last executing test programs: 4.996741724s ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usbip_server_init(0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f214, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0xfffffffd, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x4004850) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) sync_file_range(r7, 0x5d, 0x6, 0x3) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r8) 3.729854467s ago: executing program 4 (id=469): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.390351327s ago: executing program 4 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usbip_server_init(0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f214, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0xfffffffd, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x4004850) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) sync_file_range(r7, 0x5d, 0x6, 0x3) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r8) 3.101605167s ago: executing program 3 (id=479): pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r7, 0x2004, 0x0) 3.034473959s ago: executing program 0 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8d89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fdcbdf250100000014000700ff010000000000000000000000000001050002000a0000005a0cf16cfd63a0eb6ed12f4e579606b04407bcc10bc16f257f6f76fe9e1916b52db95877d8fa2e80f8412b6a2ded12a053fef622ac"], 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x8}}, 0x1, 0x8001}, &(0x7f0000000040)=0x90) syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x10000, 0x5d2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x5, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc38, 0x3, 0x1, 0x6, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffbfffff, 0x400, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_opts(r7, 0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000200)) 2.625142253s ago: executing program 1 (id=483): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) syz_clone3(&(0x7f00000006c0)={0x10000800, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0, {0x32}, &(0x7f0000000400)=""/170, 0xaa, &(0x7f0000000600)=""/153, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x1, 0x4, 0x4, 0x1, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x8000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) mmap(&(0x7f0000fa2000/0x5000)=nil, 0x5000, 0x3, 0x13, r6, 0x3ed78000) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', r7, 0x80, 0x10, 0x2, 0x0, {{0x5, 0x4, 0x2, 0x1f, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @broadcast}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0xe5, "296829595dceaa35ec3f6a3d1961701a5266114ed68c4e0bb66c2ee1a9acacaf3ecc430439445ae947257690f3b895f9a9dcdc891f8c5124c317f09b8a2a23a236c454d09bcb11fd516817e2286ded4e981016581ea967a6d54e471f102bca2e3c5c298df74673748acef68ef576ef2aca9d6b205c2ee07eb5787353f0d9e5b4384134720d5caaabedc573fca9eb8dfed4a2c2716e225f70e5dc8e64d8ec3f8de2ccaa6154fd18a96606e5b802682dd1234fca965e55ad7a403335cae5a0191aa6e91660a7750e2aecd12ea3c9c1e4630fcfd19d124757289affce470c3a5ca79ae76075c2"}, &(0x7f0000000880)=0x109) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 2.4100238s ago: executing program 4 (id=484): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.324390642s ago: executing program 2 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) syz_clone3(&(0x7f00000006c0)={0x10000800, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0, {0x32}, &(0x7f0000000400)=""/170, 0xaa, &(0x7f0000000600)=""/153, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x1, 0x4, 0x4, 0x1, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x8000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x5000)=nil, 0x5000, 0x3, 0x13, r6, 0x3ed78000) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', r7, 0x80, 0x10, 0x2, 0x0, {{0x5, 0x4, 0x2, 0x1f, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @broadcast}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0xe5, "296829595dceaa35ec3f6a3d1961701a5266114ed68c4e0bb66c2ee1a9acacaf3ecc430439445ae947257690f3b895f9a9dcdc891f8c5124c317f09b8a2a23a236c454d09bcb11fd516817e2286ded4e981016581ea967a6d54e471f102bca2e3c5c298df74673748acef68ef576ef2aca9d6b205c2ee07eb5787353f0d9e5b4384134720d5caaabedc573fca9eb8dfed4a2c2716e225f70e5dc8e64d8ec3f8de2ccaa6154fd18a96606e5b802682dd1234fca965e55ad7a403335cae5a0191aa6e91660a7750e2aecd12ea3c9c1e4630fcfd19d124757289affce470c3a5ca79ae76075c2"}, &(0x7f0000000880)=0x109) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 2.241311406s ago: executing program 4 (id=486): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.157910138s ago: executing program 4 (id=487): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e690230000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000700)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@utf8}, {@shortname_win95}, {@fat=@usefree}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@fat=@discard}, {@shortname_lower}, {@numtail}, {@rodir}, {@shortname_winnt}, {@shortname_win95}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x36f, &(0x7f0000000a40)="$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") r1 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000002117ae96fd1991d45178804da4236bb926b94641057e2468ecffda9b8bd0aee74839ee643f7432bb3a3ce445eaaea3b90d0f4ca6360dd2dcce1ad0c08d254579f8d3fb620807b59ed8c80d5aff29e42ad943dcfd812245fab5774d5b1e3c6c70e47067a47e7e706bde8c0ff08d26df3defe9d909a550b803c259096600b5800823f338f44dd1", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') cachestat(r8, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0x10e0}}, 0x0) 2.039634272s ago: executing program 3 (id=488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_receive\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) mprotect(&(0x7f000021e000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket(0x40000000015, 0x5, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c00"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) r9 = dup(r7) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 2.002773523s ago: executing program 3 (id=489): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f214, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0xfffffffd, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd810800"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) creat(&(0x7f00000000c0)='./file0\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.973122394s ago: executing program 3 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8d89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fdcbdf250100000014000700ff010000000000000000000000000001050002000a0000005a0cf16cfd63a0eb6ed12f4e579606b04407bcc10bc16f257f6f76fe9e1916b52db95877d8fa2e80f8412b6a2ded12a053fef622ac"], 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x8}}, 0x1, 0x8001}, &(0x7f0000000040)=0x90) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x10000, 0x5d2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x5, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc38, 0x3, 0x1, 0x6, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffbfffff, 0x400, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000200)) 1.832469739s ago: executing program 0 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_receive\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) mprotect(&(0x7f000021e000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket(0x40000000015, 0x5, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c00"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) r9 = dup(r7) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 1.80325594s ago: executing program 0 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usbip_server_init(0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f214, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0xfffffffd, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x4004850) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) sync_file_range(r7, 0x5d, 0x6, 0x3) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r8) 1.761133661s ago: executing program 1 (id=493): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.607052306s ago: executing program 1 (id=494): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.545404558s ago: executing program 1 (id=495): r0 = socket(0x1a, 0x803, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000000)={0x4400, 0x0, 0x10}, 0x18) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma '], 0xe) bind$llc(r5, &(0x7f0000000080)={0x1a, 0x103, 0x10, 0x6, 0x2, 0x8, @local}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40851}, 0x0) 1.466910101s ago: executing program 2 (id=496): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.361281084s ago: executing program 2 (id=497): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x40800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, 0x0, 0x0, 0x20040000, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103600, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000"], &(0x7f0000000040)='GPL\x00', 0xee, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) shutdown(r3, 0x1) 1.19912871s ago: executing program 2 (id=498): pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r7, 0x2004, 0x0) 1.113863542s ago: executing program 3 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usbip_server_init(0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f214, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0xfffffffd, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x4004850) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) sync_file_range(r7, 0x5d, 0x6, 0x3) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r8) 1.034788355s ago: executing program 0 (id=500): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0xf5}, {&(0x7f0000000680)="5ffc", 0x2}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000153931c2cd61d56b67a39de054ec09823dbb5cb65f38d09e23d150e526c9f104668c779391815e8cffdf5d1c4d1e4fcac799428e4721e2d72b3a2bd2c67cdd2ca20c8f3634982b4cf8736a4e2cf9800fbc676ad34e0cfbe2eae4bc4a20c3a5e63c494c49420e554faf419a4651886944a7b066cfba971338d151e518c05882bb337b8abedb8a05f5a9457c02aa0857192f4dc6fa2c8bae49c74ac8d9ee53337e7aa1829053f2ea04912200d2dc"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0x8000000}, 0x10}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x490080, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) r5 = dup(0xffffffffffffffff) fcntl$setstatus(r5, 0x4, 0x42000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}}) chdir(0x0) open(0x0, 0x2782, 0x1c0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) close(r6) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)}], 0x1) ioctl$SNAPSHOT_FREE(r7, 0x3305) 620.550139ms ago: executing program 1 (id=501): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bf4ac2e6651c09429c5e6b84576bc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 545.674261ms ago: executing program 1 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usbip_server_init(0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f214, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0xfffffffd, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x4004850) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) sync_file_range(r7, 0x5d, 0x6, 0x3) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r8) 349.969468ms ago: executing program 3 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8d89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x8}}, 0x1, 0x8001}, &(0x7f0000000040)=0x90) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x10000, 0x5d2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x5, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc38, 0x3, 0x1, 0x6, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffbfffff, 0x400, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000200)) 261.75493ms ago: executing program 2 (id=504): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bf4ac2e6651c09429c5e6b84576bc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 174.920954ms ago: executing program 0 (id=505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_receive\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) mprotect(&(0x7f000021e000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket(0x40000000015, 0x5, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c00"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r4}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) r9 = dup(r7) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 49.270838ms ago: executing program 2 (id=506): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 0s ago: executing program 0 (id=507): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0xf5}, {&(0x7f0000000680)="5ffc", 0x2}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000153931c2cd61d56b67a39de054ec09823dbb5cb65f38d09e23d150e526c9f104668c779391815e8cffdf5d1c4d1e4fcac799428e4721e2d72b3a2bd2c67cdd2ca20c8f3634982b4cf8736a4e2cf9800fbc676ad34e0cfbe2eae4bc4a20c3a5e63c494c49420e554faf419a4651886944a7b066cfba971338d151e518c05882bb337b8abedb8a05f5a9457c02aa0857192f4dc6fa2c8bae49c74ac8d9ee53337e7aa1829053f2ea04912200d2dc"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0x8000000}, 0x10}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x490080, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) r5 = dup(0xffffffffffffffff) fcntl$setstatus(r5, 0x4, 0x42000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}}) chdir(0x0) open(0x0, 0x2782, 0x1c0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) close(r6) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0), 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) kernel console output (not intermixed with test programs): vsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.198855][ T1649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.222459][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.261733][ T1649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.290440][ T1649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.299942][ T1649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.314932][ T1649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.356208][ T3501] vhci_hcd: vhci_device speed not set [ 42.357709][ T1649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.395268][ T1636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.412281][ T1636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.424312][ T3513] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 42.430882][ T3513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.435376][ T1636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.438454][ T3513] vhci_hcd vhci_hcd.0: Device attached [ 42.469308][ T3501] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 42.478206][ T3503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 42.646863][ T3506] vhci_hcd: vhci_device speed not set [ 42.657769][ T3498] vhci_hcd: connection reset by peer [ 42.664108][ T971] vhci_hcd: stop threads [ 42.668471][ T971] vhci_hcd: release socket [ 42.672915][ T971] vhci_hcd: disconnect device [ 42.706194][ T3506] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 42.973691][ T3516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 43.142934][ T3522] loop1: detected capacity change from 0 to 128 [ 43.190072][ T3514] vhci_hcd: connection reset by peer [ 43.195795][ T971] vhci_hcd: stop threads [ 43.200196][ T971] vhci_hcd: release socket [ 43.204637][ T971] vhci_hcd: disconnect device [ 43.261469][ T3522] netlink: 'syz.1.6': attribute type 39 has an invalid length. [ 43.373784][ T3528] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 43.405329][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 43.481566][ T3527] loop4: detected capacity change from 0 to 512 [ 43.488930][ T3527] ======================================================= [ 43.488930][ T3527] WARNING: The mand mount option has been deprecated and [ 43.488930][ T3527] and is ignored by this kernel. Remove the mand [ 43.488930][ T3527] option from the mount to silence this warning. [ 43.488930][ T3527] ======================================================= [ 43.529828][ T3527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.543702][ T3527] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.8: Parent and EA inode have the same ino 15 [ 43.557714][ T3527] EXT4-fs (loop4): Remounting filesystem read-only [ 43.564326][ T3527] EXT4-fs (loop4): 1 orphan inode deleted [ 43.570769][ T3527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.637870][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.775230][ T3540] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.888288][ T3539] loop3: detected capacity change from 0 to 128 [ 43.971921][ T3539] netlink: 'syz.3.10': attribute type 39 has an invalid length. [ 44.048517][ T3544] loop2: detected capacity change from 0 to 128 [ 44.137908][ T3544] netlink: 'syz.2.11': attribute type 39 has an invalid length. [ 44.292122][ T3549] loop2: detected capacity change from 0 to 128 [ 44.375060][ T3549] netlink: 'syz.2.13': attribute type 39 has an invalid length. [ 44.550012][ T3553] loop2: detected capacity change from 0 to 512 [ 44.589969][ T3553] vfat: Bad value for 'uni_xlate' [ 44.668583][ T3522] syz.1.6 (3522) used greatest stack depth: 10440 bytes left [ 44.699034][ T3555] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15'. [ 44.721233][ T3555] 0ªX¹¦À: renamed from caif0 [ 44.754053][ T3556] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14'. [ 44.937998][ T3555] 0ªX¹¦À: entered allmulticast mode [ 44.943330][ T3555] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 45.522366][ T3573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 45.528910][ T3573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.536386][ T3573] vhci_hcd vhci_hcd.0: Device attached [ 45.705257][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 45.716279][ T9] vhci_hcd: vhci_device speed not set [ 45.723996][ T3574] vhci_hcd: connection closed [ 45.724108][ T2050] vhci_hcd: stop threads [ 45.733124][ T2050] vhci_hcd: release socket [ 45.737577][ T2050] vhci_hcd: disconnect device [ 45.796142][ T9] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 45.803541][ T3581] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 45.803656][ T9] usb 5-1: enqueue for inactive port 0 [ 45.810164][ T3581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.815837][ T9] usb 5-1: enqueue for inactive port 0 [ 45.823139][ T3581] vhci_hcd vhci_hcd.0: Device attached [ 45.829076][ T9] usb 5-1: enqueue for inactive port 0 [ 45.889758][ T3585] netlink: 'syz.1.22': attribute type 39 has an invalid length. [ 45.916602][ T9] vhci_hcd: vhci_device speed not set [ 45.936434][ T3588] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 45.943114][ T3588] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.950583][ T3588] vhci_hcd vhci_hcd.0: Device attached [ 46.016251][ T3401] vhci_hcd: vhci_device speed not set [ 46.053813][ T3582] vhci_hcd: connection closed [ 46.054110][ T1649] vhci_hcd: stop threads [ 46.063174][ T1649] vhci_hcd: release socket [ 46.067642][ T1649] vhci_hcd: disconnect device [ 46.169159][ T10] vhci_hcd: vhci_device speed not set [ 46.174660][ T3401] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 46.184453][ T3401] usb 9-1: enqueue for inactive port 0 [ 46.190071][ T3401] usb 9-1: enqueue for inactive port 0 [ 46.195598][ T3401] usb 9-1: enqueue for inactive port 0 [ 46.206394][ T3588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 46.216862][ T3589] vhci_hcd: connection closed [ 46.217087][ T1649] vhci_hcd: stop threads [ 46.226080][ T1649] vhci_hcd: release socket [ 46.230519][ T1649] vhci_hcd: disconnect device [ 46.246686][ T10] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 46.254489][ T10] usb 3-1: enqueue for inactive port 0 [ 46.330717][ T3596] loop2: detected capacity change from 0 to 128 [ 46.400442][ T3598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 46.446437][ T3596] ------------[ cut here ]------------ [ 46.452041][ T3596] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 46.468251][ T3596] WARNING: kernel/bpf/verifier.c:2748 at 0x0, CPU#1: syz.2.25/3596 [ 46.476471][ T3596] Modules linked in: [ 46.480405][ T3596] CPU: 1 UID: 0 PID: 3596 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.490167][ T3596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.500296][ T3596] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 46.506593][ T3596] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 46.526335][ T3596] RSP: 0018:ffffc900020cf3a0 EFLAGS: 00010246 [ 46.532421][ T3596] RAX: ffff888103e56d90 RBX: 0000000000000000 RCX: 0000000000000000 [ 46.540633][ T3596] RDX: ffffffff865f8120 RSI: ffffffff864c2efa RDI: ffffffff86db5ed0 [ 46.548645][ T3596] RBP: ffff88811a614ae0 R08: 0000000000000000 R09: 0000000000000000 [ 46.557278][ T3596] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811a614aa0 [ 46.565264][ T3596] R13: 0000000000000000 R14: ffff88811a614aec R15: ffff88811a614ad8 [ 46.573584][ T3596] FS: 00007f75662376c0(0000) GS:ffff8882aeecd000(0000) knlGS:0000000000000000 [ 46.582637][ T3596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.589262][ T3596] CR2: 00002000000054c0 CR3: 000000011af3e000 CR4: 00000000003506f0 [ 46.597268][ T3596] Call Trace: [ 46.600634][ T3596] [ 46.603610][ T3596] reg_set_min_max+0x1c8/0x260 [ 46.608447][ T3596] check_cond_jmp_op+0x13bd/0x1a80 [ 46.613599][ T3596] do_check+0x3347/0x81f0 [ 46.618007][ T3596] do_check_common+0xccf/0x1300 [ 46.622944][ T3596] bpf_check+0x2f98/0xc860 [ 46.627458][ T3596] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 46.633534][ T3596] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 46.639491][ T3596] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 46.641993][ T3401] vhci_hcd: vhci_device speed not set [ 46.645689][ T3596] ? try_charge_memcg+0x215/0xa10 [ 46.651866][ T10] usb 3-1: enqueue for inactive port 0 [ 46.655989][ T3596] ? pcpu_block_update+0x24e/0x3b0 [ 46.661499][ T10] usb 3-1: enqueue for inactive port 0 [ 46.666731][ T3596] ? pcpu_block_refresh_hint+0x10b/0x170 [ 46.677919][ T3596] ? __rcu_read_unlock+0x4f/0x70 [ 46.683006][ T3596] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 46.689020][ T3596] ? plist_check_list+0x1e6/0x210 [ 46.694082][ T3596] ? perf_cgroup_switch+0x10c/0x480 [ 46.699368][ T3596] ? _raw_spin_unlock+0x26/0x50 [ 46.704275][ T3596] ? finish_task_switch+0x7a/0x2a0 [ 46.709491][ T3596] ? __schedule+0x85f/0xcd0 [ 46.714025][ T3596] ? bpf_prog_alloc+0x5b/0x150 [ 46.719149][ T3596] ? should_fail_ex+0x30/0x280 [ 46.724020][ T3596] ? __kmalloc_noprof+0x2b4/0x5a0 [ 46.729366][ T3596] ? security_bpf_prog_load+0x60/0x140 [ 46.734873][ T3596] ? selinux_bpf_prog_load+0xad/0xd0 [ 46.740210][ T3596] ? security_bpf_prog_load+0x9e/0x140 [ 46.745765][ T3596] bpf_prog_load+0xf6e/0x1140 [ 46.746086][ T10] vhci_hcd: vhci_device speed not set [ 46.750559][ T3596] ? security_bpf+0x2b/0x90 [ 46.760479][ T3596] __sys_bpf+0x469/0x7c0 [ 46.764811][ T3596] __x64_sys_bpf+0x41/0x50 [ 46.769351][ T3596] x64_sys_call+0x28e1/0x3000 [ 46.774059][ T3596] do_syscall_64+0xd8/0x2a0 [ 46.778708][ T3596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.784619][ T3596] RIP: 0033:0x7f75677cf749 [ 46.789119][ T3596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.808895][ T3596] RSP: 002b:00007f7566237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.817718][ T3596] RAX: ffffffffffffffda RBX: 00007f7567a25fa0 RCX: 00007f75677cf749 [ 46.826008][ T3596] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 46.834073][ T3596] RBP: 00007f7567853f91 R08: 0000000000000000 R09: 0000000000000000 [ 46.842137][ T3596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.850172][ T3596] R13: 00007f7567a26038 R14: 00007f7567a25fa0 R15: 00007ffcb52f87b8 [ 46.858232][ T3596] [ 46.861311][ T3596] ---[ end trace 0000000000000000 ]--- [ 46.866949][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 46.866965][ T29] audit: type=1326 audit(1765021031.855:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 46.913838][ T29] audit: type=1326 audit(1765021031.865:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 46.995385][ T29] audit: type=1326 audit(1765021031.905:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.018987][ T29] audit: type=1326 audit(1765021031.905:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.042532][ T29] audit: type=1326 audit(1765021031.905:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.066105][ T29] audit: type=1326 audit(1765021031.975:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.089694][ T29] audit: type=1326 audit(1765021031.975:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.112893][ T29] audit: type=1326 audit(1765021031.975:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.136380][ T29] audit: type=1326 audit(1765021031.975:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.140740][ T3611] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 47.160293][ T29] audit: type=1326 audit(1765021031.975:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 47.166022][ T3611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.166122][ T3611] vhci_hcd vhci_hcd.0: Device attached [ 47.226068][ T3601] loop4: detected capacity change from 0 to 128 [ 47.254050][ T3596] syz.2.25 (3596) used greatest stack depth: 10040 bytes left [ 47.298881][ T3608] loop1: detected capacity change from 0 to 512 [ 47.356645][ T3608] EXT4-fs: dax option not supported [ 47.382599][ T3626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 47.389176][ T3626] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.396949][ T3626] vhci_hcd vhci_hcd.0: Device attached [ 47.427789][ T3601] netlink: 'syz.4.26': attribute type 39 has an invalid length. [ 47.468375][ T3632] loop3: detected capacity change from 0 to 128 [ 47.617248][ T3632] netlink: 'syz.3.29': attribute type 39 has an invalid length. [ 47.626251][ T9] vhci_hcd: vhci_device speed not set [ 47.696062][ T9] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 47.717648][ T3612] vhci_hcd: connection reset by peer [ 47.723722][ T1636] vhci_hcd: stop threads [ 47.728067][ T1636] vhci_hcd: release socket [ 47.732547][ T1636] vhci_hcd: disconnect device [ 47.737515][ T3501] usb 1-1: enqueue for inactive port 0 [ 47.743048][ T3501] usb 1-1: enqueue for inactive port 0 [ 47.757229][ T3506] usb 7-1: enqueue for inactive port 0 [ 47.762765][ T3506] usb 7-1: enqueue for inactive port 0 [ 47.816082][ T3501] vhci_hcd: vhci_device speed not set [ 47.842445][ T3653] vfat: Bad value for 'uni_xlate' [ 47.850560][ T3506] vhci_hcd: vhci_device speed not set [ 47.863170][ T3654] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 47.867298][ T3652] EXT4-fs: dax option not supported [ 47.869727][ T3654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.882557][ T3654] vhci_hcd vhci_hcd.0: Device attached [ 47.920012][ T3626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 47.948119][ T3662] netlink: 144 bytes leftover after parsing attributes in process `syz.1.34'. [ 47.957193][ T3627] vhci_hcd: connection reset by peer [ 47.963742][ T2050] vhci_hcd: stop threads [ 47.968148][ T2050] vhci_hcd: release socket [ 47.972589][ T2050] vhci_hcd: disconnect device [ 48.094071][ T3654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 48.106772][ T3655] vhci_hcd: connection closed [ 48.108694][ T1636] vhci_hcd: stop threads [ 48.117680][ T1636] vhci_hcd: release socket [ 48.117761][ T10] vhci_hcd: vhci_device speed not set [ 48.127559][ T1636] vhci_hcd: disconnect device [ 48.186077][ T10] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 48.193623][ T10] usb 9-1: enqueue for inactive port 0 [ 48.199336][ T10] usb 9-1: enqueue for inactive port 0 [ 48.205019][ T10] usb 9-1: enqueue for inactive port 0 [ 48.276074][ T10] vhci_hcd: vhci_device speed not set [ 48.293452][ T3669] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 48.300012][ T3669] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.307453][ T3669] vhci_hcd vhci_hcd.0: Device attached [ 48.443977][ T3669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 48.454936][ T3670] vhci_hcd: connection closed [ 48.455113][ T1636] vhci_hcd: stop threads [ 48.464115][ T1636] vhci_hcd: release socket [ 48.468577][ T1636] vhci_hcd: disconnect device [ 48.539332][ T3674] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 48.547446][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 48.556139][ T3501] vhci_hcd: vhci_device speed not set [ 49.262730][ T3684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 49.402350][ T3691] set_capacity_and_notify: 2 callbacks suppressed [ 49.402365][ T3691] loop0: detected capacity change from 0 to 512 [ 49.436821][ T3691] EXT4-fs: dax option not supported [ 49.659026][ T3696] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 49.665676][ T3696] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.673295][ T3696] vhci_hcd vhci_hcd.0: Device attached [ 49.866086][ T3602] vhci_hcd: vhci_device speed not set [ 50.028554][ T3602] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 50.195896][ T3696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.43'. [ 50.220480][ T3711] loop0: detected capacity change from 0 to 128 [ 50.247315][ T3700] vhci_hcd: connection reset by peer [ 50.270871][ T2490] vhci_hcd: stop threads [ 50.275178][ T2490] vhci_hcd: release socket [ 50.279664][ T2490] vhci_hcd: disconnect device [ 50.394921][ T3719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 50.401490][ T3719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.409086][ T3719] vhci_hcd vhci_hcd.0: Device attached [ 50.588605][ T3500] vhci_hcd: vhci_device speed not set [ 50.601486][ T3724] loop2: detected capacity change from 0 to 128 [ 50.611662][ T3722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 50.656061][ T3500] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 50.674083][ T3724] netlink: 'syz.2.48': attribute type 39 has an invalid length. [ 50.804895][ T3726] netlink: 'syz.2.49': attribute type 39 has an invalid length. [ 50.836951][ T3728] loop4: detected capacity change from 0 to 128 [ 50.866722][ T3720] vhci_hcd: connection reset by peer [ 50.886184][ T55] vhci_hcd: stop threads [ 50.890689][ T55] vhci_hcd: release socket [ 50.895192][ T55] vhci_hcd: disconnect device [ 50.925472][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.50'. [ 50.981143][ T3733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 51.003178][ T3730] loop2: detected capacity change from 0 to 128 [ 51.148639][ T3730] netlink: 'syz.2.51': attribute type 39 has an invalid length. [ 51.369239][ T3747] loop2: detected capacity change from 0 to 512 [ 51.429762][ T3747] vfat: Bad value for 'uni_xlate' [ 51.812791][ T3758] loop0: detected capacity change from 0 to 128 [ 51.957761][ T3763] loop0: detected capacity change from 0 to 128 [ 52.020568][ T3754] loop3: detected capacity change from 0 to 512 [ 52.036125][ T3754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.090335][ T3754] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.57: Parent and EA inode have the same ino 15 [ 52.111497][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 52.111516][ T29] audit: type=1326 audit(1765021037.105:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.153381][ T29] audit: type=1326 audit(1765021037.105:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.176893][ T29] audit: type=1326 audit(1765021037.125:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.200215][ T29] audit: type=1326 audit(1765021037.125:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.223530][ T29] audit: type=1326 audit(1765021037.145:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.246793][ T29] audit: type=1326 audit(1765021037.145:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.270013][ T29] audit: type=1326 audit(1765021037.145:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.293226][ T29] audit: type=1326 audit(1765021037.145:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.316808][ T29] audit: type=1326 audit(1765021037.145:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.342116][ T29] audit: type=1326 audit(1765021037.235:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 52.347742][ T3770] loop4: detected capacity change from 0 to 128 [ 52.365580][ T3754] EXT4-fs (loop3): Remounting filesystem read-only [ 52.399757][ T3754] EXT4-fs (loop3): 1 orphan inode deleted [ 52.410439][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.468190][ T3769] netlink: 'syz.4.61': attribute type 39 has an invalid length. [ 52.719207][ T3778] netlink: 'syz.0.64': attribute type 39 has an invalid length. [ 52.729335][ T9] usb 5-1: enqueue for inactive port 0 [ 52.734861][ T9] usb 5-1: enqueue for inactive port 0 [ 52.797520][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.813429][ T3780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.826252][ T9] vhci_hcd: vhci_device speed not set [ 52.867002][ T3780] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.65: Parent and EA inode have the same ino 15 [ 52.897067][ T3780] EXT4-fs (loop4): Remounting filesystem read-only [ 52.903626][ T3780] EXT4-fs (loop4): 1 orphan inode deleted [ 52.937553][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.013705][ T3789] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 53.020278][ T3789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.027805][ T3789] vhci_hcd vhci_hcd.0: Device attached [ 53.046323][ T3793] mmap: syz.0.68 (3793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.064112][ T3793] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3793 comm=syz.0.68 [ 53.129983][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.191258][ T3797] netlink: 'syz.4.70': attribute type 39 has an invalid length. [ 53.200251][ T3798] __nla_validate_parse: 3 callbacks suppressed [ 53.200269][ T3798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'. [ 53.215356][ T3501] vhci_hcd: vhci_device speed not set [ 53.286175][ T3501] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 53.447194][ T3801] netlink: 'syz.4.71': attribute type 39 has an invalid length. [ 53.461064][ T3789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.67'. [ 53.669430][ T3790] vhci_hcd: connection reset by peer [ 53.675546][ T2050] vhci_hcd: stop threads [ 53.679948][ T2050] vhci_hcd: release socket [ 53.684386][ T2050] vhci_hcd: disconnect device [ 53.991896][ T3817] netlink: 'syz.1.77': attribute type 39 has an invalid length. [ 54.098415][ T3825] netlink: 3 bytes leftover after parsing attributes in process `syz.4.79'. [ 54.118351][ T3825] 1ªX¹¦À: renamed from 60ªX¹¦À [ 54.232738][ T3825] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.307978][ T3829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3829 comm=syz.1.80 [ 54.497472][ T3833] set_capacity_and_notify: 5 callbacks suppressed [ 54.497491][ T3833] loop0: detected capacity change from 0 to 128 [ 54.558378][ T3831] loop1: detected capacity change from 0 to 128 [ 54.580741][ T3836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 54.709906][ T3839] loop3: detected capacity change from 0 to 512 [ 54.719198][ T3831] netlink: 'syz.1.81': attribute type 39 has an invalid length. [ 54.721524][ T3839] EXT4-fs: dax option not supported [ 54.780108][ T3843] netlink: 3 bytes leftover after parsing attributes in process `syz.0.86'. [ 54.802026][ T3843] 0ªX¹¦À: renamed from caif0 [ 54.845933][ T3843] 0ªX¹¦À: entered allmulticast mode [ 54.851321][ T3843] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.924198][ T3855] loop3: detected capacity change from 0 to 128 [ 55.002777][ T3857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 55.057524][ T3855] Zero length message leads to an empty skb [ 55.116095][ T3602] usb 9-1: enqueue for inactive port 0 [ 55.127191][ T3602] usb 9-1: enqueue for inactive port 0 [ 55.139522][ T3860] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 55.146111][ T3860] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.153660][ T3860] vhci_hcd vhci_hcd.0: Device attached [ 55.226070][ T3602] vhci_hcd: vhci_device speed not set [ 55.269529][ T3862] loop3: detected capacity change from 0 to 512 [ 55.280014][ T3862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.298324][ T3862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.89: Parent and EA inode have the same ino 15 [ 55.316831][ T3862] EXT4-fs (loop3): Remounting filesystem read-only [ 55.323998][ T3862] EXT4-fs (loop3): 1 orphan inode deleted [ 55.330458][ T3862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.344576][ T3867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.90'. [ 55.391108][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.398660][ T3863] vhci_hcd: connection closed [ 55.400580][ T37] vhci_hcd: stop threads [ 55.409557][ T37] vhci_hcd: release socket [ 55.414027][ T37] vhci_hcd: disconnect device [ 55.437901][ T3872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3872 comm=syz.3.91 [ 55.446357][ T3602] vhci_hcd: vhci_device speed not set [ 55.500633][ T3876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 55.507184][ T3876] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.514660][ T3876] vhci_hcd vhci_hcd.0: Device attached [ 55.620581][ T3882] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 55.641716][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 55.686275][ T3500] usb 1-1: enqueue for inactive port 0 [ 55.702401][ T3500] usb 1-1: enqueue for inactive port 0 [ 55.722614][ T3884] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 55.729230][ T3884] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.736848][ T3884] vhci_hcd vhci_hcd.0: Device attached [ 55.751380][ T3876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 55.754148][ T3888] loop0: detected capacity change from 0 to 512 [ 55.767853][ T3888] vfat: Bad value for 'uni_xlate' [ 55.784808][ T3877] vhci_hcd: connection closed [ 55.784982][ T352] vhci_hcd: stop threads [ 55.794033][ T352] vhci_hcd: release socket [ 55.798508][ T352] vhci_hcd: disconnect device [ 55.803439][ T3500] vhci_hcd: vhci_device speed not set [ 55.834495][ T3890] netlink: 144 bytes leftover after parsing attributes in process `syz.0.96'. [ 55.926062][ T3401] vhci_hcd: vhci_device speed not set [ 55.935486][ T3885] vhci_hcd: connection closed [ 55.935830][ T2050] vhci_hcd: stop threads [ 55.944906][ T2050] vhci_hcd: release socket [ 55.949449][ T2050] vhci_hcd: disconnect device [ 56.006074][ T3401] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 56.013692][ T3401] usb 3-1: enqueue for inactive port 0 [ 56.019420][ T3401] usb 3-1: enqueue for inactive port 0 [ 56.025073][ T3401] usb 3-1: enqueue for inactive port 0 [ 56.087920][ T3895] loop4: detected capacity change from 0 to 512 [ 56.094929][ T3895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.110723][ T3401] vhci_hcd: vhci_device speed not set [ 56.136466][ T3895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.97: Parent and EA inode have the same ino 15 [ 56.149160][ T3895] EXT4-fs (loop4): Remounting filesystem read-only [ 56.155800][ T3895] EXT4-fs (loop4): 1 orphan inode deleted [ 56.163731][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.315665][ T3898] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 56.322238][ T3898] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.329736][ T3898] vhci_hcd vhci_hcd.0: Device attached [ 56.330515][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.370552][ T3902] loop4: detected capacity change from 0 to 128 [ 56.579436][ T3899] vhci_hcd: connection closed [ 56.579638][ T55] vhci_hcd: stop threads [ 56.588864][ T55] vhci_hcd: release socket [ 56.593324][ T55] vhci_hcd: disconnect device [ 56.621047][ T3908] loop4: detected capacity change from 0 to 128 [ 56.740360][ T3908] netlink: 'syz.4.102': attribute type 39 has an invalid length. [ 56.755980][ T3916] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 56.762591][ T3916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.770196][ T3916] vhci_hcd vhci_hcd.0: Device attached [ 56.884526][ T3924] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 56.891100][ T3924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.898593][ T3924] vhci_hcd vhci_hcd.0: Device attached [ 57.066385][ T3928] loop4: detected capacity change from 0 to 128 [ 57.092481][ T3500] vhci_hcd: vhci_device speed not set [ 57.187205][ T3500] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 57.509367][ T3925] vhci_hcd: connection reset by peer [ 57.523716][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 57.523731][ T29] audit: type=1400 audit(1765021042.515:1086): avc: denied { create } for pid=3938 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.536088][ T3401] vhci_hcd: vhci_device speed not set [ 57.559098][ T2050] vhci_hcd: stop threads [ 57.563405][ T2050] vhci_hcd: release socket [ 57.567876][ T2050] vhci_hcd: disconnect device [ 57.580036][ T3941] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 57.586584][ T3941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.594082][ T3941] vhci_hcd vhci_hcd.0: Device attached [ 57.594080][ T29] audit: type=1400 audit(1765021042.575:1087): avc: denied { read } for pid=3938 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.618838][ T29] audit: type=1400 audit(1765021042.575:1088): avc: denied { write } for pid=3938 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.646357][ T3932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.661469][ T3932] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.108: Parent and EA inode have the same ino 15 [ 57.703347][ T29] audit: type=1400 audit(1765021042.675:1089): avc: denied { watch } for pid=3938 comm="syz.2.110" path="/20" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.718963][ T3932] EXT4-fs (loop3): Remounting filesystem read-only [ 57.746046][ T3932] EXT4-fs (loop3): 1 orphan inode deleted [ 57.752456][ T3932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.766615][ T29] audit: type=1400 audit(1765021042.765:1090): avc: denied { mount } for pid=3930 comm="syz.3.108" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.788308][ T29] audit: type=1400 audit(1765021042.765:1091): avc: denied { read write } for pid=3930 comm="syz.3.108" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.812281][ T29] audit: type=1400 audit(1765021042.765:1092): avc: denied { open } for pid=3930 comm="syz.3.108" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.836222][ T3602] vhci_hcd: vhci_device speed not set [ 57.842395][ T29] audit: type=1400 audit(1765021042.815:1093): avc: denied { open } for pid=3930 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.861709][ T29] audit: type=1400 audit(1765021042.815:1094): avc: denied { perfmon } for pid=3930 comm="syz.3.108" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.882570][ T29] audit: type=1400 audit(1765021042.815:1095): avc: denied { kernel } for pid=3930 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.902935][ T3917] vhci_hcd: connection reset by peer [ 57.908384][ T3602] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 57.916316][ T2050] vhci_hcd: stop threads [ 57.920586][ T2050] vhci_hcd: release socket [ 57.925028][ T2050] vhci_hcd: disconnect device [ 57.950708][ T3942] vhci_hcd: connection reset by peer [ 57.956275][ T2050] vhci_hcd: stop threads [ 57.960552][ T2050] vhci_hcd: release socket [ 57.964997][ T2050] vhci_hcd: disconnect device [ 58.008274][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.126566][ T3955] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 58.141741][ T3955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.159466][ T3955] bond1 (unregistering): Released all slaves [ 58.326780][ T3501] usb 7-1: enqueue for inactive port 0 [ 58.332300][ T3501] usb 7-1: enqueue for inactive port 0 [ 58.421649][ T3501] vhci_hcd: vhci_device speed not set [ 58.423042][ T3967] vfat: Bad value for 'uni_xlate' [ 58.472564][ T3969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.507195][ T3969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.115: Parent and EA inode have the same ino 15 [ 58.523178][ T3969] EXT4-fs (loop3): Remounting filesystem read-only [ 58.530297][ T3969] EXT4-fs (loop3): 1 orphan inode deleted [ 58.537054][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.543851][ T3975] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 58.560321][ T3976] __nla_validate_parse: 6 callbacks suppressed [ 58.560338][ T3976] netlink: 144 bytes leftover after parsing attributes in process `syz.1.117'. [ 58.578176][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 58.667563][ T3979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 58.698704][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.760278][ T3983] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 58.766840][ T3983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.774366][ T3983] vhci_hcd vhci_hcd.0: Device attached [ 59.047097][ T3990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 59.053661][ T3990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.061151][ T3990] vhci_hcd vhci_hcd.0: Device attached [ 59.102218][ T3983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 59.144982][ T3984] vhci_hcd: connection closed [ 59.145229][ T1636] vhci_hcd: stop threads [ 59.154343][ T1636] vhci_hcd: release socket [ 59.158788][ T1636] vhci_hcd: disconnect device [ 59.164359][ T3501] vhci_hcd: vhci_device speed not set [ 59.219795][ T3990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.123'. [ 59.406094][ T3991] vhci_hcd: connection closed [ 59.411409][ T1636] vhci_hcd: stop threads [ 59.420591][ T1636] vhci_hcd: release socket [ 59.425051][ T1636] vhci_hcd: disconnect device [ 59.948717][ T4004] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 59.955399][ T4004] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.962949][ T4004] vhci_hcd vhci_hcd.0: Device attached [ 59.993362][ T4002] set_capacity_and_notify: 5 callbacks suppressed [ 59.993406][ T4002] loop4: detected capacity change from 0 to 128 [ 60.156365][ T4002] netlink: 'syz.4.126': attribute type 39 has an invalid length. [ 60.292555][ T3506] vhci_hcd: vhci_device speed not set [ 60.431748][ T4025] loop1: detected capacity change from 0 to 512 [ 60.503804][ T4025] EXT4-fs: dax option not supported [ 60.876102][ T3506] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 60.891352][ T4004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.127'. [ 60.910032][ T4009] vhci_hcd: connection reset by peer [ 60.915968][ T352] vhci_hcd: stop threads [ 60.920444][ T352] vhci_hcd: release socket [ 60.924928][ T352] vhci_hcd: disconnect device [ 60.929798][ T4041] loop4: detected capacity change from 0 to 512 [ 60.949906][ T4041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.022670][ T4041] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.131: Parent and EA inode have the same ino 15 [ 61.042019][ T4041] EXT4-fs (loop4): Remounting filesystem read-only [ 61.049607][ T4041] EXT4-fs (loop4): 1 orphan inode deleted [ 61.058037][ T4041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.098255][ T4055] loop1: detected capacity change from 0 to 512 [ 61.119073][ T4055] vfat: Bad value for 'uni_xlate' [ 61.156406][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.191253][ T4059] netlink: 144 bytes leftover after parsing attributes in process `syz.1.134'. [ 61.442604][ T4069] netlink: 3 bytes leftover after parsing attributes in process `syz.2.138'. [ 61.451875][ T4069] 0ªX¹¦À: renamed from caif0 [ 61.458816][ T4069] 0ªX¹¦À: entered allmulticast mode [ 61.464059][ T4069] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 61.706576][ T4073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 61.713127][ T4073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.720625][ T4073] vhci_hcd vhci_hcd.0: Device attached [ 61.860282][ T4073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 61.871363][ T4074] vhci_hcd: connection closed [ 61.871930][ T352] vhci_hcd: stop threads [ 61.881053][ T352] vhci_hcd: release socket [ 61.885494][ T352] vhci_hcd: disconnect device [ 61.893122][ T4077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 61.899729][ T4077] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.907353][ T4077] vhci_hcd vhci_hcd.0: Device attached [ 61.912948][ T3501] vhci_hcd: vhci_device speed not set [ 62.046605][ T4077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 62.057120][ T4078] vhci_hcd: connection closed [ 62.057414][ T55] vhci_hcd: stop threads [ 62.066394][ T55] vhci_hcd: release socket [ 62.070818][ T55] vhci_hcd: disconnect device [ 62.143902][ T4081] loop4: detected capacity change from 0 to 128 [ 62.181485][ T4081] netlink: 'syz.4.141': attribute type 39 has an invalid length. [ 62.262030][ T4083] loop4: detected capacity change from 0 to 128 [ 62.313738][ T4083] netlink: 'syz.4.142': attribute type 39 has an invalid length. [ 62.323340][ T3500] usb 1-1: enqueue for inactive port 0 [ 62.330293][ T3500] usb 1-1: enqueue for inactive port 0 [ 62.388672][ T4088] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.395314][ T4088] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.402870][ T4088] vhci_hcd vhci_hcd.0: Device attached [ 62.416333][ T3500] vhci_hcd: vhci_device speed not set [ 62.464706][ T4098] loop4: detected capacity change from 0 to 512 [ 62.482495][ T4098] EXT4-fs: dax option not supported [ 62.529807][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 62.529822][ T29] audit: type=1326 audit(1765021047.515:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 62.560485][ T4096] netlink: 'syz.3.146': attribute type 39 has an invalid length. [ 62.616281][ T29] audit: type=1326 audit(1765021047.575:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 62.639746][ T29] audit: type=1326 audit(1765021047.575:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 62.700339][ T4113] loop0: detected capacity change from 0 to 128 [ 62.735503][ T29] audit: type=1400 audit(1765021047.675:1390): avc: denied { name_bind } for pid=4112 comm="syz.3.148" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.757243][ T29] audit: type=1400 audit(1765021047.675:1391): avc: denied { node_bind } for pid=4112 comm="syz.3.148" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.779747][ T29] audit: type=1400 audit(1765021047.675:1392): avc: denied { lock } for pid=4112 comm="syz.3.148" path="socket:[6685]" dev="sockfs" ino=6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.796310][ T3401] usb 3-1: enqueue for inactive port 0 [ 62.802722][ T29] audit: type=1400 audit(1765021047.675:1393): avc: denied { create } for pid=4111 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.826009][ T3401] usb 3-1: enqueue for inactive port 0 [ 62.827686][ T29] audit: type=1326 audit(1765021047.675:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 62.856452][ T29] audit: type=1326 audit(1765021047.675:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 62.879818][ T29] audit: type=1400 audit(1765021047.675:1397): avc: denied { bind } for pid=4111 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.919319][ T3401] vhci_hcd: vhci_device speed not set [ 62.940176][ T4089] vhci_hcd: connection closed [ 62.940243][ T55] vhci_hcd: stop threads [ 62.949340][ T55] vhci_hcd: release socket [ 62.954157][ T55] vhci_hcd: disconnect device [ 62.959079][ T3602] usb 9-1: enqueue for inactive port 0 [ 62.964689][ T3602] usb 9-1: enqueue for inactive port 0 [ 62.973447][ T4121] loop3: detected capacity change from 0 to 128 [ 63.010710][ T4123] loop4: detected capacity change from 0 to 128 [ 63.041929][ T3602] vhci_hcd: vhci_device speed not set [ 63.067346][ T4121] netlink: 'syz.3.151': attribute type 39 has an invalid length. [ 63.078294][ T4120] netlink: 'syz.4.150': attribute type 39 has an invalid length. [ 63.127600][ T4128] 0ªX¹¦À: renamed from 61ªX¹¦À [ 63.142402][ T4128] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 63.282398][ T4136] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 63.333160][ T4136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.357300][ T4139] bond1 (unregistering): Released all slaves [ 63.617582][ T4144] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 63.647266][ T4144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.674669][ T4144] __nla_validate_parse: 4 callbacks suppressed [ 63.674686][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 63.695177][ T4144] bond1 (unregistering): Released all slaves [ 64.089982][ T4150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 64.167659][ T4154] EXT4-fs: dax option not supported [ 64.303161][ T4152] netlink: 'syz.0.161': attribute type 39 has an invalid length. [ 64.341996][ T4156] netlink: 'syz.3.162': attribute type 39 has an invalid length. [ 64.407341][ T4172] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 64.413931][ T4172] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.421423][ T4172] vhci_hcd vhci_hcd.0: Device attached [ 64.523111][ T4183] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 64.529684][ T4183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.537177][ T4183] vhci_hcd vhci_hcd.0: Device attached [ 64.606455][ T3401] vhci_hcd: vhci_device speed not set [ 64.639595][ T4173] vhci_hcd: connection closed [ 64.639851][ T1636] vhci_hcd: stop threads [ 64.648962][ T1636] vhci_hcd: release socket [ 64.653401][ T1636] vhci_hcd: disconnect device [ 64.676192][ T3401] usb 1-1: new full-speed USB device number 5 using vhci_hcd [ 64.683626][ T3401] usb 1-1: enqueue for inactive port 0 [ 64.689197][ T3401] usb 1-1: enqueue for inactive port 0 [ 64.694743][ T3401] usb 1-1: enqueue for inactive port 0 [ 64.738134][ T4184] vhci_hcd: connection closed [ 64.738353][ T2050] vhci_hcd: stop threads [ 64.747365][ T2050] vhci_hcd: release socket [ 64.751796][ T2050] vhci_hcd: disconnect device [ 64.766201][ T3401] vhci_hcd: vhci_device speed not set [ 65.235195][ T4190] set_capacity_and_notify: 3 callbacks suppressed [ 65.235226][ T4190] loop0: detected capacity change from 0 to 128 [ 65.256688][ T4192] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 65.263275][ T4192] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.270857][ T4192] vhci_hcd vhci_hcd.0: Device attached [ 65.342473][ T4198] netlink: 3 bytes leftover after parsing attributes in process `syz.3.171'. [ 65.355404][ T4198] 0ªX¹¦À: renamed from caif0 [ 65.372327][ T4198] 0ªX¹¦À: entered allmulticast mode [ 65.377763][ T4198] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 65.401298][ T4190] netlink: 'syz.0.168': attribute type 39 has an invalid length. [ 65.456079][ T3501] vhci_hcd: vhci_device speed not set [ 65.522192][ T4204] loop0: detected capacity change from 0 to 128 [ 65.538393][ T3501] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 65.598455][ T4204] netlink: 'syz.0.173': attribute type 39 has an invalid length. [ 65.628828][ T4193] vhci_hcd: connection reset by peer [ 65.634271][ T55] vhci_hcd: stop threads [ 65.638563][ T55] vhci_hcd: release socket [ 65.643070][ T55] vhci_hcd: disconnect device [ 65.689407][ T4214] loop2: detected capacity change from 0 to 512 [ 65.696396][ T4214] EXT4-fs: dax option not supported [ 65.786983][ T4225] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 65.793636][ T4225] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.801218][ T4225] vhci_hcd vhci_hcd.0: Device attached [ 65.947247][ T3506] usb 5-1: enqueue for inactive port 0 [ 65.953729][ T3506] usb 5-1: enqueue for inactive port 0 [ 65.986164][ T3500] vhci_hcd: vhci_device speed not set [ 65.994360][ T4227] vhci_hcd: connection closed [ 65.994633][ T55] vhci_hcd: stop threads [ 66.003716][ T55] vhci_hcd: release socket [ 66.008252][ T55] vhci_hcd: disconnect device [ 66.026167][ T3506] vhci_hcd: vhci_device speed not set [ 66.046142][ T3500] usb 1-1: new full-speed USB device number 6 using vhci_hcd [ 66.053835][ T3500] usb 1-1: enqueue for inactive port 0 [ 66.060161][ T3500] usb 1-1: enqueue for inactive port 0 [ 66.065907][ T3500] usb 1-1: enqueue for inactive port 0 [ 66.136105][ T3500] vhci_hcd: vhci_device speed not set [ 66.327039][ T4235] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 66.333602][ T4235] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.341126][ T4235] vhci_hcd vhci_hcd.0: Device attached [ 66.457359][ T4235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 66.520491][ T4245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 66.527092][ T4245] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.534603][ T4245] vhci_hcd vhci_hcd.0: Device attached [ 66.594999][ T4237] vhci_hcd: connection closed [ 66.596917][ T37] vhci_hcd: stop threads [ 66.605913][ T37] vhci_hcd: release socket [ 66.610512][ T37] vhci_hcd: disconnect device [ 66.623754][ T4249] loop0: detected capacity change from 0 to 128 [ 66.726698][ T9] vhci_hcd: vhci_device speed not set [ 66.737799][ T4245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'. [ 66.750898][ T4246] vhci_hcd: connection closed [ 66.763133][ T37] vhci_hcd: stop threads [ 66.772138][ T37] vhci_hcd: release socket [ 66.776592][ T37] vhci_hcd: disconnect device [ 66.791532][ T4249] netlink: 'syz.0.181': attribute type 39 has an invalid length. [ 66.799984][ T9] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 66.806292][ T4251] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 66.807552][ T9] usb 7-1: enqueue for inactive port 0 [ 66.813901][ T4251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.821233][ T9] usb 7-1: enqueue for inactive port 0 [ 66.826881][ T4251] vhci_hcd vhci_hcd.0: Device attached [ 66.842826][ T9] usb 7-1: enqueue for inactive port 0 [ 66.936175][ T9] vhci_hcd: vhci_device speed not set [ 67.000715][ T4251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.182'. [ 67.011161][ T4252] vhci_hcd: connection closed [ 67.011241][ T37] vhci_hcd: stop threads [ 67.020263][ T37] vhci_hcd: release socket [ 67.024697][ T37] vhci_hcd: disconnect device [ 67.096056][ T3506] vhci_hcd: vhci_device speed not set [ 67.223787][ T4264] netlink: 'syz.4.185': attribute type 39 has an invalid length. [ 67.338431][ T4272] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 67.353769][ T4272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.368572][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 67.385322][ T4272] bond1 (unregistering): Released all slaves [ 67.571116][ T4276] loop0: detected capacity change from 0 to 512 [ 67.582292][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 67.582306][ T29] audit: type=1326 audit(1765021052.575:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.611921][ T29] audit: type=1326 audit(1765021052.575:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.635351][ T29] audit: type=1326 audit(1765021052.575:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.669212][ T4276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.705253][ T4287] loop3: detected capacity change from 0 to 128 [ 67.734107][ T4276] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.189: Parent and EA inode have the same ino 15 [ 67.759249][ T4276] EXT4-fs (loop0): Remounting filesystem read-only [ 67.800432][ T4292] loop2: detected capacity change from 0 to 512 [ 67.813638][ T29] audit: type=1326 audit(1765021052.655:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.817564][ T4292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.837040][ T29] audit: type=1326 audit(1765021052.655:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.837087][ T29] audit: type=1326 audit(1765021052.655:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.837127][ T29] audit: type=1326 audit(1765021052.655:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.854269][ T4276] EXT4-fs (loop0): 1 orphan inode deleted [ 67.867081][ T29] audit: type=1326 audit(1765021052.655:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.942834][ T29] audit: type=1326 audit(1765021052.655:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.957487][ T4292] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.192: Parent and EA inode have the same ino 15 [ 67.966357][ T29] audit: type=1326 audit(1765021052.655:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c9a16f749 code=0x7ffc0000 [ 67.978715][ T4292] EXT4-fs (loop2): Remounting filesystem read-only [ 68.004054][ T4276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.008448][ T4292] EXT4-fs (loop2): 1 orphan inode deleted [ 68.027735][ T4287] netlink: 'syz.3.191': attribute type 39 has an invalid length. [ 68.046570][ T4292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.138142][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.147514][ T4296] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 68.154104][ T4296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.161728][ T4296] vhci_hcd vhci_hcd.0: Device attached [ 68.176220][ T4300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 68.182780][ T4300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.190338][ T4300] vhci_hcd vhci_hcd.0: Device attached [ 68.329018][ T4311] netlink: 'syz.1.196': attribute type 39 has an invalid length. [ 68.366173][ T3599] vhci_hcd: vhci_device speed not set [ 68.394300][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.436500][ T3599] usb 7-1: new full-speed USB device number 6 using vhci_hcd [ 68.467766][ T4306] loop0: detected capacity change from 0 to 512 [ 68.485384][ T4306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.569752][ T4306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.194: Parent and EA inode have the same ino 15 [ 68.613623][ T4306] EXT4-fs (loop0): Remounting filesystem read-only [ 68.620235][ T4306] EXT4-fs (loop0): 1 orphan inode deleted [ 68.626528][ T4306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.694207][ T4301] vhci_hcd: connection reset by peer [ 68.699974][ T55] vhci_hcd: stop threads [ 68.704234][ T55] vhci_hcd: release socket [ 68.708773][ T55] vhci_hcd: disconnect device [ 68.744602][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.817286][ T4297] vhci_hcd: connection closed [ 68.817765][ T1636] vhci_hcd: stop threads [ 68.826784][ T1636] vhci_hcd: release socket [ 68.831280][ T1636] vhci_hcd: disconnect device [ 68.938733][ T4335] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 68.945302][ T4335] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.952914][ T4335] vhci_hcd vhci_hcd.0: Device attached [ 69.128583][ T4335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 69.137586][ T3500] vhci_hcd: vhci_device speed not set [ 69.146156][ T4337] vhci_hcd: connection closed [ 69.146324][ T1636] vhci_hcd: stop threads [ 69.155335][ T1636] vhci_hcd: release socket [ 69.159818][ T1636] vhci_hcd: disconnect device [ 69.196148][ T3500] usb 5-1: new full-speed USB device number 5 using vhci_hcd [ 69.203589][ T3500] usb 5-1: enqueue for inactive port 0 [ 69.216359][ T3500] usb 5-1: enqueue for inactive port 0 [ 69.226220][ T3500] usb 5-1: enqueue for inactive port 0 [ 69.262798][ T4340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 69.269543][ T4340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.277174][ T4340] vhci_hcd vhci_hcd.0: Device attached [ 69.297072][ T4344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 69.303712][ T4344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.311209][ T4344] vhci_hcd vhci_hcd.0: Device attached [ 69.312269][ T3500] vhci_hcd: vhci_device speed not set [ 69.486058][ T3602] vhci_hcd: vhci_device speed not set [ 69.531744][ T4353] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 69.546176][ T3602] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 69.573576][ T4353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.585897][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 69.630763][ T4355] bond1 (unregistering): Released all slaves [ 69.660150][ T4344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 69.670518][ T4345] vhci_hcd: connection reset by peer [ 69.675932][ T1636] vhci_hcd: stop threads [ 69.680324][ T1636] vhci_hcd: release socket [ 69.684753][ T1636] vhci_hcd: disconnect device [ 69.718997][ T4357] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 69.725638][ T4357] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.726106][ T4341] vhci_hcd: connection closed [ 69.733158][ T4357] vhci_hcd vhci_hcd.0: Device attached [ 69.745754][ T55] vhci_hcd: stop threads [ 69.750089][ T55] vhci_hcd: release socket [ 69.754631][ T55] vhci_hcd: disconnect device [ 69.771816][ T4361] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 69.778369][ T4361] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.785839][ T4361] vhci_hcd vhci_hcd.0: Device attached [ 69.903776][ T4357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.206'. [ 69.914658][ T4358] vhci_hcd: connection closed [ 69.915046][ T55] vhci_hcd: stop threads [ 69.924047][ T55] vhci_hcd: release socket [ 69.928512][ T55] vhci_hcd: disconnect device [ 69.933320][ T3506] vhci_hcd: vhci_device speed not set [ 70.010873][ T4361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 70.021423][ T4362] vhci_hcd: connection closed [ 70.021825][ T65] vhci_hcd: stop threads [ 70.030871][ T65] vhci_hcd: release socket [ 70.035394][ T65] vhci_hcd: disconnect device [ 70.036091][ T3500] vhci_hcd: vhci_device speed not set [ 70.203824][ T4367] loop1: detected capacity change from 0 to 128 [ 70.278954][ T4370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 70.427931][ T4378] loop1: detected capacity change from 0 to 128 [ 70.539819][ T4378] netlink: 'syz.1.211': attribute type 39 has an invalid length. [ 70.584994][ T4385] loop0: detected capacity change from 0 to 512 [ 70.618779][ T4385] vfat: Bad value for 'uni_xlate' [ 70.810543][ T4384] loop3: detected capacity change from 0 to 128 [ 70.858552][ T4382] netlink: 144 bytes leftover after parsing attributes in process `syz.0.213'. [ 70.893423][ T4393] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 70.899999][ T4393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.907506][ T4393] vhci_hcd vhci_hcd.0: Device attached [ 71.021599][ T4384] netlink: 'syz.3.214': attribute type 39 has an invalid length. [ 71.264084][ T4403] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 71.270760][ T4403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.278238][ T4403] vhci_hcd vhci_hcd.0: Device attached [ 71.326337][ T3501] usb 9-1: enqueue for inactive port 0 [ 71.331887][ T3501] usb 9-1: enqueue for inactive port 0 [ 71.406233][ T3501] vhci_hcd: vhci_device speed not set [ 71.426137][ T4411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 71.432734][ T4411] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.440398][ T4411] vhci_hcd vhci_hcd.0: Device attached [ 71.446180][ T4394] vhci_hcd: connection closed [ 71.446567][ T37] vhci_hcd: stop threads [ 71.455596][ T37] vhci_hcd: release socket [ 71.460123][ T37] vhci_hcd: disconnect device [ 71.574684][ T4403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 71.670932][ T4421] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 71.677494][ T4421] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.685120][ T4421] vhci_hcd vhci_hcd.0: Device attached [ 71.686072][ T3506] vhci_hcd: vhci_device speed not set [ 71.696276][ T4404] vhci_hcd: connection closed [ 71.718195][ T1649] vhci_hcd: stop threads [ 71.727229][ T1649] vhci_hcd: release socket [ 71.728334][ T4422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'. [ 71.731660][ T1649] vhci_hcd: disconnect device [ 71.766192][ T3506] usb 1-1: new full-speed USB device number 8 using vhci_hcd [ 71.886091][ T9] vhci_hcd: vhci_device speed not set [ 71.946228][ T9] usb 5-1: new full-speed USB device number 6 using vhci_hcd [ 71.986090][ T4412] vhci_hcd: connection reset by peer [ 72.213999][ T1649] vhci_hcd: stop threads [ 72.217845][ T4431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4431 comm=syz.1.225 [ 72.218420][ T1649] vhci_hcd: release socket [ 72.235343][ T1649] vhci_hcd: disconnect device [ 72.254517][ T4421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 72.265069][ T4423] vhci_hcd: connection reset by peer [ 72.290567][ T1636] vhci_hcd: stop threads [ 72.294894][ T1636] vhci_hcd: release socket [ 72.299419][ T1636] vhci_hcd: disconnect device [ 72.659731][ T4444] loop1: detected capacity change from 0 to 512 [ 72.676135][ T4444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.690676][ T4444] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.228: Parent and EA inode have the same ino 15 [ 72.703488][ T4444] EXT4-fs (loop1): Remounting filesystem read-only [ 72.721254][ T4444] EXT4-fs (loop1): 1 orphan inode deleted [ 72.742064][ T4444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.766543][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 72.766559][ T29] audit: type=1326 audit(1765021057.765:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 72.797726][ T29] audit: type=1326 audit(1765021057.765:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 72.821106][ T29] audit: type=1326 audit(1765021057.765:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 72.844561][ T29] audit: type=1326 audit(1765021057.765:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 72.867911][ T29] audit: type=1326 audit(1765021057.765:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 72.891267][ T29] audit: type=1326 audit(1765021057.765:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 72.914740][ T29] audit: type=1400 audit(1765021057.765:2073): avc: denied { mount } for pid=4441 comm="syz.1.228" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.936459][ T29] audit: type=1326 audit(1765021057.795:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 73.013214][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.074727][ T4461] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 73.081402][ T4461] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.088914][ T4461] vhci_hcd vhci_hcd.0: Device attached [ 73.101302][ T29] audit: type=1326 audit(1765021057.795:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c4ff749 code=0x7ffc0000 [ 73.124787][ T29] audit: type=1326 audit(1765021057.985:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 73.170425][ T4459] loop0: detected capacity change from 0 to 128 [ 73.581789][ T4481] loop4: detected capacity change from 0 to 128 [ 73.733478][ T4483] loop3: detected capacity change from 0 to 512 [ 73.763757][ T4481] /dev/loop4: Can't open blockdev [ 73.942047][ T4481] netlink: 'syz.4.240': attribute type 39 has an invalid length. [ 73.971711][ T4487] loop0: detected capacity change from 0 to 128 [ 74.005583][ T4483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.203781][ T4462] vhci_hcd: connection closed [ 74.209292][ T4485] netlink: 'syz.0.239': attribute type 39 has an invalid length. [ 74.262375][ T65] vhci_hcd: stop threads [ 74.262539][ T3599] usb 7-1: enqueue for inactive port 0 [ 74.266842][ T65] vhci_hcd: release socket [ 74.272433][ T3599] usb 7-1: enqueue for inactive port 0 [ 74.282503][ T65] vhci_hcd: disconnect device [ 74.328257][ T4493] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 74.334830][ T4493] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.337269][ T3599] vhci_hcd: vhci_device speed not set [ 74.342303][ T4493] vhci_hcd vhci_hcd.0: Device attached [ 74.354030][ T4492] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 74.360582][ T4492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.368192][ T4492] vhci_hcd vhci_hcd.0: Device attached [ 74.398421][ T4483] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.237: Parent and EA inode have the same ino 15 [ 74.411019][ T4483] EXT4-fs (loop3): Remounting filesystem read-only [ 74.417971][ T4483] EXT4-fs (loop3): 1 orphan inode deleted [ 74.424212][ T4483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.436782][ T4503] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 74.443318][ T4503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.450888][ T4503] vhci_hcd vhci_hcd.0: Device attached [ 74.566057][ T3486] vhci_hcd: vhci_device speed not set [ 74.612978][ T4506] __nla_validate_parse: 1 callbacks suppressed [ 74.613011][ T4506] netlink: 48 bytes leftover after parsing attributes in process `syz.0.243'. [ 74.628667][ T3486] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 74.631012][ T4493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.242'. [ 74.669305][ T4492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.241'. [ 74.675023][ T4496] vhci_hcd: connection reset by peer [ 74.684504][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.694019][ T1649] vhci_hcd: stop threads [ 74.698332][ T1649] vhci_hcd: release socket [ 74.700327][ T4494] vhci_hcd: connection reset by peer [ 74.702781][ T1649] vhci_hcd: disconnect device [ 74.715177][ T1649] vhci_hcd: stop threads [ 74.719847][ T1649] vhci_hcd: release socket [ 74.724640][ T1649] vhci_hcd: disconnect device [ 74.766427][ T4510] netlink: 3 bytes leftover after parsing attributes in process `syz.2.245'. [ 74.785527][ T4510] 1ªX¹¦À: renamed from 60ªX¹¦À [ 74.790928][ T4504] vhci_hcd: connection closed [ 74.791152][ T2050] vhci_hcd: stop threads [ 74.800161][ T2050] vhci_hcd: release socket [ 74.800178][ T2050] vhci_hcd: disconnect device [ 74.809631][ T4510] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.830625][ T4512] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 74.843576][ T4512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.856172][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 74.867762][ T4512] bond1 (unregistering): Released all slaves [ 75.290317][ T4519] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 75.296882][ T4519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.304369][ T4519] vhci_hcd vhci_hcd.0: Device attached [ 75.536806][ T4529] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 75.794386][ T4519] netlink: 48 bytes leftover after parsing attributes in process `syz.4.247'. [ 75.845834][ T4520] vhci_hcd: connection closed [ 75.856105][ T2050] vhci_hcd: stop threads [ 75.865097][ T2050] vhci_hcd: release socket [ 75.869569][ T2050] vhci_hcd: disconnect device [ 75.922103][ T4536] loop0: detected capacity change from 0 to 128 [ 75.987215][ T4537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.249'. [ 76.002744][ T4534] loop3: detected capacity change from 0 to 128 [ 76.074478][ T4534] netlink: 'syz.3.251': attribute type 39 has an invalid length. [ 76.078036][ T4532] loop2: detected capacity change from 0 to 128 [ 76.309775][ T4541] loop1: detected capacity change from 0 to 128 [ 76.448682][ T4541] netlink: 'syz.1.253': attribute type 39 has an invalid length. [ 76.513849][ T4554] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.553918][ T4545] loop0: detected capacity change from 0 to 128 [ 76.793087][ T4545] netlink: 'syz.0.255': attribute type 39 has an invalid length. [ 76.877172][ T3506] usb 1-1: enqueue for inactive port 0 [ 76.891069][ T4539] loop3: detected capacity change from 0 to 512 [ 76.918638][ T3506] usb 1-1: enqueue for inactive port 0 [ 76.954635][ T4539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.029734][ T4539] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.252: Parent and EA inode have the same ino 15 [ 77.051828][ T4539] EXT4-fs (loop3): Remounting filesystem read-only [ 77.061709][ T4539] EXT4-fs (loop3): 1 orphan inode deleted [ 77.070229][ T4539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.076262][ T9] usb 5-1: enqueue for inactive port 0 [ 77.108127][ T3506] vhci_hcd: vhci_device speed not set [ 77.113887][ T9] usb 5-1: enqueue for inactive port 0 [ 77.179639][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.191123][ T9] vhci_hcd: vhci_device speed not set [ 77.232712][ T4575] netlink: 3 bytes leftover after parsing attributes in process `syz.3.261'. [ 77.242932][ T4575] 1ªX¹¦À: renamed from 60ªX¹¦À [ 77.247965][ T4576] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 77.254542][ T4576] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.262105][ T4576] vhci_hcd vhci_hcd.0: Device attached [ 77.269120][ T4575] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 77.305711][ T4582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 77.312299][ T4582] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.319838][ T4582] vhci_hcd vhci_hcd.0: Device attached [ 77.440791][ T4585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.262'. [ 77.480497][ T4577] vhci_hcd: connection closed [ 77.480640][ T1649] vhci_hcd: stop threads [ 77.489707][ T1649] vhci_hcd: release socket [ 77.494235][ T1649] vhci_hcd: disconnect device [ 77.532665][ T4582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.263'. [ 77.543212][ T4583] vhci_hcd: connection closed [ 77.543687][ T1649] vhci_hcd: stop threads [ 77.552676][ T1649] vhci_hcd: release socket [ 77.557140][ T1649] vhci_hcd: disconnect device [ 77.716058][ T9] vhci_hcd: vhci_device speed not set [ 77.794697][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 77.794715][ T29] audit: type=1400 audit(1765021062.785:2351): avc: denied { open } for pid=4589 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.822126][ T29] audit: type=1400 audit(1765021062.785:2352): avc: denied { kernel } for pid=4589 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.841782][ T29] audit: type=1326 audit(1765021062.825:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 77.865247][ T29] audit: type=1326 audit(1765021062.825:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 77.896387][ T29] audit: type=1326 audit(1765021062.825:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 77.919916][ T29] audit: type=1326 audit(1765021062.845:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 77.943500][ T29] audit: type=1326 audit(1765021062.845:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 77.967187][ T29] audit: type=1326 audit(1765021062.865:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 77.990527][ T29] audit: type=1326 audit(1765021062.865:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 78.013950][ T29] audit: type=1326 audit(1765021062.865:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 78.049295][ T4593] loop0: detected capacity change from 0 to 512 [ 78.057710][ T4590] loop1: detected capacity change from 0 to 128 [ 78.077129][ T4593] vfat: Bad value for 'uni_xlate' [ 78.194240][ T4599] netlink: 'syz.2.267': attribute type 39 has an invalid length. [ 78.206008][ T4590] netlink: 'syz.1.264': attribute type 39 has an invalid length. [ 78.237991][ T4602] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 78.244560][ T4602] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.252035][ T4602] vhci_hcd vhci_hcd.0: Device attached [ 78.380427][ T4605] loop3: detected capacity change from 0 to 128 [ 78.437764][ T4605] netlink: 'syz.3.269': attribute type 39 has an invalid length. [ 78.474051][ T4614] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 78.480616][ T4614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.488151][ T4614] vhci_hcd vhci_hcd.0: Device attached [ 78.488482][ T4604] vhci_hcd: connection closed [ 78.494038][ T1636] vhci_hcd: stop threads [ 78.503158][ T1636] vhci_hcd: release socket [ 78.507603][ T1636] vhci_hcd: disconnect device [ 78.617104][ T9] vhci_hcd: vhci_device speed not set [ 78.646183][ T4615] vhci_hcd: connection closed [ 78.646440][ T52] vhci_hcd: stop threads [ 78.655456][ T52] vhci_hcd: release socket [ 78.660020][ T52] vhci_hcd: disconnect device [ 78.676095][ T3506] vhci_hcd: vhci_device speed not set [ 79.059429][ T4621] loop4: detected capacity change from 0 to 128 [ 79.164611][ T4621] netlink: 'syz.4.274': attribute type 39 has an invalid length. [ 79.275842][ T4623] netlink: 'syz.2.275': attribute type 39 has an invalid length. [ 79.328631][ T4635] 0ªX¹¦À: renamed from 61ªX¹¦À [ 79.340641][ T4635] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.676104][ T3486] usb 9-1: enqueue for inactive port 0 [ 79.681804][ T3486] usb 9-1: enqueue for inactive port 0 [ 79.705683][ T4647] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 79.712250][ T4647] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.719794][ T4647] vhci_hcd vhci_hcd.0: Device attached [ 79.756062][ T3602] usb 3-1: enqueue for inactive port 0 [ 79.761809][ T3486] vhci_hcd: vhci_device speed not set [ 79.804245][ T4664] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 79.850852][ T3602] vhci_hcd: vhci_device speed not set [ 79.901622][ T4647] __nla_validate_parse: 4 callbacks suppressed [ 79.901638][ T4647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.282'. [ 79.988510][ T3486] vhci_hcd: vhci_device speed not set [ 80.224499][ T4651] vhci_hcd: connection closed [ 80.235098][ T1649] vhci_hcd: stop threads [ 80.244119][ T1649] vhci_hcd: release socket [ 80.248575][ T1649] vhci_hcd: disconnect device [ 80.406642][ T4674] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 80.466642][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 80.479492][ T4674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.637492][ T4677] bond1 (unregistering): Released all slaves [ 80.680985][ T4680] netlink: 'syz.2.291': attribute type 39 has an invalid length. [ 80.732691][ T4685] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.180568][ T4695] set_capacity_and_notify: 2 callbacks suppressed [ 81.180590][ T4695] loop2: detected capacity change from 0 to 512 [ 81.232784][ T4695] EXT4-fs: dax option not supported [ 81.449451][ T4711] loop1: detected capacity change from 0 to 128 [ 81.449927][ T4708] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 81.462318][ T4708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.469981][ T4708] vhci_hcd vhci_hcd.0: Device attached [ 81.539017][ T4715] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.615693][ T4717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'. [ 81.952501][ T4721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.298'. [ 82.024091][ T4731] loop1: detected capacity change from 0 to 512 [ 82.030954][ T4731] vfat: Bad value for 'uni_xlate' [ 82.051067][ T4713] vhci_hcd: connection reset by peer [ 82.057000][ T352] vhci_hcd: stop threads [ 82.061265][ T352] vhci_hcd: release socket [ 82.065819][ T352] vhci_hcd: disconnect device [ 82.094546][ T4733] netlink: 144 bytes leftover after parsing attributes in process `syz.1.302'. [ 82.197294][ T4736] loop0: detected capacity change from 0 to 512 [ 82.205374][ T4736] vfat: Bad value for 'uni_xlate' [ 82.267635][ T4740] netlink: 144 bytes leftover after parsing attributes in process `syz.0.303'. [ 82.500164][ T4742] loop3: detected capacity change from 0 to 512 [ 82.507063][ T4742] vfat: Bad value for 'uni_xlate' [ 82.575333][ T4743] netlink: 144 bytes leftover after parsing attributes in process `syz.3.304'. [ 82.825927][ T4747] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 82.956573][ T4749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 82.963220][ T4749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.970743][ T4749] vhci_hcd vhci_hcd.0: Device attached [ 83.012547][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 83.012564][ T29] audit: type=1326 audit(1765021067.995:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.042281][ T29] audit: type=1326 audit(1765021067.995:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.065655][ T29] audit: type=1326 audit(1765021067.995:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.088997][ T29] audit: type=1326 audit(1765021067.995:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.112331][ T29] audit: type=1326 audit(1765021067.995:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.135651][ T29] audit: type=1326 audit(1765021067.995:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.159085][ T29] audit: type=1326 audit(1765021067.995:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.182663][ T29] audit: type=1326 audit(1765021067.995:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.206253][ T29] audit: type=1326 audit(1765021068.005:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.229661][ T29] audit: type=1326 audit(1765021068.005:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 83.503819][ T3602] vhci_hcd: vhci_device speed not set [ 83.696135][ T4750] vhci_hcd: connection closed [ 83.696553][ T352] vhci_hcd: stop threads [ 83.705673][ T352] vhci_hcd: release socket [ 83.710183][ T352] vhci_hcd: disconnect device [ 83.790437][ T4767] loop4: detected capacity change from 0 to 128 [ 83.871677][ T4767] netlink: 'syz.4.311': attribute type 39 has an invalid length. [ 83.963548][ T4778] loop4: detected capacity change from 0 to 128 [ 84.058696][ T4779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 84.177378][ T3602] usb 3-1: new full-speed USB device number 5 using vhci_hcd [ 84.238048][ T3602] usb 3-1: enqueue for inactive port 0 [ 84.272493][ T3602] usb 3-1: enqueue for inactive port 0 [ 84.279537][ T4783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 84.286140][ T4783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.293655][ T4783] vhci_hcd vhci_hcd.0: Device attached [ 84.296827][ T3602] usb 3-1: enqueue for inactive port 0 [ 84.366822][ T4798] loop4: detected capacity change from 0 to 512 [ 84.376637][ T3602] vhci_hcd: vhci_device speed not set [ 84.376683][ T4798] EXT4-fs: dax option not supported [ 84.411342][ T4785] loop1: detected capacity change from 0 to 128 [ 84.476078][ T3505] vhci_hcd: vhci_device speed not set [ 84.509291][ T4783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 84.552421][ T3505] usb 5-1: new full-speed USB device number 7 using vhci_hcd [ 84.588907][ T4785] netlink: 'syz.1.317': attribute type 39 has an invalid length. [ 84.656246][ T4788] vhci_hcd: connection reset by peer [ 84.674498][ T65] vhci_hcd: stop threads [ 84.678817][ T65] vhci_hcd: release socket [ 84.683267][ T65] vhci_hcd: disconnect device [ 84.720093][ T4819] loop4: detected capacity change from 0 to 512 [ 84.731202][ T4819] vfat: Bad value for 'uni_xlate' [ 84.759802][ T4819] netlink: 144 bytes leftover after parsing attributes in process `syz.4.321'. [ 84.825562][ T4821] netlink: 'syz.1.322': attribute type 39 has an invalid length. [ 84.844473][ T4822] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.276726][ T3486] usb 9-1: enqueue for inactive port 0 [ 85.305775][ T3486] usb 9-1: enqueue for inactive port 0 [ 85.569229][ T3486] vhci_hcd: vhci_device speed not set [ 85.575419][ T4834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 85.664269][ T4838] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 85.670822][ T4838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.678363][ T4838] vhci_hcd vhci_hcd.0: Device attached [ 85.854902][ T4838] netlink: 48 bytes leftover after parsing attributes in process `syz.0.327'. [ 85.865233][ T3602] vhci_hcd: vhci_device speed not set [ 85.885824][ T4839] vhci_hcd: connection closed [ 85.894796][ T2050] vhci_hcd: stop threads [ 85.903969][ T2050] vhci_hcd: release socket [ 85.908425][ T2050] vhci_hcd: disconnect device [ 85.926464][ T3602] usb 1-1: new full-speed USB device number 9 using vhci_hcd [ 85.933975][ T3602] usb 1-1: enqueue for inactive port 0 [ 85.940810][ T3602] usb 1-1: enqueue for inactive port 0 [ 85.946547][ T3602] usb 1-1: enqueue for inactive port 0 [ 86.181149][ T4857] EXT4-fs: dax option not supported [ 86.225376][ T3602] vhci_hcd: vhci_device speed not set [ 86.766526][ T4865] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 87.520602][ T4874] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 87.844477][ T4881] set_capacity_and_notify: 2 callbacks suppressed [ 87.844559][ T4881] loop3: detected capacity change from 0 to 128 [ 87.859576][ T4882] loop2: detected capacity change from 0 to 128 [ 87.986053][ T4882] netlink: 'syz.2.335': attribute type 39 has an invalid length. [ 88.039936][ T4893] loop0: detected capacity change from 0 to 512 [ 88.054012][ T4893] vfat: Bad value for 'uni_xlate' [ 88.061575][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 88.061593][ T29] audit: type=1326 audit(1765021073.055:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.076280][ T4893] netlink: 144 bytes leftover after parsing attributes in process `syz.0.338'. [ 88.119334][ T29] audit: type=1326 audit(1765021073.055:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.142852][ T29] audit: type=1326 audit(1765021073.055:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.166430][ T29] audit: type=1326 audit(1765021073.095:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.189814][ T29] audit: type=1326 audit(1765021073.105:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.213265][ T29] audit: type=1326 audit(1765021073.105:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.236729][ T29] audit: type=1326 audit(1765021073.105:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.260150][ T29] audit: type=1326 audit(1765021073.105:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.283479][ T29] audit: type=1326 audit(1765021073.105:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.306885][ T29] audit: type=1326 audit(1765021073.105:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa23523f749 code=0x7ffc0000 [ 88.351172][ T4897] loop1: detected capacity change from 0 to 128 [ 88.387964][ T4897] netlink: 'syz.1.340': attribute type 39 has an invalid length. [ 88.833564][ T4915] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 89.543838][ T4919] loop2: detected capacity change from 0 to 128 [ 89.598375][ T3505] usb 5-1: enqueue for inactive port 0 [ 89.605540][ T4919] netlink: 'syz.2.345': attribute type 39 has an invalid length. [ 89.612418][ T3505] usb 5-1: enqueue for inactive port 0 [ 89.630220][ T4923] netlink: 'syz.3.348': attribute type 39 has an invalid length. [ 89.676750][ T4927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 89.683451][ T4927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.690958][ T4927] vhci_hcd vhci_hcd.0: Device attached [ 89.697150][ T3505] vhci_hcd: vhci_device speed not set [ 89.705853][ T4931] loop2: detected capacity change from 0 to 128 [ 89.746968][ T4933] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 89.753612][ T4933] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.761160][ T4933] vhci_hcd vhci_hcd.0: Device attached [ 89.806532][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 89.876077][ T3599] vhci_hcd: vhci_device speed not set [ 89.919877][ T4939] netlink: 'syz.2.353': attribute type 39 has an invalid length. [ 89.946102][ T3602] vhci_hcd: vhci_device speed not set [ 89.951712][ T3599] usb 7-1: new full-speed USB device number 8 using vhci_hcd [ 89.985370][ T4927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 89.995697][ T4928] vhci_hcd: connection reset by peer [ 90.001330][ T52] vhci_hcd: stop threads [ 90.005610][ T52] vhci_hcd: release socket [ 90.010096][ T52] vhci_hcd: disconnect device [ 90.012472][ T3602] usb 3-1: new full-speed USB device number 6 using vhci_hcd [ 90.024880][ T4942] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 90.042017][ T4942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.051345][ T4933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'. [ 90.058276][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 90.069066][ T4934] vhci_hcd: connection reset by peer [ 90.074574][ T52] vhci_hcd: stop threads [ 90.078910][ T52] vhci_hcd: release socket [ 90.083438][ T52] vhci_hcd: disconnect device [ 90.089307][ T4942] bond1 (unregistering): Released all slaves [ 90.547631][ T4946] netlink: 'syz.3.355': attribute type 39 has an invalid length. [ 90.687611][ T4952] loop3: detected capacity change from 0 to 128 [ 90.706848][ T4957] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 90.723056][ T4959] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 90.729692][ T4959] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.737192][ T4959] vhci_hcd vhci_hcd.0: Device attached [ 90.751240][ T4957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.757439][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 90.789770][ T4964] bond1 (unregistering): Released all slaves [ 90.831712][ T4952] netlink: 'syz.3.358': attribute type 39 has an invalid length. [ 90.916092][ T3505] vhci_hcd: vhci_device speed not set [ 90.979049][ T3505] usb 9-1: new full-speed USB device number 8 using vhci_hcd [ 91.020509][ T4972] netlink: 'syz.3.362': attribute type 39 has an invalid length. [ 91.105943][ T4962] vhci_hcd: connection reset by peer [ 91.111920][ T2050] vhci_hcd: stop threads [ 91.116327][ T2050] vhci_hcd: release socket [ 91.120828][ T2050] vhci_hcd: disconnect device [ 91.206288][ T4982] netlink: 3 bytes leftover after parsing attributes in process `syz.2.367'. [ 91.215440][ T4982] 1ªX¹¦À: renamed from 60ªX¹¦À [ 91.222892][ T4982] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 91.598982][ T4993] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 91.605565][ T4993] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.613032][ T4993] vhci_hcd vhci_hcd.0: Device attached [ 91.676217][ T5002] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 91.682806][ T5002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.690362][ T5002] vhci_hcd vhci_hcd.0: Device attached [ 91.885953][ T5002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 91.895048][ T4993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 91.896724][ T5003] vhci_hcd: connection closed [ 91.905345][ T55] vhci_hcd: stop threads [ 91.914441][ T55] vhci_hcd: release socket [ 91.918896][ T55] vhci_hcd: disconnect device [ 91.920373][ T4995] vhci_hcd: connection closed [ 91.923774][ T55] vhci_hcd: stop threads [ 91.932826][ T55] vhci_hcd: release socket [ 91.937314][ T55] vhci_hcd: disconnect device [ 92.367153][ T5014] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 92.714737][ T5028] 9pnet_fd: Insufficient options for proto=fd [ 93.025827][ T5030] loop1: detected capacity change from 0 to 128 [ 93.099807][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 93.099823][ T29] audit: type=1400 audit(1765021078.095:3475): avc: denied { create } for pid=5038 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.136320][ T29] audit: type=1400 audit(1765021078.135:3476): avc: denied { create } for pid=5038 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.155903][ T29] audit: type=1400 audit(1765021078.135:3477): avc: denied { setopt } for pid=5038 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.175425][ T29] audit: type=1400 audit(1765021078.135:3478): avc: denied { bind } for pid=5038 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.194987][ T29] audit: type=1400 audit(1765021078.135:3479): avc: denied { name_bind } for pid=5038 comm="syz.2.380" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.216734][ T29] audit: type=1400 audit(1765021078.135:3480): avc: denied { node_bind } for pid=5038 comm="syz.2.380" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 93.238352][ T29] audit: type=1400 audit(1765021078.135:3481): avc: denied { write } for pid=5038 comm="syz.2.380" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.259661][ T29] audit: type=1400 audit(1765021078.135:3482): avc: denied { connect } for pid=5038 comm="syz.2.380" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.281160][ T29] audit: type=1400 audit(1765021078.135:3483): avc: denied { name_connect } for pid=5038 comm="syz.2.380" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.351350][ T5030] netlink: 'syz.1.378': attribute type 39 has an invalid length. [ 93.369125][ T29] audit: type=1400 audit(1765021078.305:3484): avc: denied { mount } for pid=5029 comm="syz.1.378" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 93.588687][ T5048] loop1: detected capacity change from 0 to 128 [ 93.596614][ T5051] loop2: detected capacity change from 0 to 128 [ 93.670499][ T5059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 93.758578][ T5062] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.803149][ T5048] netlink: 'syz.1.383': attribute type 39 has an invalid length. [ 94.286369][ T5068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 94.292930][ T5068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.300462][ T5068] vhci_hcd vhci_hcd.0: Device attached [ 94.424259][ T5077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 94.430820][ T5077] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.438385][ T5077] vhci_hcd vhci_hcd.0: Device attached [ 94.527472][ T5073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.386'. [ 94.548088][ T5089] loop2: detected capacity change from 0 to 512 [ 94.554787][ T5089] EXT4-fs: dax option not supported [ 94.616283][ T3506] vhci_hcd: vhci_device speed not set [ 94.686643][ T3506] usb 1-1: new full-speed USB device number 10 using vhci_hcd [ 94.699256][ T5101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.390'. [ 94.738489][ T5069] vhci_hcd: connection closed [ 94.738871][ T1636] vhci_hcd: stop threads [ 94.747977][ T1636] vhci_hcd: release socket [ 94.752406][ T1636] vhci_hcd: disconnect device [ 94.797760][ T5078] vhci_hcd: connection reset by peer [ 94.803205][ T1636] vhci_hcd: stop threads [ 94.807527][ T1636] vhci_hcd: release socket [ 94.812022][ T1636] vhci_hcd: disconnect device [ 94.825983][ T5105] loop2: detected capacity change from 0 to 128 [ 94.872585][ T5105] validate_nla: 1 callbacks suppressed [ 94.872651][ T5105] netlink: 'syz.2.393': attribute type 39 has an invalid length. [ 95.036070][ T3602] usb 3-1: enqueue for inactive port 0 [ 95.036099][ T3599] usb 7-1: enqueue for inactive port 0 [ 95.047443][ T3599] usb 7-1: enqueue for inactive port 0 [ 95.054353][ T3602] usb 3-1: enqueue for inactive port 0 [ 95.116060][ T3599] vhci_hcd: vhci_device speed not set [ 95.126089][ T3602] vhci_hcd: vhci_device speed not set [ 95.292150][ T5124] loop3: detected capacity change from 0 to 128 [ 95.363519][ T5125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 95.382072][ T5127] netlink: 3 bytes leftover after parsing attributes in process `syz.4.398'. [ 95.404833][ T5127] 1ªX¹¦À: renamed from 60ªX¹¦À [ 95.412055][ T5127] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 95.501422][ T5129] loop0: detected capacity change from 0 to 128 [ 95.539001][ T5129] netlink: 'syz.0.399': attribute type 39 has an invalid length. [ 95.558909][ T5132] loop3: detected capacity change from 0 to 128 [ 95.669569][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 95.874293][ T5139] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 96.280963][ T3505] usb 9-1: enqueue for inactive port 0 [ 96.289685][ T3505] usb 9-1: enqueue for inactive port 0 [ 96.432196][ T3505] vhci_hcd: vhci_device speed not set [ 96.463468][ T5146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 96.470045][ T5146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.478082][ T5146] vhci_hcd vhci_hcd.0: Device attached [ 96.567951][ T5154] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 96.613900][ T5146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.403'. [ 96.662712][ T5147] vhci_hcd: connection closed [ 96.662946][ T1636] vhci_hcd: stop threads [ 96.672200][ T1636] vhci_hcd: release socket [ 96.676652][ T1636] vhci_hcd: disconnect device [ 96.684235][ T3599] vhci_hcd: vhci_device speed not set [ 96.733514][ T5156] loop0: detected capacity change from 0 to 128 [ 96.819509][ T5156] netlink: 'syz.0.407': attribute type 39 has an invalid length. [ 97.183086][ T5166] loop2: detected capacity change from 0 to 128 [ 97.256882][ T5169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 97.263542][ T5169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.266704][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 97.271111][ T5169] vhci_hcd vhci_hcd.0: Device attached [ 97.311837][ T5176] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 97.318465][ T5176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.325947][ T5176] vhci_hcd vhci_hcd.0: Device attached [ 97.381155][ T5179] netlink: 56 bytes leftover after parsing attributes in process `syz.1.411'. [ 97.391272][ T5181] vfat: Bad value for 'uni_xlate' [ 97.479528][ T5185] netlink: 144 bytes leftover after parsing attributes in process `syz.2.414'. [ 97.495726][ T5171] vhci_hcd: connection closed [ 97.495980][ T65] vhci_hcd: stop threads [ 97.505008][ T65] vhci_hcd: release socket [ 97.509472][ T65] vhci_hcd: disconnect device [ 97.546044][ T3505] vhci_hcd: vhci_device speed not set [ 97.585380][ T5184] netlink: 'syz.3.415': attribute type 39 has an invalid length. [ 97.603112][ T5176] netlink: 48 bytes leftover after parsing attributes in process `syz.4.413'. [ 97.614075][ T5177] vhci_hcd: connection closed [ 97.614268][ T2490] vhci_hcd: stop threads [ 97.623350][ T2490] vhci_hcd: release socket [ 97.626056][ T3505] usb 9-1: new full-speed USB device number 9 using vhci_hcd [ 97.627876][ T2490] vhci_hcd: disconnect device [ 97.656035][ T3599] vhci_hcd: vhci_device speed not set [ 97.659374][ T5188] netlink: 3 bytes leftover after parsing attributes in process `syz.3.416'. [ 97.670613][ T5188] 0ªX¹¦À: renamed from 61ªX¹¦À [ 97.679272][ T5188] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.834948][ T5191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 97.841759][ T5191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.849221][ T5191] vhci_hcd vhci_hcd.0: Device attached [ 98.001209][ T5191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.417'. [ 98.031019][ T5192] vhci_hcd: connection closed [ 98.031235][ T65] vhci_hcd: stop threads [ 98.040293][ T65] vhci_hcd: release socket [ 98.044755][ T65] vhci_hcd: disconnect device [ 98.249104][ T5206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 98.310788][ T5213] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 98.317350][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.324855][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 98.348800][ T5219] set_capacity_and_notify: 2 callbacks suppressed [ 98.348819][ T5219] loop2: detected capacity change from 0 to 512 [ 98.370313][ T5219] EXT4-fs: dax option not supported [ 98.450258][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 98.450277][ T29] audit: type=1326 audit(1765021083.445:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.496040][ T29] audit: type=1326 audit(1765021083.445:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.519598][ T29] audit: type=1326 audit(1765021083.455:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.542922][ T29] audit: type=1326 audit(1765021083.465:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.566234][ T29] audit: type=1326 audit(1765021083.465:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.589642][ T29] audit: type=1326 audit(1765021083.485:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.637406][ T5232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.422'. [ 98.686530][ T3599] vhci_hcd: vhci_device speed not set [ 98.724111][ T5234] loop0: detected capacity change from 0 to 128 [ 98.746189][ T29] audit: type=1326 audit(1765021083.485:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.769707][ T29] audit: type=1326 audit(1765021083.505:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.778045][ T5226] loop4: detected capacity change from 0 to 128 [ 98.793383][ T29] audit: type=1326 audit(1765021083.525:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.793429][ T29] audit: type=1326 audit(1765021083.525:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7317f749 code=0x7ffc0000 [ 98.793986][ T3599] usb 3-1: new full-speed USB device number 8 using vhci_hcd [ 98.934555][ T5236] netlink: 'syz.2.425': attribute type 39 has an invalid length. [ 98.959921][ T5215] vhci_hcd: connection reset by peer [ 98.965527][ T2490] vhci_hcd: stop threads [ 98.969834][ T2490] vhci_hcd: release socket [ 98.974288][ T2490] vhci_hcd: disconnect device [ 98.996528][ T5234] netlink: 'syz.0.424': attribute type 39 has an invalid length. [ 99.010997][ T5239] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 99.035418][ T5239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.063054][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 99.086527][ T5241] loop2: detected capacity change from 0 to 128 [ 99.098726][ T5244] bond1 (unregistering): Released all slaves [ 99.150141][ T5226] netlink: 'syz.4.423': attribute type 39 has an invalid length. [ 99.307579][ T5257] loop2: detected capacity change from 0 to 128 [ 99.360801][ T5259] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5259 comm=syz.0.433 [ 99.633515][ T5271] loop0: detected capacity change from 0 to 512 [ 99.668886][ T5271] EXT4-fs: dax option not supported [ 99.766254][ T3506] usb 1-1: enqueue for inactive port 0 [ 99.798930][ T5276] 0ªX¹¦À: renamed from 61ªX¹¦À [ 99.816223][ T3506] usb 1-1: enqueue for inactive port 0 [ 99.865341][ T5276] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 99.966216][ T3506] vhci_hcd: vhci_device speed not set [ 100.113307][ T5291] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 100.218982][ T5298] loop4: detected capacity change from 0 to 128 [ 100.405105][ T5305] loop4: detected capacity change from 0 to 128 [ 100.447104][ T5305] netlink: 'syz.4.443': attribute type 39 has an invalid length. [ 100.493632][ T5307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5307 comm=syz.4.444 [ 100.817827][ T5320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 100.824404][ T5320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.831999][ T5320] vhci_hcd vhci_hcd.0: Device attached [ 100.909965][ T5327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 100.916514][ T5327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.924026][ T5327] vhci_hcd vhci_hcd.0: Device attached [ 101.006059][ T3506] vhci_hcd: vhci_device speed not set [ 101.016997][ T5321] vhci_hcd: connection closed [ 101.017217][ T1636] vhci_hcd: stop threads [ 101.026436][ T1636] vhci_hcd: release socket [ 101.030872][ T1636] vhci_hcd: disconnect device [ 101.069424][ T3506] usb 7-1: new full-speed USB device number 9 using vhci_hcd [ 101.078325][ T3506] usb 7-1: enqueue for inactive port 0 [ 101.089524][ T3506] usb 7-1: enqueue for inactive port 0 [ 101.106493][ T9] vhci_hcd: vhci_device speed not set [ 101.119348][ T3506] usb 7-1: enqueue for inactive port 0 [ 101.125715][ T5332] loop1: detected capacity change from 0 to 128 [ 101.154992][ T5329] vhci_hcd: connection closed [ 101.155305][ T1636] vhci_hcd: stop threads [ 101.164359][ T1636] vhci_hcd: release socket [ 101.168834][ T1636] vhci_hcd: disconnect device [ 101.174301][ T5332] netlink: 'syz.1.449': attribute type 39 has an invalid length. [ 101.182461][ T9] usb 1-1: new full-speed USB device number 11 using vhci_hcd [ 101.189999][ T9] usb 1-1: enqueue for inactive port 0 [ 101.195953][ T9] usb 1-1: enqueue for inactive port 0 [ 101.202477][ T3506] vhci_hcd: vhci_device speed not set [ 101.208060][ T9] usb 1-1: enqueue for inactive port 0 [ 101.276345][ T9] vhci_hcd: vhci_device speed not set [ 101.298099][ T5343] loop1: detected capacity change from 0 to 512 [ 101.305085][ T5343] EXT4-fs: dax option not supported [ 101.467469][ T5356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 101.474073][ T5356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.481715][ T5356] vhci_hcd vhci_hcd.0: Device attached [ 101.693979][ T5362] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 101.774930][ T5365] __nla_validate_parse: 7 callbacks suppressed [ 101.774946][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 101.814186][ T5364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5364 comm=syz.2.455 [ 101.896915][ T5362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.993270][ T5373] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 101.999842][ T5373] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.007292][ T5373] vhci_hcd vhci_hcd.0: Device attached [ 102.056386][ T5356] netlink: 48 bytes leftover after parsing attributes in process `syz.4.453'. [ 102.067625][ T5357] vhci_hcd: connection reset by peer [ 102.073245][ T2490] vhci_hcd: stop threads [ 102.077603][ T2490] vhci_hcd: release socket [ 102.082039][ T2490] vhci_hcd: disconnect device [ 102.163139][ T5373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 102.173819][ T5375] vhci_hcd: connection closed [ 102.174119][ T2490] vhci_hcd: stop threads [ 102.183124][ T2490] vhci_hcd: release socket [ 102.187650][ T2490] vhci_hcd: disconnect device [ 102.192353][ T1047] vhci_hcd: vhci_device speed not set [ 102.609894][ T5388] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 102.616512][ T5388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.624069][ T5388] vhci_hcd vhci_hcd.0: Device attached [ 102.705274][ T5391] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.159224][ T5388] netlink: 56 bytes leftover after parsing attributes in process `syz.4.460'. [ 103.178344][ T5389] vhci_hcd: connection reset by peer [ 103.185909][ T5403] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.199439][ T37] vhci_hcd: stop threads [ 103.203740][ T37] vhci_hcd: release socket [ 103.208371][ T37] vhci_hcd: disconnect device [ 103.213223][ T3505] usb 9-1: enqueue for inactive port 0 [ 103.221207][ T5402] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 103.227825][ T5402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.235360][ T5402] vhci_hcd vhci_hcd.0: Device attached [ 103.235381][ T3505] usb 9-1: enqueue for inactive port 0 [ 103.295492][ T5395] netlink: 'syz.2.462': attribute type 39 has an invalid length. [ 103.326048][ T3505] vhci_hcd: vhci_device speed not set [ 103.445217][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 103.455687][ T5404] vhci_hcd: connection closed [ 103.455844][ T1636] vhci_hcd: stop threads [ 103.457003][ T5411] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 103.460628][ T1636] vhci_hcd: release socket [ 103.477003][ T1636] vhci_hcd: disconnect device [ 103.478821][ T5411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.496700][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 103.508351][ T5411] bond2 (unregistering): Released all slaves [ 103.534463][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 103.534481][ T29] audit: type=1400 audit(1765021088.525:4228): avc: denied { shutdown } for pid=5409 comm="syz.2.467" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.614900][ T29] audit: type=1326 audit(1765021088.605:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.638522][ T29] audit: type=1326 audit(1765021088.605:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.662069][ T29] audit: type=1326 audit(1765021088.615:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.685578][ T29] audit: type=1326 audit(1765021088.615:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.709006][ T29] audit: type=1326 audit(1765021088.615:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.732456][ T29] audit: type=1326 audit(1765021088.625:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.755873][ T29] audit: type=1326 audit(1765021088.625:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.779287][ T29] audit: type=1326 audit(1765021088.625:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.808796][ T5416] set_capacity_and_notify: 1 callbacks suppressed [ 103.809030][ T5416] loop2: detected capacity change from 0 to 128 [ 103.873776][ T3599] usb 3-1: enqueue for inactive port 0 [ 103.881142][ T3599] usb 3-1: enqueue for inactive port 0 [ 103.905479][ T5420] loop0: detected capacity change from 0 to 128 [ 103.942519][ T29] audit: type=1326 audit(1765021088.635:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75677cf749 code=0x7ffc0000 [ 103.976061][ T3599] vhci_hcd: vhci_device speed not set [ 103.992049][ T5421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 104.012145][ T5416] netlink: 'syz.2.468': attribute type 39 has an invalid length. [ 104.028517][ T5418] loop4: detected capacity change from 0 to 128 [ 104.129457][ T5418] netlink: 'syz.4.469': attribute type 39 has an invalid length. [ 104.159858][ T5428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 104.166533][ T5428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.174005][ T5428] vhci_hcd vhci_hcd.0: Device attached [ 104.215949][ T5433] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 104.222651][ T5433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.230194][ T5433] vhci_hcd vhci_hcd.0: Device attached [ 104.334932][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.476'. [ 104.356525][ T1047] vhci_hcd: vhci_device speed not set [ 104.409230][ T5439] loop0: detected capacity change from 0 to 128 [ 104.436052][ T1047] usb 5-1: new full-speed USB device number 9 using vhci_hcd [ 104.446057][ T3505] vhci_hcd: vhci_device speed not set [ 104.499244][ T5439] netlink: 'syz.0.475': attribute type 39 has an invalid length. [ 104.524741][ T5452] netlink: 3 bytes leftover after parsing attributes in process `syz.3.479'. [ 104.559295][ T5452] 1ªX¹¦À: renamed from 60ªX¹¦À [ 104.583297][ T5452] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 104.600540][ T5433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.474'. [ 104.646790][ T5434] vhci_hcd: connection closed [ 104.678278][ T5458] loop1: detected capacity change from 0 to 128 [ 104.710942][ T2490] vhci_hcd: stop threads [ 104.715273][ T2490] vhci_hcd: release socket [ 104.720093][ T2490] vhci_hcd: disconnect device [ 104.724871][ T5429] vhci_hcd: connection reset by peer [ 104.730289][ T3505] usb 9-1: enqueue for inactive port 0 [ 104.735845][ T3505] usb 9-1: enqueue for inactive port 0 [ 104.742588][ T2490] vhci_hcd: stop threads [ 104.746900][ T2490] vhci_hcd: release socket [ 104.751337][ T2490] vhci_hcd: disconnect device [ 104.756155][ T3505] usb 9-1: enqueue for inactive port 0 [ 104.771872][ T5457] netlink: 'syz.1.481': attribute type 39 has an invalid length. [ 104.836105][ T3505] vhci_hcd: vhci_device speed not set [ 104.907959][ T5463] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 105.254603][ T5474] loop4: detected capacity change from 0 to 128 [ 105.322939][ T5474] netlink: 'syz.4.484': attribute type 39 has an invalid length. [ 105.523054][ T5486] loop4: detected capacity change from 0 to 512 [ 105.529873][ T5486] vfat: Bad value for 'uni_xlate' [ 105.695582][ T5494] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 105.799916][ T5498] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 105.806459][ T5498] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.814017][ T5498] vhci_hcd vhci_hcd.0: Device attached [ 105.900135][ T5502] loop1: detected capacity change from 0 to 128 [ 105.953553][ T5502] validate_nla: 1 callbacks suppressed [ 105.953586][ T5502] netlink: 'syz.1.493': attribute type 39 has an invalid length. [ 105.996113][ T3505] vhci_hcd: vhci_device speed not set [ 106.028977][ T5499] vhci_hcd: connection closed [ 106.029829][ T37] vhci_hcd: stop threads [ 106.038896][ T37] vhci_hcd: release socket [ 106.043329][ T37] vhci_hcd: disconnect device [ 106.056053][ T3505] usb 1-1: new full-speed USB device number 12 using vhci_hcd [ 106.066250][ T3505] usb 1-1: enqueue for inactive port 0 [ 106.071821][ T3505] usb 1-1: enqueue for inactive port 0 [ 106.081175][ T3505] usb 1-1: enqueue for inactive port 0 [ 106.156912][ T3505] vhci_hcd: vhci_device speed not set [ 106.185099][ T5509] loop2: detected capacity change from 0 to 128 [ 106.212926][ T5509] netlink: 'syz.2.496': attribute type 39 has an invalid length. [ 106.406145][ T5516] 1ªX¹¦À: renamed from 60ªX¹¦À [ 106.412624][ T5516] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 106.498890][ T5519] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 106.505450][ T5519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.512928][ T5519] vhci_hcd vhci_hcd.0: Device attached [ 106.686066][ T3506] vhci_hcd: vhci_device speed not set [ 106.708255][ T5520] vhci_hcd: connection closed [ 106.708414][ T1649] vhci_hcd: stop threads [ 106.717708][ T1649] vhci_hcd: release socket [ 106.722140][ T1649] vhci_hcd: disconnect device [ 106.746109][ T3506] usb 7-1: new full-speed USB device number 10 using vhci_hcd [ 106.753642][ T3506] usb 7-1: enqueue for inactive port 0 [ 106.759167][ T3506] usb 7-1: enqueue for inactive port 0 [ 106.764827][ T3506] usb 7-1: enqueue for inactive port 0 [ 106.836057][ T3506] vhci_hcd: vhci_device speed not set [ 106.988075][ T5529] loop1: detected capacity change from 0 to 128 [ 107.027098][ T5529] netlink: 'syz.1.501': attribute type 39 has an invalid length. [ 107.059654][ T5531] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 107.066200][ T5531] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.073667][ T5531] vhci_hcd vhci_hcd.0: Device attached [ 107.209703][ T5531] __nla_validate_parse: 6 callbacks suppressed [ 107.209719][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.502'. [ 107.227146][ T5532] vhci_hcd: connection closed [ 107.227340][ T1636] vhci_hcd: stop threads [ 107.236339][ T1636] vhci_hcd: release socket [ 107.240777][ T1636] vhci_hcd: disconnect device [ 107.256180][ T3602] vhci_hcd: vhci_device speed not set [ 107.465646][ T5537] netlink: 'syz.2.504': attribute type 39 has an invalid length. [ 107.499467][ T5541] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 107.693755][ T5538] ================================================================== [ 107.701885][ T5538] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 107.708541][ T5538] [ 107.710872][ T5538] write to 0xffff88810aacc310 of 136 bytes by task 3614 on cpu 0: [ 107.718681][ T5538] __bpf_get_stackid+0x737/0x7d0 [ 107.723731][ T5538] bpf_get_stackid+0xf3/0x130 [ 107.728455][ T5538] bpf_get_stackid_raw_tp+0xf6/0x120 [ 107.733767][ T5538] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 107.739232][ T5538] bpf_trace_run2+0x107/0x1d0 [ 107.743937][ T5538] __traceiter_kfree+0x2e/0x50 [ 107.748724][ T5538] kfree+0x353/0x3c0 [ 107.752718][ T5538] security_context_to_sid_core+0x375/0x3b0 [ 107.758642][ T5538] security_context_to_sid_force+0x30/0x40 [ 107.764485][ T5538] selinux_inode_post_setxattr+0xa5/0x2b0 [ 107.770230][ T5538] security_inode_post_setxattr+0x94/0xc0 [ 107.775971][ T5538] __vfs_setxattr_noperm+0x38a/0x410 [ 107.781274][ T5538] __vfs_setxattr_locked+0x1a6/0x1c0 [ 107.786580][ T5538] vfs_setxattr+0x132/0x270 [ 107.791440][ T5538] filename_setxattr+0x1ad/0x400 [ 107.796391][ T5538] path_setxattrat+0x2c9/0x310 [ 107.801182][ T5538] __x64_sys_lsetxattr+0x71/0x90 [ 107.806218][ T5538] x64_sys_call+0x2ef0/0x3000 [ 107.810912][ T5538] do_syscall_64+0xd8/0x2a0 [ 107.815443][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.821440][ T5538] [ 107.823774][ T5538] read to 0xffff88810aacc338 of 8 bytes by task 5538 on cpu 1: [ 107.831494][ T5538] bcmp+0x23/0x90 [ 107.835154][ T5538] __bpf_get_stackid+0x382/0x7d0 [ 107.840120][ T5538] bpf_get_stackid+0xf3/0x130 [ 107.844817][ T5538] bpf_get_stackid_raw_tp+0xf6/0x120 [ 107.850146][ T5538] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 107.855625][ T5538] bpf_trace_run2+0x107/0x1d0 [ 107.860332][ T5538] __traceiter_kfree+0x2e/0x50 [ 107.865117][ T5538] kfree+0x353/0x3c0 [ 107.869021][ T5538] ___sys_recvmsg+0x135/0x370 [ 107.873736][ T5538] do_recvmmsg+0x1ef/0x540 [ 107.878171][ T5538] __x64_sys_recvmmsg+0xe5/0x170 [ 107.883148][ T5538] x64_sys_call+0x2b75/0x3000 [ 107.887842][ T5538] do_syscall_64+0xd8/0x2a0 [ 107.892388][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.898294][ T5538] [ 107.900623][ T5538] value changed: 0xffffffff84525edf -> 0xffffffff81d84780 [ 107.907730][ T5538] [ 107.910055][ T5538] Reported by Kernel Concurrency Sanitizer on: [ 107.916219][ T5538] CPU: 1 UID: 0 PID: 5538 Comm: syz.3.503 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.927428][ T5538] Tainted: [W]=WARN [ 107.931234][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.941330][ T5538] ================================================================== [ 108.041195][ T5543] netlink: 'syz.2.506': attribute type 39 has an invalid length. [ 109.516101][ T1047] usb 5-1: enqueue for inactive port 0 [ 109.521629][ T1047] usb 5-1: enqueue for inactive port 0 [ 109.596051][ T1047] vhci_hcd: vhci_device speed not set