie_update_irq+0x93/0xf0 [ 249.165825][T15189] __hrtimer_run_queues+0x20f/0x5a0 [ 249.171066][T15189] hrtimer_interrupt+0x21a/0x460 [ 249.176070][T15189] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 249.182121][T15189] sysvec_apic_timer_interrupt+0x6f/0x80 [ 249.187970][T15189] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.194061][T15189] pv_native_safe_halt+0x13/0x20 [ 249.199060][T15189] default_idle+0x13/0x20 [ 249.203438][T15189] default_idle_call+0x3d/0x70 [ 249.208282][T15189] do_idle+0xcb/0x240 [ 249.212305][T15189] cpu_startup_entry+0x25/0x30 [ 249.217103][T15189] rest_init+0xee/0xf0 [ 249.221191][T15189] start_kernel+0x4d7/0x510 [ 249.225725][T15189] x86_64_start_reservations+0x24/0x30 [ 249.231229][T15189] x86_64_start_kernel+0xfc/0x100 [ 249.236320][T15189] common_startup_64+0x13e/0x147 [ 249.241309][T15189] [ 249.243662][T15189] read to 0xffff888102364388 of 8 bytes by task 15189 on cpu 1: [ 249.251410][T15189] rtc_dev_poll+0x78/0xb0 [ 249.255782][T15189] io_poll_task_func+0x143/0x910 [ 249.260759][T15189] io_handle_tw_list+0xcc/0x1c0 [ 249.265633][T15189] tctx_task_work_run+0x6d/0x1a0 [ 249.270612][T15189] tctx_task_work+0x3f/0x80 [ 249.275143][T15189] task_work_run+0x12e/0x1a0 [ 249.279769][T15189] get_signal+0xe13/0xf70 [ 249.284123][T15189] arch_do_signal_or_restart+0x96/0x480 [ 249.289700][T15189] exit_to_user_mode_loop+0x7a/0x100 [ 249.295027][T15189] do_syscall_64+0x1d6/0x200 [ 249.299672][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.305598][T15189] [ 249.307933][T15189] value changed: 0x000000000070a9c0 -> 0x000000000070aac0 [ 249.315057][T15189] [ 249.317397][T15189] Reported by Kernel Concurrency Sanitizer on: [ 249.323571][T15189] CPU: 1 UID: 0 PID: 15189 Comm: syz.3.4206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.334982][T15189] Tainted: [W]=WARN [ 249.338800][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.348878][T15189] ================================================================== [ 251.448179][ T5762] usb 13-1: enqueue for inactive port 0 [ 251.454365][ T5762] usb 13-1: enqueue for inactive port 0 [ 251.538487][ T5762] vhci_hcd: vhci_device speed not set [ 252.151798][T15189] ================================================================== [ 252.160163][T15189] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 252.167607][T15189] [ 252.169946][T15189] read-write to 0xffff888102364388 of 8 bytes by interrupt on cpu 0: [ 252.178027][T15189] rtc_pie_update_irq+0x93/0xf0 [ 252.183014][T15189] __hrtimer_run_queues+0x20f/0x5a0 [ 252.188341][T15189] hrtimer_interrupt+0x21a/0x460 [ 252.193311][T15189] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 252.199237][T15189] sysvec_apic_timer_interrupt+0x6f/0x80 [ 252.204913][T15189] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.210928][T15189] pv_native_safe_halt+0x13/0x20 [ 252.215912][T15189] default_idle+0x13/0x20 [ 252.220295][T15189] default_idle_call+0x3d/0x70 [ 252.225109][T15189] do_idle+0xcb/0x240 [ 252.229127][T15189] cpu_startup_entry+0x25/0x30 [ 252.233934][T15189] rest_init+0xee/0xf0 [ 252.238032][T15189] start_kernel+0x4d7/0x510 [ 252.242571][T15189] x86_64_start_reservations+0x24/0x30 [ 252.248088][T15189] x86_64_start_kernel+0xfc/0x100 [ 252.253221][T15189] common_startup_64+0x13e/0x147 [ 252.258217][T15189] [ 252.260658][T15189] read to 0xffff888102364388 of 8 bytes by task 15189 on cpu 1: [ 252.268310][T15189] rtc_dev_poll+0x78/0xb0 [ 252.272685][T15189] __io_arm_poll_handler+0x1ee/0xb70 [ 252.278006][T15189] io_poll_add+0x69/0xe0 [ 252.282298][T15189] __io_issue_sqe+0xfe/0x2e0 [ 252.286915][T15189] io_issue_sqe+0x53/0x970 [ 252.291359][T15189] io_req_task_submit+0x6b/0xd0 [ 252.296244][T15189] io_poll_task_func+0x645/0x910 [ 252.301210][T15189] io_handle_tw_list+0xcc/0x1c0 [ 252.306103][T15189] tctx_task_work_run+0x6d/0x1a0 [ 252.311059][T15189] tctx_task_work+0x3f/0x80 [ 252.315588][T15189] task_work_run+0x12e/0x1a0 [ 252.320204][T15189] get_signal+0xe13/0xf70 [ 252.324552][T15189] arch_do_signal_or_restart+0x96/0x480 [ 252.330130][T15189] exit_to_user_mode_loop+0x7a/0x100 [ 252.335450][T15189] do_syscall_64+0x1d6/0x200 [ 252.340080][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.345996][T15189] [ 252.348339][T15189] value changed: 0x0000000000d07fc0 -> 0x0000000000d080c0 [ 252.355466][T15189] [ 252.357804][T15189] Reported by Kernel Concurrency Sanitizer on: [ 252.364066][T15189] CPU: 1 UID: 0 PID: 15189 Comm: syz.3.4206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 252.375472][T15189] Tainted: [W]=WARN [ 252.379294][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.389380][T15189] ================================================================== [ 255.172924][T15189] ================================================================== [ 255.181174][T15189] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 255.188613][T15189] [ 255.191048][T15189] read-write to 0xffff888102364388 of 8 bytes by interrupt on cpu 0: [ 255.199226][T15189] rtc_pie_update_irq+0x93/0xf0 [ 255.204129][T15189] __hrtimer_run_queues+0x20f/0x5a0 [ 255.209548][T15189] hrtimer_interrupt+0x21a/0x460 [ 255.214538][T15189] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 255.220745][T15189] sysvec_apic_timer_interrupt+0x6f/0x80 [ 255.226405][T15189] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.232422][T15189] pv_native_safe_halt+0x13/0x20 [ 255.237403][T15189] default_idle+0x13/0x20 [ 255.241797][T15189] default_idle_call+0x3d/0x70 [ 255.246691][T15189] do_idle+0xcb/0x240 [ 255.250738][T15189] cpu_startup_entry+0x25/0x30 [ 255.255554][T15189] rest_init+0xee/0xf0 [ 255.259754][T15189] start_kernel+0x4d7/0x510 [ 255.264372][T15189] x86_64_start_reservations+0x24/0x30 [ 255.269913][T15189] x86_64_start_kernel+0xfc/0x100 [ 255.275102][T15189] common_startup_64+0x13e/0x147 [ 255.280091][T15189] [ 255.282454][T15189] read to 0xffff888102364388 of 8 bytes by task 15189 on cpu 1: [ 255.290109][T15189] rtc_dev_poll+0x78/0xb0 [ 255.294497][T15189] io_poll_task_func+0x143/0x910 [ 255.299498][T15189] io_handle_tw_list+0xcc/0x1c0 [ 255.304377][T15189] tctx_task_work_run+0x6d/0x1a0 [ 255.309430][T15189] tctx_task_work+0x3f/0x80 [ 255.313967][T15189] task_work_run+0x12e/0x1a0 [ 255.318592][T15189] get_signal+0xe13/0xf70 [ 255.322948][T15189] arch_do_signal_or_restart+0x96/0x480 [ 255.328625][T15189] exit_to_user_mode_loop+0x7a/0x100 [ 255.334032][T15189] do_syscall_64+0x1d6/0x200 [ 255.338682][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.344797][T15189] [ 255.347142][T15189] value changed: 0x00000000013077c0 -> 0x00000000013078c0 [ 255.354281][T15189] [ 255.356636][T15189] Reported by Kernel Concurrency Sanitizer on: [ 255.363220][T15189] CPU: 1 UID: 0 PID: 15189 Comm: syz.3.4206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.374689][T15189] Tainted: [W]=WARN [ 255.378510][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.388587][T15189] ==================================================================