last executing test programs: 2.254004s ago: executing program 3 (id=234): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, r1, 0x0, 0x0, 0x100}]) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000380)={0x1d, r3}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x82, 0x6, 0x20000, r1, 0xc330, '\x00', 0x0, r1, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r6, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYBLOB="31ac33b5f7a9d011aa4870ccf8baee2e6882a71c67937946136e80409e05f90e6e31511da4dd70757e3ffedff2d979a2b54ddc8708e3a4b4936a8655dab0da2a2289c8756b3798728205c47a1cd62540079153e1bda47dc7b56114450a835f4aa2a37f1cd9fd6faf08d0461b92bc1cea5aad3e714506d8dfcb9ada8fbf3dc7d9a28c2a6e5b740c4e7b492f06152cda8ce520a9d6c022c97bbadcd01e9a01ac6b36890f38786ecea46dc710143ad14e769125a03c9a10cb2a97cc", @ANYRES16=r9, @ANYRES16=r7, @ANYRES64=r2, @ANYRESOCT=r8, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) sendmsg$IEEE802154_ADD_IFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2.118977069s ago: executing program 3 (id=236): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@loopback, @local, [0x0, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], 'wg1\x00', 'wg0\x00', {0xff}, {}, 0x2f, 0x9, 0x7}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@ipv6header={{0x28}, {0x4, 0x48, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1004, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x8, 0x632, 0x8, 0x3], 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 2.058523259s ago: executing program 3 (id=237): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) socket$caif_stream(0x25, 0x1, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x800}) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000220909d7000085669234aa79389067780cc6d3ad61000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0x800) close(r0) 2.057491219s ago: executing program 3 (id=238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000340)=0x80000004, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112", 0x5f, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) llistxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000680)=""/179, 0xb3) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a8c0800000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000045a3d29704956e83c7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc1}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc3}}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 1.228694536s ago: executing program 1 (id=249): syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0xff, 0x4ab, &(0x7f0000000b00)="$eJzs3c1rXFUbAPBnZpo0SfO+/XhfpK1gCxXqB83kA2miblypi4JYcKNQYzKNNZNMyExqE7pIddeFC1EUxIV7/wI3dmURxLXuxYVUtEZQQRi5d2ba5mPioGkGcn8/uJ1775ne55wMz+HMuffODSCzTib/5CIGI+LriDjY2Fz/hpONl7XbV6eSJRf1+vmfcun7ku3WW1v/70BErEZEX0S8+GzEa7nNcavLK7OT5XJpsbldrM0tFKvLK2cuzU3OlGZK8yPjZycmxofHRid2rK3X33nj+rnPnu/99Le3b91894vPk2oNNsuSdpR2LNJdjab3xOF79u2LiKfvQ6xuKDTb09/tivCPJJ/f/yLiVJr/B6OQfppAFtTr9fqf9f3tilfrwJ6VT8fAufxQRDTW8/mhocYY/v8xkC9XqrXHL1aW5qcbY+VD0ZO/eKlcGm5+VzgUPblkeyRdv7s9umF7LCIdA79X6E+3h6Yq5end7eqADQ5syP9fC438BzLCV37ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hk144dy5Z6q37+KcvLy/NVi6fmS5VZ4fmlqaGpiqLC0MzlcpMes/O3N8dr1ypLIw8EUtXirVStVasLq9cmKsszdcupPf1Xyj17EqrgE4cPnHj21xErD7Zny6J3maZXIW9rV7PRbfvQQa6o9DtDgjoGlN/kF2+4wNb/ETvOn3tChZ2vi7A7sh3uwJA15w+5vwfZJX5f8gu8/+QXcb4gPl/yB7z/5Bdg22e//Wfe57dNRwR/42Ibwo9+1vP+gL2gvwPueb4//TBhwc3lvbmfk9PEfRGxJsfnf/gymSttjiS7P/5zv7ah839o92oP9CpVp628hgAyK6121enWstuxv3xmcZFCJvj72vOTfal5ygH1nLrrlXI7dC1C6vXIuLoVvFzzeedN858DKwVNsU/0njtyzUOkdZ3X/rc9N2Jf6z5miwP3RP/+L/+q0A23Ej6n+Gt8i+f5nTcyb/1/c/gDl070b7/y9/p/wpt+r8THcZ4/eO3vm8b/1rE8S3jt+L1pbE2xk/qdrrD+LdeeemBdmX1TxrH2Sp+S7JWrM0tFKvLK2fS35GbKc2PjJ+dmBgfHhudKKZz1MXWTPVmTx396uZ27R9oE3+79if7Hu2w/X88+OXLJ7eJ/8iprT//I9vE74+IxzqM/8vod6+2K0viT7dpf36b+Mm+sQ7jV99/bn+HbwUAdkF1eWV2slwuLVqxYmUvrCRj7R04Trd7JuB+u5v03a4JAAAAAAAAAAAA0KnduCy5220EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgL/goAAP//51jVDA==") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e7ffffff00"/21], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r4}) timerfd_create(0x0, 0x0) 1.148344395s ago: executing program 1 (id=252): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0}, 0x4045094) accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 1.121695985s ago: executing program 4 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x9, 0x2040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000000c0000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000500"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) semget$private(0x0, 0x1, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @dev}, &(0x7f0000000540)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.106798165s ago: executing program 0 (id=256): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getgroups(0x0, 0x0) (fail_nth: 3) 1.052443695s ago: executing program 0 (id=257): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000001340)}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x400000000000000}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000100), 0x8) unshare(0x400) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x100) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) socket(0xa, 0x40000000002, 0x0) 1.001347555s ago: executing program 2 (id=258): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 978.405455ms ago: executing program 2 (id=259): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f00000011c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffe6f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000001180)=0x10, 0x80800) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000140)=""/4101, 0x1005}], 0x3}, 0x40012000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getgroups(0x0, 0x0) 935.314774ms ago: executing program 2 (id=260): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040)=0xca8bb9e872e44f8d, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000001501000076000000bf91000000000000b5020000000000002800000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r8, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x3}, {0x9, 0x1}, {0x24, 0x1}, {0x36}, {0xb, 0x1}, {0x5}, {0x5}, {0x6}, {0x12}, {0x30}, {0x6c}, {0x18}, {0x1}, {0x12}, {0x9, 0x1}, {0x1b}, {0x60}, {0x48}, {0xc}, {0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x41) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 933.902734ms ago: executing program 0 (id=261): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 919.134994ms ago: executing program 0 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = mq_open(&(0x7f0000002740)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x100, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000580)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0xffffffffffffffff, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x3}, 0x1}, 0x18) bind$can_j1939(r9, &(0x7f00000002c0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_init1(0x0) 878.405504ms ago: executing program 0 (id=263): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000020222a0b000000001c001a8008000280080002000800000047120000080002001040e5fb1915da80d6346e82330a71a80951ee5ccff5da22f7e842b84ba508763092de53d63feb2e0984a52d5c7d4e6b56c14d7ee3535a5f27db91cc0989294ee6deb5f68dc6ea3d10e3e8d21020892eeec2378bf812dee976bd2461568a1d31673b8ff0b5840e2d777a7ca64cda1caeabe56f439b7391f4fade9a"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xfff1, 0xffff}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0xf7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0x8, 0xfffffffa, 0x1, 0xffffff52, 0x6341}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r12}, 0x10) ioprio_get$uid(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 862.945774ms ago: executing program 4 (id=264): syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0xff, 0x4ab, &(0x7f0000000b00)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e7ffffff00"/21], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r4}) timerfd_create(0x0, 0x0) 687.213283ms ago: executing program 4 (id=265): syz_emit_ethernet(0xce, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c2000000862f00fc02000000000000000000000000000000000000000000000000000000000000242088a800000000000008000d0cf51153a953e526f05afbd6d88a38747056730e9f03541cefa338261372fb85d61b4d07be6c69c7256a3f42bea7f800c32b861da1ce484ef7622afadee9defac83f8ad2a65ab5e5ea024082cc000086dd000000016dc588a888be08000000100000000100000000000000080022eb00000000200000000200000000000000fffd00000800655800"/206], 0x0) 630.477073ms ago: executing program 4 (id=266): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x49, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 629.805563ms ago: executing program 0 (id=267): syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000240), &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0xff, 0x4ab, &(0x7f0000000b00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x1, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000140)=""/193, 0xc1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='locks_get_lock_context\x00', r2, 0x0, 0x48}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 629.374193ms ago: executing program 4 (id=268): syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000240), &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0xff, 0x4ab, &(0x7f0000000b00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x1, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000140)=""/193, 0xc1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='locks_get_lock_context\x00', r2, 0x0, 0x48}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 408.704252ms ago: executing program 4 (id=269): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x10000, 0xc8, 0x2, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01f226dbdf250900000008"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 298.861782ms ago: executing program 1 (id=270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="e6000000006ac7060000000000ee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x10, 0x2, {0x2, @usage=0xfffffffffffffff7, 0x0, 0xfffffffffffffff0, 0x6, 0x10001, 0x480000000000, 0xa, 0x0, @struct={0x1, 0x7c3}, 0x200, 0x162, [0x7f, 0xffffffffffffff00, 0xfffffffffffff972, 0x8, 0x800, 0x4]}, {0x3, @usage, 0x0, 0x1400000000, 0x6, 0x1, 0xffffffff7fffffff, 0x80000000000000, 0x20, @struct={0x2, 0x7}, 0x8, 0x9, [0x2, 0x5, 0x4, 0xfffffffffffffffc, 0x200, 0xffffffffffffffff]}, {0x5, @usage, 0x0, 0x7, 0xb, 0xdb, 0x8, 0x2, 0xb, @usage=0x8, 0x7, 0x9, [0xc00000, 0x8000000000000000, 0x8, 0x100, 0xa2, 0x6]}, {0x0, 0xe336, 0x13dad361}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000a40)={r4, 0x9, 0x1, [0x2, 0x7, 0xd, 0x3, 0x3], [0x3, 0x1, 0xfffffffffffffff7, 0x9, 0x1, 0x82a, 0x6, 0x2, 0x8, 0x9, 0x0, 0xc35, 0x5, 0x80000, 0x94, 0x6, 0x2, 0xc, 0x0, 0x1, 0x4, 0x0, 0x1, 0x3, 0x4, 0xffffffff, 0x1, 0x200, 0xb04, 0xffffffffffffff83, 0x8, 0xff, 0x6d1, 0xffffffffffffff80, 0x48, 0x81, 0x4, 0x2, 0x9, 0x9, 0x9, 0x0, 0xff, 0x5, 0x8, 0xffffffffffffffff, 0x2f, 0x1, 0x2, 0x546, 0xffffffffffffffff, 0x0, 0x8, 0x84, 0x1, 0x80000000, 0x6, 0x7ff, 0xfffffffffffffff8, 0xff, 0x0, 0x2, 0xc, 0x7fffffff, 0x9, 0x1, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0x9, 0xe309, 0xb0, 0x1, 0x9, 0xa480, 0x2, 0x7, 0x200, 0x5, 0x9, 0xffffffff, 0x6, 0x7, 0x8, 0xfffffffffffff6d1, 0xd1e2, 0x1, 0x4, 0x5, 0x0, 0x100000000, 0x5428, 0xffffffffffffffff, 0x10000, 0x7, 0xfff, 0x9, 0x8, 0xabe, 0xc, 0x6, 0x3, 0x4, 0x8e, 0x8, 0x9, 0x2, 0x8, 0x1c9, 0x0, 0x76d64843, 0x4, 0x9, 0x9, 0x3, 0x7ff, 0x0, 0x4, 0x2fc0, 0x8]}) r5 = openat$cgroup_subtree(r3, &(0x7f0000000180), 0x2, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/52, 0x34}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x9}, 0x18) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) 248.653681ms ago: executing program 1 (id=271): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 192.954921ms ago: executing program 1 (id=272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000080)='+', 0x1}], 0x2) 191.973261ms ago: executing program 3 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = mq_open(&(0x7f0000002740)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x100, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000580)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0xffffffffffffffff, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x3}, 0x1}, 0x18) bind$can_j1939(r9, &(0x7f00000002c0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_init1(0x0) 157.906471ms ago: executing program 1 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/5, 0x5, 0x0, &(0x7f0000000400)=""/199, 0xc7}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x165840, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e459, 0x700000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r6, 0x0}]) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 156.099511ms ago: executing program 3 (id=275): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xffff7fff, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x6a040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) r5 = epoll_create1(0x0) close(r5) ppoll(&(0x7f0000000140)=[{r4, 0x1000}, {r5}], 0x2, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_TEE={0x21, 0x22, 0x0, @fd=r10, 0x0, 0x0, 0x80000001, 0xa, 0x0, {0x0, 0x0, r1}}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffc04]}, 0x8) read(r11, &(0x7f0000000740)=""/384, 0x200008c0) write(r9, &(0x7f0000000380)='~', 0x1) open(&(0x7f0000000140)='./file0\x00', 0x482, 0x1c8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 58.112871ms ago: executing program 2 (id=276): syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0xff, 0x4ab, &(0x7f0000000b00)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e7ffffff00"/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r4}) timerfd_create(0x0, 0x0) 57.594871ms ago: executing program 2 (id=277): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@loopback, @local, [0x0, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], 'wg1\x00', 'wg0\x00', {0xff}, {}, 0x2f, 0x9, 0x7}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@ipv6header={{0x28}, {0x4, 0x48, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1004, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x8, 0x632, 0x8, 0x3], 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 0s ago: executing program 2 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x4000010) (fail_nth: 9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 48.379738][ T29] audit: type=1400 audit(1734182412.368:81): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.380760][ T3292] cgroup: Unknown subsys name 'net' [ 48.402522][ T29] audit: type=1400 audit(1734182412.368:82): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.429862][ T29] audit: type=1400 audit(1734182412.398:83): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.451679][ T29] audit: type=1400 audit(1734182412.398:84): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.565070][ T3292] cgroup: Unknown subsys name 'cpuset' [ 48.571077][ T3292] cgroup: Unknown subsys name 'rlimit' [ 48.660415][ T29] audit: type=1400 audit(1734182412.648:85): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.683654][ T29] audit: type=1400 audit(1734182412.648:86): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.699416][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 48.704068][ T29] audit: type=1400 audit(1734182412.648:87): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.732948][ T29] audit: type=1400 audit(1734182412.648:88): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 48.753298][ T29] audit: type=1400 audit(1734182412.658:89): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.757126][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.778131][ T29] audit: type=1400 audit(1734182412.658:90): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 50.480675][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 50.564965][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 50.593465][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 50.604983][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.612102][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.619217][ T3302] bridge_slave_0: entered allmulticast mode [ 50.625538][ T3302] bridge_slave_0: entered promiscuous mode [ 50.651454][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.658555][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.665722][ T3302] bridge_slave_1: entered allmulticast mode [ 50.671949][ T3302] bridge_slave_1: entered promiscuous mode [ 50.716389][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 50.725879][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.742837][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.749995][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.757123][ T3310] bridge_slave_0: entered allmulticast mode [ 50.763521][ T3310] bridge_slave_0: entered promiscuous mode [ 50.771762][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.778853][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.786014][ T3310] bridge_slave_1: entered allmulticast mode [ 50.792202][ T3310] bridge_slave_1: entered promiscuous mode [ 50.801773][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.840564][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.847663][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.855006][ T3311] bridge_slave_0: entered allmulticast mode [ 50.861341][ T3311] bridge_slave_0: entered promiscuous mode [ 50.872644][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.895809][ T3302] team0: Port device team_slave_0 added [ 50.901430][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 50.910277][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.917350][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.924617][ T3311] bridge_slave_1: entered allmulticast mode [ 50.930868][ T3311] bridge_slave_1: entered promiscuous mode [ 50.938025][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.953417][ T3302] team0: Port device team_slave_1 added [ 50.980336][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.992473][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.005690][ T3310] team0: Port device team_slave_0 added [ 51.023738][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.030731][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.056717][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.068164][ T3310] team0: Port device team_slave_1 added [ 51.084034][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.091002][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.116957][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.133721][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.140803][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.147941][ T3308] bridge_slave_0: entered allmulticast mode [ 51.154287][ T3308] bridge_slave_0: entered promiscuous mode [ 51.161275][ T3311] team0: Port device team_slave_0 added [ 51.169522][ T3311] team0: Port device team_slave_1 added [ 51.185875][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.192950][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.200140][ T3308] bridge_slave_1: entered allmulticast mode [ 51.206474][ T3308] bridge_slave_1: entered promiscuous mode [ 51.220908][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.227985][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.253914][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.273337][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.287142][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.294082][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.320091][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.330993][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.337965][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.363985][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.376790][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.383872][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.391198][ T3303] bridge_slave_0: entered allmulticast mode [ 51.397506][ T3303] bridge_slave_0: entered promiscuous mode [ 51.404721][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.417598][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.424585][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.450537][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.469008][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.476073][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.483203][ T3303] bridge_slave_1: entered allmulticast mode [ 51.489622][ T3303] bridge_slave_1: entered promiscuous mode [ 51.514074][ T3311] hsr_slave_0: entered promiscuous mode [ 51.519929][ T3311] hsr_slave_1: entered promiscuous mode [ 51.534751][ T3308] team0: Port device team_slave_0 added [ 51.549626][ T3302] hsr_slave_0: entered promiscuous mode [ 51.555770][ T3302] hsr_slave_1: entered promiscuous mode [ 51.561581][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.569140][ T3302] Cannot create hsr debugfs directory [ 51.593117][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.603397][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.613234][ T3308] team0: Port device team_slave_1 added [ 51.620444][ T3310] hsr_slave_0: entered promiscuous mode [ 51.626620][ T3310] hsr_slave_1: entered promiscuous mode [ 51.632468][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.640039][ T3310] Cannot create hsr debugfs directory [ 51.680379][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.687381][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.713284][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.730543][ T3303] team0: Port device team_slave_0 added [ 51.741435][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.748428][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.774432][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.793337][ T3303] team0: Port device team_slave_1 added [ 51.826733][ T3308] hsr_slave_0: entered promiscuous mode [ 51.832807][ T3308] hsr_slave_1: entered promiscuous mode [ 51.838652][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.846239][ T3308] Cannot create hsr debugfs directory [ 51.856957][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.863880][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.889847][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.900837][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.907795][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.933810][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.000705][ T3303] hsr_slave_0: entered promiscuous mode [ 52.006862][ T3303] hsr_slave_1: entered promiscuous mode [ 52.012776][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.020367][ T3303] Cannot create hsr debugfs directory [ 52.060680][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.069256][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.088033][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.104220][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.127812][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.144910][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.160404][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.174095][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.190004][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.199712][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.215740][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.231467][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.240276][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.249376][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.258164][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.267104][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.293466][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.314469][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.324147][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.344866][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.369665][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.390729][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.408080][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.415174][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.435894][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.442953][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.455280][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.468721][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.487196][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.501959][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.516487][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.527932][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.536429][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.543533][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.559444][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.566565][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.576348][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.583386][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.592016][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.599118][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.615041][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.622142][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.631841][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.638985][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.671436][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.691012][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.702933][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.721520][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.747942][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.796544][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.803684][ T1703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.814026][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.821109][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.836524][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.851072][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.863221][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.915274][ T3311] veth0_vlan: entered promiscuous mode [ 52.946505][ T3311] veth1_vlan: entered promiscuous mode [ 52.962296][ T3311] veth0_macvtap: entered promiscuous mode [ 52.984163][ T3311] veth1_macvtap: entered promiscuous mode [ 53.005480][ T3302] veth0_vlan: entered promiscuous mode [ 53.019406][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.033551][ T3310] veth0_vlan: entered promiscuous mode [ 53.043994][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.056337][ T3302] veth1_vlan: entered promiscuous mode [ 53.063911][ T3308] veth0_vlan: entered promiscuous mode [ 53.076513][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.085900][ T3310] veth1_vlan: entered promiscuous mode [ 53.095925][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.104663][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.113360][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.122105][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.137563][ T3310] veth0_macvtap: entered promiscuous mode [ 53.148958][ T3310] veth1_macvtap: entered promiscuous mode [ 53.160029][ T3308] veth1_vlan: entered promiscuous mode [ 53.176059][ T3308] veth0_macvtap: entered promiscuous mode [ 53.187107][ T3308] veth1_macvtap: entered promiscuous mode [ 53.194934][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.205459][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.216126][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.230537][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.241086][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.251815][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.261001][ T3302] veth0_macvtap: entered promiscuous mode [ 53.269995][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.278856][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.287820][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.296606][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.307990][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.318440][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.328258][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.338675][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.349698][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.361662][ T3302] veth1_macvtap: entered promiscuous mode [ 53.373489][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.383992][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.393828][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.404246][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.414068][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.424563][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.435045][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.443299][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.453854][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.463795][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.474371][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.484661][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.493029][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.509285][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.519728][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.529606][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.540055][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.549854][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.560308][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.573332][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.588820][ T3303] veth0_vlan: entered promiscuous mode [ 53.595559][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.604259][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.613048][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.614861][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 53.614872][ T29] audit: type=1400 audit(1734182417.608:116): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.621808][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.646714][ T29] audit: type=1400 audit(1734182417.618:117): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.684659][ T29] audit: type=1400 audit(1734182417.618:118): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.710597][ T29] audit: type=1400 audit(1734182417.628:119): avc: denied { create } for pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.730777][ T29] audit: type=1400 audit(1734182417.628:120): avc: denied { create } for pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.750099][ T29] audit: type=1400 audit(1734182417.628:121): avc: denied { create } for pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.771859][ T29] audit: type=1400 audit(1734182417.658:122): avc: denied { map_create } for pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.790759][ T29] audit: type=1400 audit(1734182417.658:123): avc: denied { bpf } for pid=3442 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.811077][ T29] audit: type=1400 audit(1734182417.658:124): avc: denied { map_read map_write } for pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.830696][ T29] audit: type=1400 audit(1734182417.658:125): avc: denied { prog_load } for pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.859983][ T3303] veth1_vlan: entered promiscuous mode [ 53.871057][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.879961][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.888790][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.897513][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.924191][ T3303] veth0_macvtap: entered promiscuous mode [ 53.933871][ T3303] veth1_macvtap: entered promiscuous mode [ 53.950180][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.960676][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.970532][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.981012][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.990937][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.001471][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.011339][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.021773][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.033406][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.044017][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.054496][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.059195][ T3454] loop2: detected capacity change from 0 to 512 [ 54.064283][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.080961][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.081478][ T3454] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 54.090797][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.111045][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.120889][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.131331][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.142793][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.151301][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.160056][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.168850][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.177583][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.301701][ T3473] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 54.302612][ T3472] loop4: detected capacity change from 0 to 512 [ 54.310883][ T3466] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 54.343800][ T3472] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.5: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.347508][ T3466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 54.390025][ T3480] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13'. [ 54.399655][ T3472] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.5: Bad quota inode: 3, type: 0 [ 54.415617][ T3472] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.434151][ T3472] EXT4-fs (loop4): mount failed [ 54.471242][ T3480] batadv1: entered promiscuous mode [ 54.477470][ T3480] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 54.520038][ T3490] loop0: detected capacity change from 0 to 512 [ 54.550480][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.557929][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.563584][ T3497] loop3: detected capacity change from 0 to 4096 [ 54.565450][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.585828][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.593259][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.600717][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.608186][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.615590][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.622977][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.630434][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.637853][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.645354][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.652758][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.660170][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.670489][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.677915][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.680124][ T3497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.685413][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.705299][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.712686][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.720130][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.727530][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.734962][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.742347][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.749801][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.757215][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.764629][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.772025][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.779440][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.786842][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.794223][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.802799][ T3380] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.802986][ T3490] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.15: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.837554][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 54.867781][ T3490] EXT4-fs error (device loop0): ext4_quota_enable:7115: comm syz.0.15: Bad quota inode: 3, type: 0 [ 54.887391][ T3490] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.908746][ T3490] EXT4-fs (loop0): mount failed [ 54.933804][ T3521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 54.946760][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.992569][ T3521] batadv1: entered promiscuous mode [ 55.008937][ T3521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.192255][ T3549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28'. [ 55.211348][ T3549] batadv1: entered promiscuous mode [ 55.217480][ T3549] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.267737][ T3551] capability: warning: `syz.1.30' uses 32-bit capabilities (legacy support in use) [ 55.324409][ T3551] Falling back ldisc for ttyS3. [ 55.335041][ T3560] syz.2.29[3560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.335095][ T3560] syz.2.29[3560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.352677][ T3560] syz.2.29[3560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.382449][ T3560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29'. [ 55.416716][ T3560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29'. [ 55.418016][ T3575] batman_adv: batadv0: Adding interface: dummy0 [ 55.431952][ T3575] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.458978][ T3575] batman_adv: batadv0: Interface activated: dummy0 [ 55.472259][ T3549] syz.4.28 (3549) used greatest stack depth: 10648 bytes left [ 55.517489][ T3560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29'. [ 55.536910][ T3584] syz.1.35[3584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.537052][ T3584] syz.1.35[3584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.546497][ T3565] batadv0: mtu less than device minimum [ 55.562205][ T3584] syz.1.35[3584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.565457][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.578273][ T3584] netlink: 44 bytes leftover after parsing attributes in process `syz.1.35'. [ 55.587308][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.606369][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.616991][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.627667][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.638402][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.649025][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.659884][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.670679][ T3565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.754619][ T3584] netlink: 44 bytes leftover after parsing attributes in process `syz.1.35'. [ 55.773237][ T3608] loop2: detected capacity change from 0 to 4096 [ 55.797571][ T3608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.820797][ T3608] Zero length message leads to an empty skb [ 55.871883][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.946791][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.954249][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.961672][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.015099][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.022537][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.029998][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.037490][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.044965][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.052347][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.058606][ T3629] syz.1.45[3629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.059787][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.078393][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.085890][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.093270][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.100929][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.142455][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.149932][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.157431][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.164937][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.172317][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.179829][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.187231][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.194703][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.202193][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.209599][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.217047][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.224449][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.231894][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.239303][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.246871][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.254255][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.269953][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 56.330527][ T3645] batadv1: entered promiscuous mode [ 56.336722][ T3645] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 56.589437][ T3661] netlink: 'syz.2.57': attribute type 15 has an invalid length. [ 56.696336][ T3676] netlink: 'syz.4.63': attribute type 15 has an invalid length. [ 56.775404][ T3689] netlink: 'syz.1.69': attribute type 15 has an invalid length. [ 56.822382][ T3696] syz.4.71[3696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.822484][ T3696] syz.4.71[3696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.834368][ T3696] syz.4.71[3696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.903678][ T3697] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.935635][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.943187][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.950629][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.961087][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.968564][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.976145][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.983633][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.991090][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.998491][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.005878][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.013324][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.020823][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.028244][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.035666][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.044119][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.051774][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.059199][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.066614][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.074048][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.081530][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.088935][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.096472][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.103889][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.111292][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.118831][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.126262][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.133709][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.141120][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.148525][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.155899][ T3378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.167643][ T3378] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 57.350518][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.357960][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.365502][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.373003][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.380537][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.388035][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.395553][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.402942][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.410497][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.417968][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.425438][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.432863][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.440383][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.447814][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.455384][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.462812][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.470269][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.477761][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.485165][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.492551][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.500011][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.507536][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.514942][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.522330][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.529975][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.537644][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.545129][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.552591][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.560164][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.567698][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.586603][ T8] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.126880][ T3755] batadv1: entered promiscuous mode [ 58.132878][ T3755] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 58.419855][ T3778] netlink: 'syz.4.102': attribute type 15 has an invalid length. [ 58.525376][ T3784] loop4: detected capacity change from 0 to 512 [ 58.562955][ T3784] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.104: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 58.643685][ T3784] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.104: Bad quota inode: 3, type: 0 [ 58.670425][ T3784] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.775852][ T3784] EXT4-fs (loop4): mount failed [ 58.831530][ T29] kauditd_printk_skb: 6836 callbacks suppressed [ 58.831543][ T29] audit: type=1326 audit(1734182422.818:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 58.914399][ T29] audit: type=1326 audit(1734182422.858:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 58.937867][ T29] audit: type=1326 audit(1734182422.858:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 58.961236][ T29] audit: type=1326 audit(1734182422.858:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 58.984778][ T29] audit: type=1326 audit(1734182422.858:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 59.008220][ T29] audit: type=1326 audit(1734182422.858:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 59.031599][ T29] audit: type=1326 audit(1734182422.858:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 59.055201][ T29] audit: type=1326 audit(1734182422.858:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 59.078782][ T29] audit: type=1326 audit(1734182422.858:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 59.102107][ T29] audit: type=1326 audit(1734182422.858:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 59.404669][ T3795] netlink: 'syz.1.106': attribute type 27 has an invalid length. [ 59.496266][ T3814] __nla_validate_parse: 19 callbacks suppressed [ 59.496281][ T3814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.112'. [ 59.511893][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.519189][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.609542][ T3819] netlink: 100 bytes leftover after parsing attributes in process `syz.3.114'. [ 59.737585][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.759338][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.801270][ T3795] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.810211][ T3795] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.819144][ T3795] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.828084][ T3795] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.927554][ T3817] batadv1: entered promiscuous mode [ 59.945123][ T3817] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 59.972799][ T3820] batadv1: entered promiscuous mode [ 59.988312][ T3820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 60.386087][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.393510][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.401012][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.438995][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.446522][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.453915][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.461345][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.468801][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.476220][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.483682][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.491086][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.498506][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.505912][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.513315][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.537439][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.544906][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.552307][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.559806][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.567299][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.574724][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.582288][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.589709][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.597110][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.604560][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.611943][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.619347][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.626775][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.634178][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.641575][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.648985][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 60.658212][ T3379] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 60.735748][ T3851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 60.747560][ T3853] netlink: 100 bytes leftover after parsing attributes in process `syz.0.126'. [ 60.761264][ T3851] batadv1: entered promiscuous mode [ 60.768496][ T3851] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 60.805834][ T3853] batadv1: entered promiscuous mode [ 60.812096][ T3853] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 61.020723][ T3859] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.127'. [ 61.047178][ T3858] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.127'. [ 61.308619][ T3863] netlink: 'syz.0.129': attribute type 27 has an invalid length. [ 61.325247][ T3872] bpf_get_probe_write_proto: 39 callbacks suppressed [ 61.325262][ T3872] syz.4.133[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.343983][ T3872] syz.4.133[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.370421][ T3872] syz.4.133[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.452171][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.470713][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.503403][ T3877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'. [ 61.564146][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.583413][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.624496][ T3863] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.633440][ T3863] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.642494][ T3863] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.651640][ T3863] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.694024][ T3880] netlink: 'syz.3.135': attribute type 15 has an invalid length. [ 61.712843][ T3885] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 61.768695][ T3887] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 61.860409][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.867958][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.875406][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.905453][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.912936][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.920381][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.927814][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.935221][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.942618][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.950066][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.957487][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.964895][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.972423][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.979836][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.987490][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.994914][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.002422][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.009931][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.017353][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.024859][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.032260][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.039754][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.047168][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.054641][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.062021][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.069429][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.076860][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.084240][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.091765][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.099174][ T1045] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.206332][ T1045] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.496286][ T3917] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.147'. [ 62.537783][ T3915] netlink: 'syz.4.150': attribute type 4 has an invalid length. [ 62.545569][ T3913] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.147'. [ 62.614721][ T3917] IPv6: Can't replace route, no match found [ 62.638428][ T3915] syz.4.150 (3915) used greatest stack depth: 10264 bytes left [ 62.669870][ T3923] syz.1.153[3923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.670390][ T3923] syz.1.153[3923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.696900][ T3923] syz.1.153[3923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.784068][ T3924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 62.856050][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.863671][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.871101][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.907273][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.914718][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.922172][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.930121][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.937663][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.945154][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.952582][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.960017][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.967498][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.975011][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.982914][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.990572][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 62.997989][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.005424][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.012812][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.020229][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.027659][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.035063][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.042458][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.049972][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.057368][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.064808][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.072245][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.079736][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.087213][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.094291][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.094636][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.102044][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.109389][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.124173][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.130359][ T3379] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.155608][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.163076][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.170531][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.178001][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.185415][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.192901][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.200437][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.207906][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.215323][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.216767][ T3938] ======================================================= [ 63.216767][ T3938] WARNING: The mand mount option has been deprecated and [ 63.216767][ T3938] and is ignored by this kernel. Remove the mand [ 63.216767][ T3938] option from the mount to silence this warning. [ 63.216767][ T3938] ======================================================= [ 63.222720][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.265001][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.280589][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.288040][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.295460][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.302938][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.302963][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.302985][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303005][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303024][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303095][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303116][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303136][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303155][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303173][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303196][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303290][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.303311][ T3357] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 63.328737][ T3357] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.821972][ T3950] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 63.871345][ T29] kauditd_printk_skb: 1717 callbacks suppressed [ 63.871400][ T29] audit: type=1326 audit(1734182427.858:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 63.934765][ T3956] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 63.938188][ T29] audit: type=1326 audit(1734182427.858:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 63.966237][ T29] audit: type=1326 audit(1734182427.858:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 63.989756][ T29] audit: type=1326 audit(1734182427.858:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.013119][ T29] audit: type=1326 audit(1734182427.858:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.026498][ T3960] syz.3.167[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.036606][ T29] audit: type=1326 audit(1734182427.858:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.049394][ T3960] syz.3.167[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.071352][ T29] audit: type=1326 audit(1734182427.858:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.105943][ T29] audit: type=1326 audit(1734182427.858:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.129286][ T29] audit: type=1326 audit(1734182427.858:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.152685][ T29] audit: type=1326 audit(1734182427.858:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1bf5d19 code=0x7ffc0000 [ 64.184474][ T3960] syz.3.167[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.334453][ T3964] 9pnet: Could not find request transport: 0xffffffffffffffff [ 64.385344][ T3971] kernel profiling enabled (shift: 17) [ 64.392683][ T3971] FAULT_INJECTION: forcing a failure. [ 64.392683][ T3971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.405884][ T3971] CPU: 0 UID: 0 PID: 3971 Comm: syz.2.171 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 64.416539][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.426677][ T3971] Call Trace: [ 64.429960][ T3971] [ 64.432896][ T3971] dump_stack_lvl+0xf2/0x150 [ 64.437544][ T3971] dump_stack+0x15/0x1a [ 64.441746][ T3971] should_fail_ex+0x223/0x230 [ 64.446427][ T3971] should_fail+0xb/0x10 [ 64.450585][ T3971] should_fail_usercopy+0x1a/0x20 [ 64.455616][ T3971] _copy_to_user+0x20/0xa0 [ 64.459787][ T3975] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 64.460033][ T3971] simple_read_from_buffer+0xa0/0x110 [ 64.466517][ T3975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.471857][ T3971] proc_fail_nth_read+0xf9/0x140 [ 64.479460][ T3975] vhci_hcd vhci_hcd.0: Device attached [ 64.484282][ T3971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.484311][ T3971] vfs_read+0x1a2/0x700 [ 64.499503][ T3971] ? __rcu_read_unlock+0x4e/0x70 [ 64.504449][ T3971] ? __fget_files+0x17c/0x1c0 [ 64.509142][ T3971] ksys_read+0xe8/0x1b0 [ 64.513332][ T3971] __x64_sys_read+0x42/0x50 [ 64.517842][ T3971] x64_sys_call+0x2874/0x2dc0 [ 64.522560][ T3971] do_syscall_64+0xc9/0x1c0 [ 64.527083][ T3971] ? clear_bhb_loop+0x55/0xb0 [ 64.531846][ T3971] ? clear_bhb_loop+0x55/0xb0 [ 64.533288][ T3977] vhci_hcd: connection closed [ 64.536517][ T3971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.541708][ T3402] vhci_hcd: stop threads [ 64.547079][ T3971] RIP: 0033:0x7fbeccd8472c [ 64.547101][ T3971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.547117][ T3971] RSP: 002b:00007fbecb3f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.547138][ T3971] RAX: ffffffffffffffda RBX: 00007fbeccf75fa0 RCX: 00007fbeccd8472c [ 64.551364][ T3402] vhci_hcd: release socket [ 64.555748][ T3971] RDX: 000000000000000f RSI: 00007fbecb3f70a0 RDI: 0000000000000009 [ 64.555762][ T3971] RBP: 00007fbecb3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.555776][ T3971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.575357][ T3402] vhci_hcd: disconnect device [ 64.583727][ T3971] R13: 0000000000000000 R14: 00007fbeccf75fa0 R15: 00007ffd0a108dc8 [ 64.632701][ T3971] [ 64.692894][ T3986] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 64.724084][ T3988] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 64.836644][ T3993] netlink: 'syz.4.179': attribute type 15 has an invalid length. [ 64.968769][ T4000] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 65.160171][ T4007] loop4: detected capacity change from 0 to 512 [ 65.198123][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.211244][ T4007] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.222098][ T4007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.334810][ T4024] loop4: detected capacity change from 0 to 128 [ 65.353030][ T4024] syz.4.190: attempt to access beyond end of device [ 65.353030][ T4024] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 65.369543][ T4024] FAULT_INJECTION: forcing a failure. [ 65.369543][ T4024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.382605][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.4.190 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 65.393297][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.403488][ T4024] Call Trace: [ 65.406760][ T4024] [ 65.409724][ T4024] dump_stack_lvl+0xf2/0x150 [ 65.414319][ T4024] dump_stack+0x15/0x1a [ 65.418540][ T4024] should_fail_ex+0x223/0x230 [ 65.423314][ T4024] should_fail+0xb/0x10 [ 65.427465][ T4024] should_fail_usercopy+0x1a/0x20 [ 65.432535][ T4024] _copy_from_user+0x1e/0xb0 [ 65.437137][ T4024] kstrtouint_from_user+0x76/0xe0 [ 65.442190][ T4024] ? 0xffffffff81000000 [ 65.446345][ T4024] ? selinux_file_permission+0x22a/0x360 [ 65.451980][ T4024] proc_fail_nth_write+0x4f/0x150 [ 65.457152][ T4024] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.462788][ T4024] vfs_write+0x281/0x920 [ 65.467094][ T4024] ? __fget_files+0x17c/0x1c0 [ 65.471801][ T4024] ksys_write+0xe8/0x1b0 [ 65.476135][ T4024] __x64_sys_write+0x42/0x50 [ 65.480726][ T4024] x64_sys_call+0x287e/0x2dc0 [ 65.485402][ T4024] do_syscall_64+0xc9/0x1c0 [ 65.489944][ T4024] ? clear_bhb_loop+0x55/0xb0 [ 65.494726][ T4024] ? clear_bhb_loop+0x55/0xb0 [ 65.499637][ T4024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.505552][ T4024] RIP: 0033:0x7f2da1bf47cf [ 65.509956][ T4024] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 65.529558][ T4024] RSP: 002b:00007f2da0246030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 65.537968][ T4024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2da1bf47cf [ 65.545939][ T4024] RDX: 0000000000000001 RSI: 00007f2da02460a0 RDI: 0000000000000009 [ 65.553901][ T4024] RBP: 00007f2da0246090 R08: 0000000000000000 R09: 0000000000000000 [ 65.561864][ T4024] R10: 0000000000004100 R11: 0000000000000293 R12: 0000000000000001 [ 65.569869][ T4024] R13: 0000000000000000 R14: 00007f2da1de6080 R15: 00007ffe691f58b8 [ 65.577837][ T4024] [ 65.624385][ T4031] __nla_validate_parse: 1 callbacks suppressed [ 65.624458][ T4031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.193'. [ 65.648936][ T4031] batadv1: entered promiscuous mode [ 65.655056][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 65.669625][ T4035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 65.686913][ T4035] batadv1: entered promiscuous mode [ 65.692848][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 65.846258][ C1] net_ratelimit: 10 callbacks suppressed [ 65.846277][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.947742][ T4051] loop4: detected capacity change from 0 to 512 [ 65.966935][ T4051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.982855][ T4051] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.170343][ T4065] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.201'. [ 66.201718][ T4067] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 66.216878][ T4062] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.201'. [ 66.263628][ T4068] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.201: corrupted inode contents [ 66.293278][ T4062] IPv6: Can't replace route, no match found [ 66.299801][ T4068] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.201: mark_inode_dirty error [ 66.328165][ T4068] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.201: corrupted inode contents [ 66.342217][ T4068] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.201: mark_inode_dirty error [ 66.356260][ T4068] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.201: mark inode dirty (error -117) [ 66.370042][ T4076] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 66.380302][ T4073] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 66.390074][ T4068] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 66.720554][ T4082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 66.745226][ T4082] batadv1: entered promiscuous mode [ 66.751865][ T4082] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 66.898075][ T4084] netlink: 'syz.2.211': attribute type 15 has an invalid length. [ 67.356846][ T4097] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 67.708787][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.974515][ T4122] netlink: 'syz.0.223': attribute type 15 has an invalid length. [ 68.039234][ T4128] syz.0.226[4128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.079465][ T4128] syz.0.226[4128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.091860][ T4128] syz.0.226[4128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.115612][ T4128] syz.0.226[4128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.129583][ T4130] syz.3.227[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.137263][ T4132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 68.141018][ T4130] syz.3.227[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.161081][ T4130] syz.3.227[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.166628][ T4128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 68.220979][ T4130] syz.3.227[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.221116][ T4130] syz.3.227[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.234141][ T4130] syz.3.227[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.251568][ T4130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 68.313006][ T4132] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 68.363420][ T4146] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 68.370208][ T4145] netlink: 'syz.3.234': attribute type 10 has an invalid length. [ 68.382018][ T4145] team0: Device hsr_slave_0 failed to register rx_handler [ 68.407111][ T4148] batadv1: entered promiscuous mode [ 68.412711][ T4148] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 68.636525][ T4156] IPv6: Can't replace route, no match found [ 68.779688][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.787122][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.794620][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.803201][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.810752][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.818371][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.825917][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.833334][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.840852][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.848261][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.855754][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.863135][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.870553][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.878006][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.885854][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.893276][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.900773][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.908238][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.915750][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.923152][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.930760][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.938182][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.945722][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.953128][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.960596][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.967998][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.975479][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.982948][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.990366][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 68.993658][ T4174] loop4: detected capacity change from 0 to 256 [ 68.997771][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 69.013273][ T29] kauditd_printk_skb: 831 callbacks suppressed [ 69.013287][ T29] audit: type=1400 audit(1734182433.008:9524): avc: denied { mounton } for pid=4171 comm="syz.4.244" path="/48/file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.019222][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 69.062034][ T4174] FAT-fs (loop4): Directory bread(block 64) failed [ 69.080869][ T4174] FAT-fs (loop4): Directory bread(block 65) failed [ 69.091933][ T4174] FAT-fs (loop4): Directory bread(block 66) failed [ 69.099709][ T4174] FAT-fs (loop4): Directory bread(block 67) failed [ 69.106462][ T4174] FAT-fs (loop4): Directory bread(block 68) failed [ 69.113041][ T4174] FAT-fs (loop4): Directory bread(block 69) failed [ 69.121771][ T4174] FAT-fs (loop4): Directory bread(block 70) failed [ 69.135843][ T4178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.149401][ T29] audit: type=1400 audit(1734182433.118:9525): avc: denied { create } for pid=4179 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.169057][ T29] audit: type=1400 audit(1734182433.118:9526): avc: denied { create } for pid=4179 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.188607][ T29] audit: type=1400 audit(1734182433.118:9527): avc: denied { setopt } for pid=4179 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.208161][ T29] audit: type=1400 audit(1734182433.128:9528): avc: denied { create } for pid=4177 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.214422][ T4174] FAT-fs (loop4): Directory bread(block 71) failed [ 69.227670][ T29] audit: type=1400 audit(1734182433.138:9529): avc: denied { create } for pid=4179 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.236747][ T4174] FAT-fs (loop4): Directory bread(block 72) failed [ 69.254148][ T29] audit: type=1400 audit(1734182433.218:9530): avc: denied { ioctl } for pid=4177 comm="syz.1.246" path="socket:[6031]" dev="sockfs" ino=6031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.292962][ T4174] FAT-fs (loop4): Directory bread(block 73) failed [ 69.303704][ T29] audit: type=1400 audit(1734182433.298:9531): avc: denied { create } for pid=4179 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.358676][ T29] audit: type=1400 audit(1734182433.298:9532): avc: denied { ioctl } for pid=4179 comm="syz.2.247" path="socket:[6863]" dev="sockfs" ino=6863 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.383407][ T29] audit: type=1400 audit(1734182433.298:9533): avc: denied { connect } for pid=4179 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.616272][ T4207] netlink: 'syz.2.258': attribute type 15 has an invalid length. [ 69.764172][ T4221] loop4: detected capacity change from 0 to 512 [ 69.806356][ T4221] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.264: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 69.841771][ T4221] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.264: Bad quota inode: 3, type: 0 [ 69.871519][ T4221] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.902993][ T4221] EXT4-fs (loop4): mount failed [ 69.960998][ T3303] cgroup: fork rejected by pids controller in /syz4 [ 70.388278][ T4251] netlink: 'syz.1.271': attribute type 15 has an invalid length. [ 70.440188][ T4239] chnl_net:caif_netlink_parms(): no params data found [ 70.498012][ T4260] batadv1: entered promiscuous mode [ 70.503707][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 70.560017][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.567134][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.567188][ T4270] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 70.583189][ T4239] bridge_slave_0: entered allmulticast mode [ 70.599168][ T4239] bridge_slave_0: entered promiscuous mode [ 70.613224][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.620403][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.628699][ T4265] ================================================================== [ 70.636793][ T4265] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 70.643820][ T4265] [ 70.646135][ T4265] write to 0xffff888118277440 of 8 bytes by task 4261 on cpu 1: [ 70.653758][ T4265] shmem_fallocate+0x22e/0x860 [ 70.658527][ T4265] vfs_fallocate+0x368/0x3b0 [ 70.663116][ T4265] do_madvise+0x14bd/0x2a70 [ 70.667611][ T4265] __x64_sys_madvise+0x61/0x70 [ 70.672364][ T4265] x64_sys_call+0x23ab/0x2dc0 [ 70.677030][ T4265] do_syscall_64+0xc9/0x1c0 [ 70.681523][ T4265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.687417][ T4265] [ 70.689734][ T4265] read to 0xffff888118277440 of 8 bytes by task 4265 on cpu 0: [ 70.697266][ T4265] shmem_fault+0x97/0x250 [ 70.701587][ T4265] __do_fault+0xb6/0x200 [ 70.705822][ T4265] handle_mm_fault+0xe98/0x2ac0 [ 70.710660][ T4265] __get_user_pages+0xf2c/0x2670 [ 70.715591][ T4265] __mm_populate+0x25b/0x3b0 [ 70.720172][ T4265] vm_mmap_pgoff+0x1d6/0x290 [ 70.724761][ T4265] ksys_mmap_pgoff+0xd0/0x330 [ 70.729442][ T4265] x64_sys_call+0x1940/0x2dc0 [ 70.734111][ T4265] do_syscall_64+0xc9/0x1c0 [ 70.738603][ T4265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.744497][ T4265] [ 70.746806][ T4265] value changed: 0x0000000000000000 -> 0xffffc90000ef3ca8 [ 70.753896][ T4265] [ 70.756205][ T4265] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 70.762335][ T4265] CPU: 0 UID: 0 PID: 4265 Comm: syz.3.275 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 70.772912][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.782957][ T4265] ================================================================== [ 70.791249][ T4239] bridge_slave_1: entered allmulticast mode [ 70.797877][ T4239] bridge_slave_1: entered promiscuous mode [ 70.893390][ T4272] FAULT_INJECTION: forcing a failure. [ 70.893390][ T4272] name failslab, interval 1, probability 0, space 0, times 0 [ 70.906100][ T4272] CPU: 1 UID: 0 PID: 4272 Comm: syz.2.278 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 70.916694][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.926799][ T4272] Call Trace: [ 70.930077][ T4272] [ 70.933022][ T4272] dump_stack_lvl+0xf2/0x150 [ 70.937656][ T4272] dump_stack+0x15/0x1a [ 70.941882][ T4272] should_fail_ex+0x223/0x230 [ 70.946547][ T4272] should_failslab+0x8f/0xb0 [ 70.951164][ T4272] kmem_cache_alloc_noprof+0x52/0x320 [ 70.956519][ T4272] ? skb_clone+0x154/0x1f0 [ 70.960918][ T4272] skb_clone+0x154/0x1f0 [ 70.965162][ T4272] __netlink_deliver_tap+0x2bd/0x4f0 [ 70.970458][ T4272] netlink_sendskb+0x126/0x150 [ 70.975201][ T4272] netlink_unicast+0x291/0x670 [ 70.980041][ T4272] netlink_ack+0x4bb/0x4f0 [ 70.984454][ T4272] netlink_rcv_skb+0x19c/0x230 [ 70.989232][ T4272] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.994752][ T4272] rtnetlink_rcv+0x1c/0x30 [ 70.999147][ T4272] netlink_unicast+0x599/0x670 [ 71.003978][ T4272] netlink_sendmsg+0x5cc/0x6e0 [ 71.008734][ T4272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.014011][ T4272] __sock_sendmsg+0x140/0x180 [ 71.018706][ T4272] ____sys_sendmsg+0x312/0x410 [ 71.023526][ T4272] __sys_sendmsg+0x19d/0x230 [ 71.028134][ T4272] __x64_sys_sendmsg+0x46/0x50 [ 71.032944][ T4272] x64_sys_call+0x2734/0x2dc0 [ 71.037609][ T4272] do_syscall_64+0xc9/0x1c0 [ 71.042098][ T4272] ? clear_bhb_loop+0x55/0xb0 [ 71.046762][ T4272] ? clear_bhb_loop+0x55/0xb0 [ 71.051491][ T4272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.057370][ T4272] RIP: 0033:0x7fbeccd85d19 [ 71.061762][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.081363][ T4272] RSP: 002b:00007fbecb3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.089866][ T4272] RAX: ffffffffffffffda RBX: 00007fbeccf75fa0 RCX: 00007fbeccd85d19 [ 71.097908][ T4272] RDX: 0000000004000010 RSI: 0000000020001200 RDI: 0000000000000003 [ 71.105864][ T4272] RBP: 00007fbecb3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.113814][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.121768][ T4272] R13: 0000000000000000 R14: 00007fbeccf75fa0 R15: 00007ffd0a108dc8 [ 71.129728][ T4272] [ 71.365362][ T52] bridge_slave_1: left allmulticast mode [ 71.371058][ T52] bridge_slave_1: left promiscuous mode [ 71.376729][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.384185][ T52] bridge_slave_0: left allmulticast mode [ 71.389921][ T52] bridge_slave_0: left promiscuous mode [ 71.395635][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.469146][ T52] bond0 (unregistering): Released all slaves [ 72.074532][ T52] bridge_slave_1: left allmulticast mode [ 72.080167][ T52] bridge_slave_1: left promiscuous mode [ 72.085752][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.093258][ T52] bridge_slave_0: left allmulticast mode [ 72.098903][ T52] bridge_slave_0: left promiscuous mode [ 72.104661][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.166769][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.175763][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.184714][ T52] bond0 (unregistering): Released all slaves [ 72.237346][ T52] hsr_slave_0: left promiscuous mode [ 72.243077][ T52] hsr_slave_1: left promiscuous mode [ 72.248856][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.256376][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.284124][ T52] team0 (unregistering): Port device team_slave_1 removed [ 72.293400][ T52] team0 (unregistering): Port device team_slave_0 removed