last executing test programs: 2m0.197059288s ago: executing program 4 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='btrfs_sync_file\x00', r1, 0x0, 0xa5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) pwritev(r6, &(0x7f00000013c0)=[{&(0x7f00000001c0)="d9", 0x1}], 0x1, 0x200, 0x8000) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 1m59.785124791s ago: executing program 4 (id=734): add_key(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r4, 0x0, 0x0) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x0, 0x1004, 0x5cc}, &(0x7f0000000300), 0x0) syz_clone(0x40ac8000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.437917968s ago: executing program 4 (id=739): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) fcntl$addseals(r2, 0x409, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x8, 0x6, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000340)=0x5) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x78) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setregid(0x0, 0xee00) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) 1m57.306837298s ago: executing program 4 (id=742): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r2, 0x10, 0x160483b7, 0x5) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x42000000) syz_clone3(&(0x7f00000003c0)={0x44084000, &(0x7f00000000c0), 0x0, &(0x7f0000000140), {0x3}, &(0x7f0000000180)=""/163, 0xa3, 0x0, 0x0, 0x0, {r2}}, 0x58) 1m55.466780135s ago: executing program 4 (id=746): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0xfffffffffffffe3b, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 1m54.292011078s ago: executing program 4 (id=749): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1m54.211093425s ago: executing program 32 (id=749): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 6.700924467s ago: executing program 5 (id=1508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4c2, &(0x7f0000001880)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RREADDIR(r6, &(0x7f0000000000)={0x28, 0x29, 0x1, {0x1, [{{0x40, 0x0, 0x3}, 0x6, 0x6, 0x5, './bus'}]}}, 0x28) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x1000008, 0xbb6e9fe6aa012c38, 0xffffffffffffffff, 0x85750000) sendfile(r8, r9, 0x0, 0x20000023896) close(r8) r10 = gettid() ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x4080}, {r2, 0x1}, {r3}, {r0, 0xa106}, {r7, 0x24}, {r1, 0x4}], 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) timer_settime(r11, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 6.275089681s ago: executing program 5 (id=1511): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x3fa, 0x1, 0x70bd29, 0x25dfdbfc, {0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) r5 = inotify_init() readv(r5, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r7, 0x0, 0x0) 5.868112993s ago: executing program 5 (id=1513): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0x2, 0x8b6}, &(0x7f0000000200), &(0x7f0000000300)) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000140)={0x0, 0x334c, 0x10, 0x3, 0x2de, 0x0, r3}, 0x0, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x3, 0x10000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}) 3.916353478s ago: executing program 1 (id=1533): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYBLOB="6e77f9b6b8276c49d817228a240ed20603b709a0c6f07830fa8eb4e8938fc3655e7f5074921f7fd162", @ANYRES16=0x0], 0x0, 0x28, 0x0, 0x5, 0x5}, 0x28) r1 = msgget$private(0x0, 0x790) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000bb93c555eb00d350012800e00c90069703665727370616e00800400120005001100010000000500100009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) dup3(r2, r4, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/286, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc7881f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMhdjSSMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnL060t6nbauD2mqy+O9CtZ8T+Vy7qUzrr0neHid+JfN3UlfXRF5XhS1v7/vfP/D75dLOTrn5DQ61AkzbDNUpakMc9f7j95OBjsPJtzIl8BKswQtO52vdD3Ova6a7zQN421terdjVZoWl5J4XbYdzvGCdxC3w/MinPb1BqNVeNWtv3N7nrTbrv5zPvfr1era+b9pWzP3n2/EjobXrvtddeTmHhxHHPffPrzNMS1O8bsPh7srE5LMg6qzRJUnxZUr9brtVq9Xlu717h3v1otjsyoHqORiLk/afE1M7+TN/CGCnH9/7sltVVWV5vakhn746ipQL46E5Zn8vr/7l33xH4P1/+8yl8aLr6spP5fSx9dm1T/J+RiZJIVxi2xJsx/vZ/neql9PdFDDTTQjp7NZ7vX55fh2/1Zl4qSp1C+PHVka12uTDbHqKE1ramqD7ShlkIZteSpLVehthWqL1ed5JgEcmUnrdiKHN2WUU0NNbQqI1cVbcvXprpaV1O2/h1F0a4eJ/t99YQclQfVZgmqnxA0qf7/4pM066n13xL1/xstP3/NEgOcuyi7/j+l628nGwAAAAAA8DZYyV/freS1+6uSIrW8tls977QAAAAAAMAcJa/8X4kni3HrqqwJ1//R2ecGAAAAAADmw0o+Y2dJWk7e1G8NPwk1y5sAFs4gRQAAAAAA8IaS1/+vlaQouffadVmnuv4HAAAAAABfA78/dI/9Yn6P3Sh/Wb8gKewtWX/555KCRetVb+u71p4dL7H3spiRdwD0W5eti9mNepNJSVLyyHGvWFfToOwmmFa++pe70+71bwXHEigt5H++mJbAWjF7pE91I425UU6nj/YLSpakvSy3vLZbcfz2g5ps+2Kh7271f/308W+k4GCcu48HO5UPPx48SnJ5Fc96tRfn8cmRdArTcnmhbF9cHTviC2rlXf6h21m2kn6r+fgXZO8VDnc02/h/q5tpzM3ldLq8r2xPJOMvx+OvVZJDNhx9PKrP/jQcfe34yMcdiAlZlJMsbqUxt1ZupZM8vyyL7y1I9crxY1CKn4LDfVE/nMX0fWH9a2RfTMki3hercRZ/jTc0fCYcyWL1dFmMHBEAOC+7wyqU3MR89B77x+vu65zlplf3Hx3t5cVnUfqBwwWpmL02cWIvZcVn9JVk2yopObEWLx+cZfdu5Gf0alZXyppwRq++QXWL+/rz8DuQsrRH6sp/oih6UEv6/eNBv2lV/Txe4fOJ/Ybt+kI8wrsv9n6Z3AA/9tHORztP6/XVtep71eq9uhaTYWQTag8AYIzp37EzNcJ67+Cq+tE/3k1bRyretw7eUlDRh/pYAz3SnfwrBK6P3+ryobch3Bm9ao1jL0jHY2u6M/GqLqmlaezPtks/TIOS34vKVzlaqYfbXX2rxwAAgLN2s5E1JtThWer/neS6W9LK5UPX3QfX7Mdq+fFvCJ5Uc2tntg8AAPhf4wZfWsv931lB4PU+qDUaNbu/4ZrAd35iAq+57hqv23cDZ8PurrumF/h93/HbphdoyWu6oQk3ez0/6JuWH5ieH3pbpuW1XZN99Xvoduxu33PCXtu1Q9c4frdvO33T9ELH9DZ/3PbCDTdIVg57ruO1PMfue37XhP5m4LgVY0LXPRToNd1u32t5cbNreoHXsYNt81O/vdlxTdMNncDr9f10g3lfXrflB51ksxVFp/6iQwAAvomev9x/8nAw2Hk2qZFc0U+JGTZK4zaY98UrzgAAfDWMVumJymeSEAAAAAAAAAAAAAAAAAAAAAAAGDH9I32nbCyO+7CgdDDnVxdn2o6leSd2mkbh9Vf/2wkxFw7m5Lv/cMyrcxip0kZx/lu+cJqPjc6h8YPddI9OjIkXjl20dHAsivP/7xA3nn4xYVEURdHJqy8d3YelkwZ4tFGU9Kz0BofgfM5HAM7OfwMAAP//3JZAiA==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001f9ff00000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.506723781s ago: executing program 3 (id=1540): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x4) r5 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9047c9c659c37243}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x100000000000000) 3.191135956s ago: executing program 3 (id=1542): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x20000000, 0x3, 0xffffffff}, 0x50) fspick(0xffffffffffffffff, &(0x7f0000001680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00'}, 0x18) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x424000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 3.084804035s ago: executing program 3 (id=1543): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000200000000800040001000000", 0x24) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r3 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x1f, &(0x7f0000000100), 0x120) keyctl$search(0xa, 0x0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, r7) 2.989215122s ago: executing program 1 (id=1544): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r1], &(0x7f0000000b80)='GPL\x00', 0x41c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x10}, 0x94) r7 = dup(r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r7, r5, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000600)=[0x7, 0x101, 0x3e, 0x5, 0x3, 0x1, 0x1fd7, 0x1], &(0x7f0000000640)=[0x1a95e45f, 0x400000000000, 0x2, 0x3, 0x3], 0x5, 0x8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000003000072f02cdac42b77618d2f00090000000600000040000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0300000004000000040000000f00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) 2.596017593s ago: executing program 5 (id=1546): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000dc1475e3d3b93c61fd1595b081534b19ffb8a51d920672a3afce5b2ec50c4fb4cbb15c1766c19e41c210d27206828d98e0077683787aa0a929521aea1d6645b36605a5818872fa485732caedfb40fce088c02db2dc03f424f7c45302d11ebd849a6aa2f97f88cf8963f10e91243e1060ff738d0fbd7c7dc6fd14ce1ddba275724d2d9954be76ace92b23204bdf73eb73a8b82c1dfc684e903b00"/183, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r7, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x1f, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000004800"/20, @ANYBLOB="ceca086ac15615d335b76b05d2ca05c18f7cb475545fac19097d1d9d6c521500f6377dd083180b491b23f395a9dc30a5644d84677d6899e71d6a1c4ef9066a057a82bc03009f0473e033a8e85ffc1907b89c8856f2a1e87f240af6326218d0314a558a156cd2a9a39325e805f37c6143c77c763eefab25f8d51e317eab0eac44276834d9068e7533e9f2833db0cca0d1094155470b2ea13752931200a905a877871e90448b17029cecbab18205c02dd861702ee1092557f014a07ac240a14a3f09", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000120020001000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000f9ffffff4da04000040000009500000000000000183700000400000000000000000000000f78d6fe04000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', r7, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x14, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x5, 0x3, 0x42}, 0x10, 0x0, r8, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x6}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee080e650926a96ecc136e7fb980e989db9e8bf9b93129488f65178de213eb94cd46e19d9c65a018444a131f4000000065569607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r10, 0x5421, &(0x7f0000000140)=0x1) writev(r10, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r9, 0xffffffffffffffff, 0x0) 2.466221504s ago: executing program 2 (id=1548): unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) io_setup(0x8, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x40}, @exit], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x5}) fcntl$lock(r3, 0x7, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800000019000103", @ANYRES16=r5], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 2.377159461s ago: executing program 2 (id=1549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.376468431s ago: executing program 2 (id=1550): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, 0x0, 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.221064953s ago: executing program 2 (id=1553): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r5, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) statfs(0x0, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$cgroup_type(r8, &(0x7f0000000080), 0x9) close(r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000002c0)={0xd0, 0x0, 'client1\x00', 0x2, "4e40d20f789d584d", "18c5586f23879e1d67c91258cf6ee900", 0x6, 0xed41}) 2.155954849s ago: executing program 3 (id=1554): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000c16, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0xb6c4}}, {@usrjquota}, {@grpquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) getresuid(&(0x7f0000001100), &(0x7f0000001140)=0x0, &(0x7f0000001180)) stat(&(0x7f00000011c0)='./file1\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0xe2, 0x0, 0x800, 0x1}}, 0x120) write$UHID_DESTROY(r8, 0x0, 0x0) r9 = accept4$unix(r2, &(0x7f0000001440)=@abs, &(0x7f00000014c0)=0x6e, 0x180000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x4e22, 0xbab9, 0x4e21, 0xfff7, 0xa, 0x20, 0x0, 0x2b}, {0x8, 0x4, 0x5d3, 0x2, 0x100000001, 0x4, 0x1, 0x7fff}, {0x8001, 0xf78b, 0xc6d, 0xffc0000000000000}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x6c}, 0xa, @in6=@empty, 0x3501, 0x6, 0x3, 0x6, 0x1, 0x3, 0x6}}, 0xe8) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) fstat(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@directio}]}}) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)="4b5d1be696d2c0dade0f0ac85385d94708b96b7089ecd4d7bc75a90d7b414f45b681fae84a995b7f5762b60deefeb9b835fd908a0d1b6d324370817b1ec8327d14a0cb3ddc748ddb7135619b520780e6ea7b42e51872ca", 0x57}], 0x1, &(0x7f0000000ac0)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="5e11f2faf1c7e9c0ad3a025a94c8bfdff694333a0bf61ffb5c6c7a0c596f034c1f0959fd061948ab7be44cd94c8cace2a0a9e22f766e7da1b2997496481c2cd92436f340606d044de9b238e3dd3038f6213436bdb0b6a46852c6eb6f5a407d15a6e78b2dc33af65b365a18d858521229e53ac2298798daef0d25476f0a7b7f5f7adacf42c7d3c0bf7c9f29807c6ffd6fc4a71d171c1bf15f6903450de326e89d6532224aea5d5d884923ca6a34a40629af88c5ec4aa2de6af90efe56e46a6a93aa8012458c0ce447e28e339a470aa7babe9e3fb44edba98407c90f294ce8f2537f7ef416f4340f65afc6300b782a3a1d76cd433961830db249", 0xf9}, {&(0x7f0000000d40)="ddb5bf2b0f0efcb7ab53edbc49ea4eea6b60974c8ba608edd7a6342447b4ba3d53da6184b7a1f8481a7c3449686926e1cd1f254c01966eb2fb8e171a80ac25e68a7639d845bbe4d8091bff08e8157e7c5d4518e06ff84fc2d2d71f261295df9ce5f21e92b20236a28f617ce6", 0x6c}], 0x2, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001300)="7eef572ded7fae53cc7a07047dae57109b49f25ee3d42ca92c29b43c9688d4b43a51bf8ca972a67c0d938d8f61e441a472b9336ea4386e5d6d60d611ef2fb0d833df153d17d69bf4d0842ac2c4db19f89384e462e20f8bb7ebe550c9071d8bbd465a0ce53460de488bd92a9654817d57913787f49ebcb7f10564b3f12fb03e76f162f3418abb97cd6114f07365a5d21426e63d4298ae5dd852c55bd898b8beda7cc48d3e62709a9b23f31f9261f45b6cb2eb72b9deb7f0ce676f12ab68722a4f09c9ad9de806da894f3a28421443ba6c76177ec9292e35811bf3f2fc6dab940f", 0xe0}], 0x1, &(0x7f0000001580)=[@rights={{0x30, 0x1, 0x1, [r0, r3, r6, r3, r2, r3, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r8, r9, r2, r1, r10, r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, r13]}}], 0xf0, 0x81}}], 0x3, 0x20004) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r16 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r16], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) rt_tgsigqueueinfo(0xffffffffffffffff, r16, 0x3, &(0x7f00000000c0)={0x2, 0x1, 0x7f}) 1.936187276s ago: executing program 3 (id=1555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="380100001000010000000000fefffffffc000000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000400000000000000000000000000000d398a35a20da6d22000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000060000000000000000000800000000000a0000004000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000b6d63f5f6757c5486979bfaeb863"], 0x138}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) read(r2, &(0x7f00000000c0)=""/203, 0xcb) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES64=r0, @ANYRESDEC=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300), 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") r6 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f00000012c0)={[{@sb={'sb', 0x3d, 0xb}}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1000001}}]}, 0x0, 0x5eb, &(0x7f0000001340)="$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") setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000140)="54c11dc7047af229616f84c1734b80d2522dbcd492f1ad1732f64c9f775c1334ab9386f2ceed3af4e64a24a9571acf4ee39ad3def422845ed60098088bb78e99a25215601b0b724a5d2b8e552cd357b017", 0x51, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f00000000000000dd0a00000020008573013de64995ecd39500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r9 = socket(0x840000000002, 0x3, 0xff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000d5440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000d5640)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000d6640)={0xaa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r12}], 0x3, "0a6ddba31adbb2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000800)={{r10, 0x5, 0x7fffffff, 0x2, 0x40, 0x401, 0x8, 0x1000, 0x1, 0x7fffffff, 0x800000, 0x3, 0x4, 0x0, 0x1000000000000000}, 0x18, [0x0, 0x0, 0x0]}) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r13, 0x0, 0x2) 1.935196176s ago: executing program 1 (id=1556): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) faccessat2(r1, &(0x7f0000000100)='./file0\x00', 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x800) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 1.768660439s ago: executing program 3 (id=1557): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000100)=0x5, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x5}}, 0x24, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000002bc0)={[{@noblock_validity}, {@noblock_validity}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 1.692936685s ago: executing program 0 (id=1558): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{}, &(0x7f0000000d00), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x2, 0x8}, 0xc) openat$hwrng(0xffffffffffffff9c, 0x0, 0xe00, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000740), 0x0, 0x0, 0x0, &(0x7f0000000800), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x8}, 0x8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0xffffffff, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[0x0]) 1.660090288s ago: executing program 5 (id=1559): syz_emit_ethernet(0x6d, &(0x7f0000000b00)=ANY=[@ANYBLOB="0180c20000020180c200000281001800080501fa0f670e52c03f4992f38910249da270c250538644cc79ed7609e8e018609fbbacba8485693761236dd0cf5dfb687639c31d5910edc8fd28e264741752fde5af5153fc6ec22090b8472dfd1f3b1ed99af32aa0d303ec6f23cd5d061daee7a2ff5b831b3d5e7b864c0653adeb52d291461edb3a8cc06c76573d5da11f1354924bea7b94e59437fa4e3acf8f96cb5e15dfc35ec27ffae5f2b37757aaa89a890488c98a2ba3e8020257c86a17354910a60d92c0897cbd746d672bb16d267525cedb1566738bd5286f8a466c84fefee9f2c94ba22222c63a67eaa0a50118b24fb5b933462af315f83858c48190b8250cf2c789ad7586b2ef289300ba7c3a630894dabacfeb4cbbc6b87bad68942bbd0d7856c077b3a7f9c596521878e84237ac98b9874a8ae678114c917f0a3ede0d509760e3f2724adedfcaf9f58f9a8be9f16ad5ca05fa0992497f2752540229ef4dd864125c2e4d5031db9a3c236bd6286c6efc50412b0f98968da961d6c77394926929ffb15a4d8f12020000009cd08ff3a6b6f1ef09a3e2e024966e0a66d4247df55f853f2b5ba060d9820d8c4d"], &(0x7f0000000100)={0x0, 0x4, [0x5e4, 0xcb8, 0x71f, 0x5f9]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="b9fa37750237f3b7b545199b3bc9c5829af223dee4bd12f382075f52fd367e2bd3a58e4a0f1f665daffb8c86021ae62e71b388a14892d91d65eb28be8b39e8774c011f8d6ed26de7563c87be57766ff4de65072c1b239ed5e4b7864a087141ddddef93e769d5fbca05a2e806ac4b8e645eb1317f94e992cf630869aa509543c05808767ee279427a56edafa4d90765fbfb17ef5723d8bf021cc2a15ec2f0d155910bdc86eddbc92fe14fc8f77a275ca1312f8f19b77efd14c6b55bc69a8278c4c4074dde9587f87612b5c2882cabe07201761515d50b7c1c4cbddff9ff405eafab457b7b3088d903"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) membarrier(0x10, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000000019000100000000000000000000000000000000000000ffff00000000fc010000000000000000000000000000000000000003000002000000f7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000ff0700000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000008000c0005000000"], 0xc0}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001d001600"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x7) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) 1.520466469s ago: executing program 2 (id=1560): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0x4, 0x44, 0x12) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) link(&(0x7f00000001c0)='./file1\x00', 0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bind$netlink(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd1074"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x14}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) 1.152099639s ago: executing program 0 (id=1561): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xb, 0x3ff, 0x0, @private2, @rand_addr=' \x01\x00', 0x20, 0x700, 0xf6}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000200000000100004800800014000000004240002000c00028005003d710000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="dddd7aac5562f9a1ba8853a067586cdba4d4d548850ef29300b100f22c8d300cceddf29be4999e9193555f3b042d9b6dd87bf09f56a00d6f5257aefec5f441ffa68944c04ba922438bc6b7bef7869e0f7b8259ad264eb45488e57320d4a105decba3efbdd5c3b16bf3828a8923eb49aa9176449350f5db74f819f712ffd203066413a03f034eb53ac828734b41c75ede50f502264c1760683e4d336ebcbcd466b4023fb372fd06b62c113c16c7ae04517ec36fe3df18b1036654326d702c553067f8ccbf654896ec87355eefb8b2fe027a503acf41e2e53f3b25", @ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r1], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r3) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r6 = syz_clone(0x889a6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000180)='fdinfo\x00') sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000300)={{0x0, 0x8, 0x80, 0x8}, 0x0, 0x0, 0x2, 0x8}, 0x80, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x0, 0x208, 0x21, 0x0, r1}, 0x50) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) dup(r5) r9 = socket$inet(0x2, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 735.104332ms ago: executing program 1 (id=1562): flock(0xffffffffffffffff, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x4827e, 0x9) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) 664.232087ms ago: executing program 5 (id=1563): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8) waitid(0x0, r0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe15}], 0x1, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r5, r4, 0x0, 0x3ffff) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback={0x80fe}}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1c4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x11070b32}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) 581.533204ms ago: executing program 1 (id=1564): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, 0x0, 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 504.27504ms ago: executing program 1 (id=1565): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000200008008000000eb"], 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x2, 0x0, 0x1, 0x0}) socket$kcm(0x29, 0x2, 0x0) unshare(0x2c060000) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000280)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6d) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000"], 0x50) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) 503.0471ms ago: executing program 0 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4044001) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000001000000000000017c000000000000000000"], 0x30}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="ed7f6a097374dbe9f439d5f84b5ba6c25defc667debc0607bbcb45b9f4c117c9b37b8dd0824e29505fadaa5387a89b6d8e1d8efc24610d6c4676544c", @ANYRESOCT, @ANYRESDEC=r8], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff90, 0x10}, 0x1866, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r11, &(0x7f0000000340), 0x0, 0x100013c, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9d0cde9eccb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f6641c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8cac9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce119b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47f8c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738fceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69", @ANYRESOCT=r5, @ANYRES32=r6], &(0x7f0000000100)='GPL\x00'}, 0x3d) writev(r11, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000fa461ad7e48489bffa56020013001118680907071200000f0000", 0x1d}], 0x1) 475.623122ms ago: executing program 0 (id=1567): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) getdents(r3, &(0x7f0000000180)=""/136, 0xc9) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x840000000002, 0x3, 0xff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db15a23319e3f64fdf5f88b2078", 0x20}], 0x1}}], 0x1, 0x840) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x74}}, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r8 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 332.154964ms ago: executing program 0 (id=1568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x3, 0x3f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r14, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 242.161411ms ago: executing program 2 (id=1569): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000000480)) pipe(&(0x7f00000004c0)) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0xa2eb, 0x8}, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x9e, 0x1, 'queue1\x00', 0x10000}) tkill(r0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="da295ec9b1b015f739f590dc63cbbc2ae94f1770430f9fd8db05661e906c461da919bf09409f7bd4bbce8830a00fe928c9651ab119928c79e4672a1c5458e82c436c7e191f2ceafd819723b468e8ab96f342066d3e8d350b89b669356399a9a349ec471db0d500bd2420b1e4c76a87c056b075b7a1b70a2a6cff75fcf31f08", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") socket$unix(0x1, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x5, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x330}}, 0x0) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) 0s ago: executing program 0 (id=1570): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001080)={[{@stripe={'stripe', 0x3d, 0x3}}, {@nouid32}, {@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc7}}, {@i_version}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xffffffffffffffff}}, {@oldalloc}, {@data_ordered}], [{@uid_gt}, {@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x36, 0x66, 0x33, 0x37, 0x66, 0x34], 0x2d, [0x66, 0x61, 0x66, 0x66], 0x2d, [0x34, 0x32, 0x30, 0x62], 0x2d, [0x33, 0x65, 0x31, 0x63], 0x2d, [0x33, 0x62, 0x35, 0x34, 0x32, 0x34, 0x34, 0x65]}}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket(0x8, 0x3, 0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x3, 0x236, &(0x7f0000000380)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x817a}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x7c00, 0x3000, 0x3) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e0800460000200000000000119078000000000000000000"], 0x0) kernel console output (not intermixed with test programs): 000 [ 108.365274][ T5845] loop0: detected capacity change from 0 to 8192 [ 108.799988][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 108.800002][ T29] audit: type=1326 audit(1755985231.537:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 108.831896][ T5855] infiniband syz1: set active [ 108.836654][ T5855] infiniband syz1: added syz_tun [ 108.852014][ T5858] loop0: detected capacity change from 0 to 128 [ 108.876791][ T5858] vfat: Unknown parameter '@' [ 108.956230][ T29] audit: type=1326 audit(1755985231.567:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 108.979606][ T29] audit: type=1326 audit(1755985231.567:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.003014][ T29] audit: type=1326 audit(1755985231.587:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.026515][ T29] audit: type=1326 audit(1755985231.587:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.049905][ T29] audit: type=1326 audit(1755985231.587:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.073575][ T29] audit: type=1326 audit(1755985231.587:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.096882][ T29] audit: type=1326 audit(1755985231.587:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.120177][ T29] audit: type=1326 audit(1755985231.587:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.143507][ T29] audit: type=1326 audit(1755985231.587:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 109.238627][ T5855] RDS/IB: syz1: added [ 109.258579][ T5855] smc: adding ib device syz1 with port count 1 [ 109.292341][ T5855] smc: ib device syz1 port 1 has pnetid [ 109.329747][ T5863] netlink: 14 bytes leftover after parsing attributes in process `syz.2.776'. [ 109.372450][ T5863] hsr_slave_0: left promiscuous mode [ 109.388538][ T5863] hsr_slave_1: left promiscuous mode [ 109.757808][ T5866] siw: device registration error -23 [ 109.879307][ T5879] @: renamed from vlan0 (while UP) [ 110.268399][ T5888] lo speed is unknown, defaulting to 1000 [ 110.760550][ T5902] random: crng reseeded on system resumption [ 110.767403][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 111.188075][ T5924] random: crng reseeded on system resumption [ 111.529914][ T5928] lo speed is unknown, defaulting to 1000 [ 111.946069][ T5933] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 111.953513][ T5933] netlink: 224 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 112.050549][ T5942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5942 comm=+}[@ [ 112.132084][ T5952] netlink: 'syz.0.801': attribute type 21 has an invalid length. [ 112.132140][ T5952] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 112.132151][ T5952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.801'. [ 112.222211][ T5954] random: crng reseeded on system resumption [ 112.458223][ T5963] netlink: 'syz.5.804': attribute type 4 has an invalid length. [ 112.465922][ T5963] netlink: 17 bytes leftover after parsing attributes in process `syz.5.804'. [ 112.484154][ T5963] netlink: 2 bytes leftover after parsing attributes in process `syz.5.804'. [ 112.807566][ T5960] loop0: detected capacity change from 0 to 8192 [ 112.916106][ T5966] usb usb1: check_ctrlrecip: process 5966 (+}[@) requesting ep 01 but needs 81 [ 112.960805][ T5954] syz.0.802: attempt to access beyond end of device [ 112.960805][ T5954] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.974693][ T5954] Buffer I/O error on dev loop0, logical block 57847, async page read [ 112.997454][ T5966] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 113.269736][ T5954] syz.0.802: attempt to access beyond end of device [ 113.269736][ T5954] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 113.283388][ T5954] Buffer I/O error on dev loop0, logical block 57847, async page read [ 113.858043][ T5977] lo speed is unknown, defaulting to 1000 [ 113.952097][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 113.952111][ T29] audit: type=1326 audit(1755985236.687:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bf7075ba7 code=0x7ffc0000 [ 114.137558][ T29] audit: type=1326 audit(1755985236.727:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bf701ade9 code=0x7ffc0000 [ 114.160866][ T29] audit: type=1326 audit(1755985236.727:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bf7075ba7 code=0x7ffc0000 [ 114.184135][ T29] audit: type=1326 audit(1755985236.727:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bf701ade9 code=0x7ffc0000 [ 114.207496][ T29] audit: type=1326 audit(1755985236.727:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 114.230838][ T29] audit: type=1326 audit(1755985236.727:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bf7075ba7 code=0x7ffc0000 [ 114.230865][ T29] audit: type=1326 audit(1755985236.727:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bf701ade9 code=0x7ffc0000 [ 114.230957][ T29] audit: type=1326 audit(1755985236.727:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 114.230975][ T29] audit: type=1326 audit(1755985236.747:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bf7075ba7 code=0x7ffc0000 [ 114.230995][ T29] audit: type=1326 audit(1755985236.747:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bf701ade9 code=0x7ffc0000 [ 114.250612][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 114.285459][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.320926][ T5986] binfmt_misc: register: failed to install interpreter file ./file2 [ 114.356765][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.445650][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.564847][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.709850][ T309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.713247][ T309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.716159][ T309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.726081][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.101456][ T6003] program syz.5.816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.146793][ T6008] tipc: Enabling of bearer rejected, failed to enable media [ 115.221399][ T6012] lo speed is unknown, defaulting to 1000 [ 115.393503][ T6012] lo speed is unknown, defaulting to 1000 [ 115.738969][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 115.987905][ T6038] netlink: 'syz.5.822': attribute type 21 has an invalid length. [ 115.995768][ T6038] netlink: 'syz.5.822': attribute type 4 has an invalid length. [ 116.061176][ T6035] lo speed is unknown, defaulting to 1000 [ 116.096096][ T6041] netlink: 'syz.1.823': attribute type 4 has an invalid length. [ 116.215940][ T6047] random: crng reseeded on system resumption [ 116.260920][ T6047] Restarting kernel threads ... [ 116.308177][ T6047] Done restarting kernel threads. [ 116.494656][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 116.512002][ T6055] ALSA: seq fatal error: cannot create timer (-19) [ 116.614747][ T6044] Set syz1 is full, maxelem 65536 reached [ 116.738623][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 117.711634][ T6068] lo speed is unknown, defaulting to 1000 [ 117.867813][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 117.993215][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 118.137523][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 118.243647][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 118.285161][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 118.341523][ T23] hid_parser_main: 21 callbacks suppressed [ 118.341541][ T23] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 118.355004][ T23] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 118.362436][ T23] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 118.455481][ T23] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 118.624392][ T6104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6104 comm=+}[@ [ 118.711772][ T6110] lo speed is unknown, defaulting to 1000 [ 118.793046][ T6110] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 118.800748][ T6110] netlink: 17 bytes leftover after parsing attributes in process `syz.2.843'. [ 118.942173][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 118.964862][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 118.964877][ T29] audit: type=1400 audit(1755985241.697:4754): avc: denied { execmem } for pid=6135 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.100949][ T29] audit: type=1400 audit(1755985241.837:4755): avc: denied { module_request } for pid=6140 comm="syz.1.855" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.162905][ T6141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6141 comm=+}[@ [ 119.175416][ T29] audit: type=1400 audit(1755985241.867:4756): avc: denied { sys_module } for pid=6140 comm="syz.1.855" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 119.196477][ T29] audit: type=1400 audit(1755985241.887:4757): avc: denied { allowed } for pid=6140 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.324770][ T29] audit: type=1400 audit(1755985241.987:4758): avc: denied { read } for pid=6140 comm="syz.1.855" name="event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.347888][ T29] audit: type=1400 audit(1755985241.987:4759): avc: denied { open } for pid=6140 comm="syz.1.855" path="/dev/input/event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.372006][ T29] audit: type=1400 audit(1755985241.987:4760): avc: denied { ioctl } for pid=6140 comm="+}[@" path="/dev/input/event2" dev="devtmpfs" ino=252 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.439114][ T29] audit: type=1400 audit(1755985242.147:4761): avc: denied { write } for pid=6148 comm="syz.1.856" name="if_inet6" dev="proc" ino=4026532455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.462062][ T29] audit: type=1400 audit(1755985242.157:4762): avc: denied { create } for pid=6148 comm="syz.1.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.481646][ T29] audit: type=1400 audit(1755985242.157:4763): avc: denied { setopt } for pid=6148 comm="syz.1.856" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.067018][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 120.376679][ T6166] netlink: 27 bytes leftover after parsing attributes in process `syz.0.870'. [ 120.390075][ T6168] can0: slcan on ttyS3. [ 120.400164][ T6166] 9pnet_fd: Insufficient options for proto=fd [ 120.438890][ T6168] can0 (unregistered): slcan off ttyS3. [ 120.601528][ T6177] siw: device registration error -23 [ 121.284454][ T6186] lo speed is unknown, defaulting to 1000 [ 122.668238][ T6226] __nla_validate_parse: 1 callbacks suppressed [ 122.668326][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 122.685064][ T6231] random: crng reseeded on system resumption [ 122.706149][ T6231] Restarting kernel threads ... [ 122.723210][ T6231] Done restarting kernel threads. [ 122.951299][ T6243] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 123.324784][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 123.336419][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 123.456978][ T6253] netlink: 56 bytes leftover after parsing attributes in process `syz.3.897'. [ 123.580069][ T6259] can0: slcan on ttyS3. [ 123.628539][ T6259] can0 (unregistered): slcan off ttyS3. [ 123.865383][ T6268] tipc: Enabling of bearer rejected, failed to enable media [ 123.991266][ T6270] lo speed is unknown, defaulting to 1000 [ 124.559707][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.568577][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.868541][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 124.868554][ T29] audit: type=1400 audit(1755985247.297:5068): avc: denied { write } for pid=6264 comm="syz.2.891" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.897781][ T29] audit: type=1400 audit(1755985247.297:5069): avc: denied { ioctl } for pid=6264 comm="syz.2.891" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.243119][ T29] audit: type=1400 audit(1755985247.747:5070): avc: denied { setopt } for pid=6272 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.262728][ T29] audit: type=1400 audit(1755985247.957:5071): avc: denied { write } for pid=6272 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.417313][ T29] audit: type=1400 audit(1755985248.147:5072): avc: denied { tracepoint } for pid=6286 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 125.485743][ T6287] lo speed is unknown, defaulting to 1000 [ 125.553104][ T29] audit: type=1400 audit(1755985248.287:5073): avc: denied { write } for pid=6286 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.597322][ T29] audit: type=1400 audit(1755985248.327:5074): avc: denied { read } for pid=6281 comm="syz.3.894" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.620852][ T29] audit: type=1400 audit(1755985248.327:5075): avc: denied { open } for pid=6281 comm="syz.3.894" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.644771][ T6288] program syz.3.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.918885][ T6297] 9pnet_fd: Insufficient options for proto=fd [ 126.091180][ T29] audit: type=1400 audit(1755985248.827:5076): avc: denied { bind } for pid=6299 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.110578][ T29] audit: type=1400 audit(1755985248.827:5077): avc: denied { write } for pid=6299 comm="syz.3.898" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.144756][ T6302] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 126.161216][ T6304] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.274070][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 126.291414][ T6307] ALSA: seq fatal error: cannot create timer (-19) [ 126.310025][ T6304] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.450134][ T6304] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.501910][ T6304] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.565649][ T2066] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.593545][ T2066] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.604217][ T2066] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.620427][ T2066] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.874923][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 127.226564][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 127.278830][ T3355] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 127.286242][ T3355] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 127.293750][ T3355] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 127.374012][ T3355] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 127.674920][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.702470][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.894761][ T6329] tipc: Enabling of bearer rejected, already enabled [ 128.453295][ T6335] lo speed is unknown, defaulting to 1000 [ 128.842499][ T6326] Set syz1 is full, maxelem 65536 reached [ 129.015353][ T6345] lo speed is unknown, defaulting to 1000 [ 129.108719][ T6350] lo: entered promiscuous mode [ 129.129007][ T6350] tunl0: entered promiscuous mode [ 129.140537][ T6350] gre0: entered promiscuous mode [ 129.179159][ T6350] gretap0: entered promiscuous mode [ 129.229641][ T6350] erspan0: entered promiscuous mode [ 129.301594][ T6350] ip_vti0: entered promiscuous mode [ 129.447569][ T6350] ip6_vti0: entered promiscuous mode [ 129.488363][ T6350] sit0: entered promiscuous mode [ 129.834260][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.842720][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.864558][ T3355] kernel write not supported for file /529/attr/exec (pid: 3355 comm: kworker/1:2) [ 129.879998][ T6350] ip6tnl0: entered promiscuous mode [ 129.887255][ T6350] ip6gre0: entered promiscuous mode [ 129.912299][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 129.912312][ T29] audit: type=1326 audit(1755985252.217:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 129.941386][ T29] audit: type=1326 audit(1755985252.227:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.055371][ T6350] syz_tun: entered promiscuous mode [ 130.117373][ T6350] ip6gretap0: entered promiscuous mode [ 130.159712][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.164622][ T29] audit: type=1326 audit(1755985252.757:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.166945][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.189579][ T29] audit: type=1326 audit(1755985252.757:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.189602][ T29] audit: type=1326 audit(1755985252.757:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.242151][ T29] audit: type=1326 audit(1755985252.807:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.265033][ T29] audit: type=1326 audit(1755985252.807:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.287886][ T29] audit: type=1326 audit(1755985252.807:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.307547][ T6350] bridge0: entered promiscuous mode [ 130.310747][ T29] audit: type=1326 audit(1755985252.807:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 130.317645][ T6350] vcan0: entered promiscuous mode [ 130.338605][ T29] audit: type=1400 audit(1755985252.807:5400): avc: denied { setopt } for pid=6357 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.364366][ T6350] bond0: entered promiscuous mode [ 130.369472][ T6350] bond_slave_0: entered promiscuous mode [ 130.375236][ T6350] bond_slave_1: entered promiscuous mode [ 130.382776][ T6350] team0: entered promiscuous mode [ 130.387826][ T6350] team_slave_0: entered promiscuous mode [ 130.393538][ T6350] team_slave_1: entered promiscuous mode [ 130.401494][ T6350] nlmon0: entered promiscuous mode [ 130.417983][ T6368] block device autoloading is deprecated and will be removed. [ 130.449569][ T6350] caif0: entered promiscuous mode [ 130.481126][ T6350] vxcan0: entered promiscuous mode [ 130.504209][ T6350] vxcan1: entered promiscuous mode [ 130.522661][ T6350] wg0: entered promiscuous mode [ 130.529550][ T6380] siw: device registration error -23 [ 130.541491][ T6350] wg1: entered promiscuous mode [ 130.563720][ T6350] wg2: left allmulticast mode [ 130.569570][ T6350] veth0_to_bridge: entered promiscuous mode [ 130.602962][ T6350] veth1_to_bridge: entered promiscuous mode [ 130.621202][ T6350] veth0_to_bond: entered promiscuous mode [ 130.648842][ T6350] veth1_to_bond: entered promiscuous mode [ 130.685764][ T6350] veth1_to_team: entered promiscuous mode [ 130.693797][ T6350] veth0_to_batadv: entered promiscuous mode [ 130.711551][ T6350] batadv_slave_0: entered promiscuous mode [ 130.757466][ T6350] xfrm0: entered promiscuous mode [ 130.773475][ T6350] veth0_to_hsr: entered promiscuous mode [ 130.793599][ T6350] veth1_to_hsr: entered promiscuous mode [ 130.815298][ T6350] hsr0: entered promiscuous mode [ 130.836962][ T6350] veth1_virt_wifi: entered promiscuous mode [ 130.848596][ T6350] veth0_virt_wifi: entered promiscuous mode [ 130.900485][ T6350] @: entered promiscuous mode [ 130.905275][ T6350] vlan1: entered promiscuous mode [ 130.927480][ T6350] macvlan0: entered promiscuous mode [ 130.947916][ T6350] macvlan1: entered promiscuous mode [ 130.962174][ T6350] ipvlan0: entered promiscuous mode [ 130.967521][ T6350] ipvlan1: entered promiscuous mode [ 130.991666][ T6350] macvtap0: entered promiscuous mode [ 130.997958][ T6350] macsec0: entered promiscuous mode [ 131.005922][ T6350] geneve0: entered promiscuous mode [ 131.021730][ T6350] geneve1: entered promiscuous mode [ 131.031656][ T6350] : entered promiscuous mode [ 131.036595][ T6350] macsec1: entered promiscuous mode [ 131.048251][ T6350] netdevsim netdevsim3 eth0: entered promiscuous mode [ 131.055416][ T6350] netdevsim netdevsim3 eth1: entered promiscuous mode [ 131.062691][ T6350] netdevsim netdevsim3 eth2: entered promiscuous mode [ 131.069876][ T6350] netdevsim netdevsim3 eth3: entered promiscuous mode [ 131.076726][ T36] lo speed is unknown, defaulting to 1000 [ 131.082578][ T36] syz0: Port: 1 Link DOWN [ 131.089950][ T23] syz1: Port: 1 Link DOWN [ 131.098123][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.101127][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6396 comm=syz.3.919 [ 131.125927][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.171125][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.179919][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.494109][ T6405] netlink: '+}[@': attribute type 13 has an invalid length. [ 131.501475][ T6405] netlink: '+}[@': attribute type 27 has an invalid length. [ 131.824761][ T6409] Set syz1 is full, maxelem 65536 reached [ 132.003447][ T6417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.032482][ T6417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.072910][ T6417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.122968][ T6417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.174330][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.185344][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.197073][ T56] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.207806][ T56] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.239771][ T6431] netlink: 'syz.3.931': attribute type 4 has an invalid length. [ 132.306914][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 132.357708][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 132.698578][ T6461] lo speed is unknown, defaulting to 1000 [ 133.035010][ T6467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.081505][ T6467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.180986][ T6467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.270458][ T6467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.330412][ T1919] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.347975][ T1919] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.358669][ T1919] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.366844][ T1919] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.399560][ T6472] netlink: 27 bytes leftover after parsing attributes in process `syz.3.946'. [ 133.410634][ T6472] 9pnet_fd: Insufficient options for proto=fd [ 133.464551][ T6475] lo speed is unknown, defaulting to 1000 [ 133.486943][ T6479] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 133.510136][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 133.517799][ T6479] SELinux: failed to load policy [ 133.525134][ T6477] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 133.531641][ T6477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.539161][ T6477] vhci_hcd vhci_hcd.0: Device attached [ 133.579241][ T6479] veth0_to_team: entered promiscuous mode [ 133.585538][ T6477] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 133.592044][ T6477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.599611][ T6477] vhci_hcd vhci_hcd.0: Device attached [ 133.623419][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.637073][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 133.648604][ T6477] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 133.649755][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 133.655209][ T6477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.671568][ T6477] vhci_hcd vhci_hcd.0: Device attached [ 133.683216][ T6493] vhci_hcd: connection closed [ 133.683426][ T6488] vhci_hcd: connection closed [ 133.750685][ T6475] netlink: 56 bytes leftover after parsing attributes in process `syz.0.956'. [ 133.761725][ T6485] vhci_hcd: connection closed [ 133.775290][ T6384] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 133.787504][ T6384] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 133.794949][ T6384] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 133.803267][ T2066] vhci_hcd: stop threads [ 133.804787][ T6384] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 133.807530][ T2066] vhci_hcd: release socket [ 133.821067][ T2066] vhci_hcd: disconnect device [ 133.825893][ T6390] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 133.833517][ T6486] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 133.833765][ T2066] vhci_hcd: stop threads [ 133.843647][ T2066] vhci_hcd: release socket [ 133.848071][ T2066] vhci_hcd: disconnect device [ 133.852831][ T2066] vhci_hcd: stop threads [ 133.857189][ T2066] vhci_hcd: release socket [ 133.861819][ T2066] vhci_hcd: disconnect device [ 133.936129][ T6502] lo speed is unknown, defaulting to 1000 [ 134.201802][ T6504] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 134.347821][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 134.425232][ T6506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.463013][ T6506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.473038][ T6506] bond0 (unregistering): Released all slaves [ 134.919602][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 134.919615][ T29] audit: type=1326 audit(1755985257.657:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8816d5ba7 code=0x7ffc0000 [ 135.717240][ T6518] lo speed is unknown, defaulting to 1000 [ 135.868375][ T6384] Process accounting resumed [ 135.887341][ T6524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 135.893876][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.901497][ T6524] vhci_hcd vhci_hcd.0: Device attached [ 135.926295][ T6527] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 135.932883][ T6527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.940426][ T6527] vhci_hcd vhci_hcd.0: Device attached [ 135.946482][ T29] audit: type=1326 audit(1755985257.687:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff88167ade9 code=0x7ffc0000 [ 135.969955][ T29] audit: type=1326 audit(1755985257.687:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8816d5ba7 code=0x7ffc0000 [ 135.993355][ T29] audit: type=1326 audit(1755985257.687:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff88167ade9 code=0x7ffc0000 [ 136.016667][ T29] audit: type=1326 audit(1755985257.687:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 136.039848][ T29] audit: type=1400 audit(1755985257.747:5706): avc: denied { mounton } for pid=6513 comm="syz.3.959" path="/195" dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.061847][ T29] audit: type=1326 audit(1755985258.557:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8816d5ba7 code=0x7ffc0000 [ 136.085080][ T29] audit: type=1326 audit(1755985258.557:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff88167ade9 code=0x7ffc0000 [ 136.108439][ T29] audit: type=1326 audit(1755985258.557:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 136.131655][ T29] audit: type=1400 audit(1755985258.567:5710): avc: denied { create } for pid=6509 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.156907][ T6528] vhci_hcd: connection closed [ 136.157137][ T6525] vhci_hcd: connection closed [ 136.157153][ T56] vhci_hcd: stop threads [ 136.170885][ T56] vhci_hcd: release socket [ 136.175340][ T56] vhci_hcd: disconnect device [ 136.213075][ T56] vhci_hcd: stop threads [ 136.217356][ T56] vhci_hcd: release socket [ 136.221842][ T56] vhci_hcd: disconnect device [ 136.227139][ T6535] @: renamed from vlan0 (while UP) [ 136.394688][ T6384] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 136.422478][ T6384] usb 7-1: enqueue for inactive port 0 [ 136.427966][ T6384] usb 7-1: enqueue for inactive port 0 [ 136.434130][ T6384] usb 7-1: enqueue for inactive port 0 [ 136.770162][ T6384] vhci_hcd: vhci_device speed not set [ 136.788155][ T6547] lo speed is unknown, defaulting to 1000 [ 137.440687][ T1045] IPVS: starting estimator thread 0... [ 137.481327][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.527146][ T6558] sd 0:0:1:0: device reset [ 137.538576][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.653002][ T6560] can0: slcan on ttyS3. [ 137.709465][ T6560] can0 (unregistered): slcan off ttyS3. [ 137.722345][ T6561] can0: slcan on ttyS3. [ 138.028468][ T6545] IPVS: using max 2592 ests per chain, 129600 per kthread [ 138.059091][ T6555] can0 (unregistered): slcan off ttyS3. [ 138.707795][ T6574] lo speed is unknown, defaulting to 1000 [ 138.948037][ T6390] usb 5-1: enqueue for inactive port 0 [ 138.959946][ T6390] usb 5-1: enqueue for inactive port 0 [ 139.058961][ T6390] vhci_hcd: vhci_device speed not set [ 139.349266][ T1045] Process accounting resumed [ 139.439002][ T6596] netlink: 'syz.3.979': attribute type 2 has an invalid length. [ 139.485016][ T6600] netlink: 'syz.2.981': attribute type 27 has an invalid length. [ 139.519764][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.527131][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.815016][ T6600] tipc: Resetting bearer [ 139.839205][ T6600] syzkaller0: left promiscuous mode [ 139.844487][ T6600] syzkaller0: left allmulticast mode [ 139.996610][ T41] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.073297][ T41] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.160880][ T41] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.242019][ T41] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.275591][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 140.275614][ T29] audit: type=1400 audit(1755985262.997:6083): avc: denied { create } for pid=6615 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.695024][ T29] audit: type=1400 audit(1755985263.057:6084): avc: denied { write } for pid=6615 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.714352][ T29] audit: type=1400 audit(1755985263.417:6085): avc: denied { create } for pid=6615 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 140.734018][ T29] audit: type=1400 audit(1755985263.417:6086): avc: denied { write } for pid=6615 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.351235][ T6636] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.488896][ T29] audit: type=1326 audit(1755985263.937:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 141.512263][ T29] audit: type=1326 audit(1755985263.937:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 141.535565][ T29] audit: type=1326 audit(1755985263.937:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 141.559044][ T29] audit: type=1326 audit(1755985263.937:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 141.582371][ T29] audit: type=1326 audit(1755985263.937:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 141.605761][ T29] audit: type=1326 audit(1755985263.937:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 141.655112][ T6641] lo speed is unknown, defaulting to 1000 [ 142.607551][ T6647] syzkaller0: entered promiscuous mode [ 142.613151][ T6647] syzkaller0: entered allmulticast mode [ 142.650913][ T6632] uprobe: }\)\:6632 failed to unregister, leaking uprobe [ 142.932668][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 143.070768][ T6666] veth0_vlan: left promiscuous mode [ 143.076011][ T6666] veth0_vlan: entered allmulticast mode [ 143.092294][ T6666] veth0_vlan: entered promiscuous mode [ 143.158734][ T6669] netlink: 360 bytes leftover after parsing attributes in process `syz.2.997'. [ 143.360595][ T6680] siw: device registration error -23 [ 143.377786][ T6679] lo speed is unknown, defaulting to 1000 [ 143.518553][ T6683] lo speed is unknown, defaulting to 1000 [ 144.149956][ T6689] lo speed is unknown, defaulting to 1000 [ 144.215091][ T6690] netlink: 'syz.2.1004': attribute type 21 has an invalid length. [ 144.222993][ T6690] netlink: 'syz.2.1004': attribute type 4 has an invalid length. [ 144.279133][ T6690] random: crng reseeded on system resumption [ 144.308684][ T6690] Restarting kernel threads ... [ 144.326723][ T6690] Done restarting kernel threads. [ 144.338264][ T6699] veth0_vlan: left promiscuous mode [ 144.345037][ T6699] veth0_vlan: entered allmulticast mode [ 144.360905][ T6699] veth0_vlan: entered promiscuous mode [ 144.417802][ T6705] 9pnet_fd: Insufficient options for proto=fd [ 144.428133][ T6707] lo speed is unknown, defaulting to 1000 [ 144.456945][ T6711] can0: slcan on ttyS3. [ 144.519750][ T6701] lo speed is unknown, defaulting to 1000 [ 144.529148][ T6711] can0 (unregistered): slcan off ttyS3. [ 145.359990][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 145.360005][ T29] audit: type=1400 audit(1755985268.097:6212): avc: denied { bind } for pid=6726 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.386566][ T29] audit: type=1400 audit(1755985268.127:6213): avc: denied { write } for pid=6726 comm="syz.5.1015" path="socket:[18854]" dev="sockfs" ino=18854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.482988][ T6731] lo speed is unknown, defaulting to 1000 [ 145.937966][ T6727] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 146.255389][ T6739] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1017'. [ 146.269253][ T6727] delete_channel: no stack [ 146.278786][ T6737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1017'. [ 146.368129][ T29] audit: type=1400 audit(1755985268.127:6214): avc: denied { write } for pid=6726 comm="syz.5.1015" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.391783][ T29] audit: type=1400 audit(1755985268.127:6215): avc: denied { write } for pid=6726 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.411204][ T29] audit: type=1400 audit(1755985268.197:6216): avc: denied { connect } for pid=6728 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.419187][ T6745] syzkaller0: entered promiscuous mode [ 146.430890][ T29] audit: type=1400 audit(1755985268.197:6217): avc: denied { getopt } for pid=6728 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.430913][ T29] audit: type=1400 audit(1755985268.667:6218): avc: denied { create } for pid=6726 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.430932][ T29] audit: type=1400 audit(1755985268.667:6219): avc: denied { getopt } for pid=6726 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.436369][ T6745] syzkaller0: entered allmulticast mode [ 146.455923][ T29] audit: type=1400 audit(1755985268.667:6220): avc: denied { relabelfrom } for pid=6726 comm="syz.5.1015" name="NETLINK" dev="sockfs" ino=18338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 146.524385][ T29] audit: type=1400 audit(1755985268.667:6221): avc: denied { mac_admin } for pid=6726 comm="syz.5.1015" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.685104][ T6752] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1022'. [ 146.780982][ T6753] lo speed is unknown, defaulting to 1000 [ 147.485846][ T6758] lo speed is unknown, defaulting to 1000 [ 148.097167][ T6758] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1023'. [ 148.692359][ T6769] lo speed is unknown, defaulting to 1000 [ 148.773410][ T6776] netlink: 'syz.3.1029': attribute type 27 has an invalid length. [ 148.997841][ T6776] lo: left promiscuous mode [ 149.002458][ T6776] tunl0: left promiscuous mode [ 149.007307][ T6776] gre0: left promiscuous mode [ 149.012044][ T6776] gretap0: left promiscuous mode [ 149.017080][ T6776] erspan0: left promiscuous mode [ 149.022149][ T6776] ip_vti0: left promiscuous mode [ 149.027193][ T6776] ip6_vti0: left promiscuous mode [ 149.032290][ T6776] sit0: left promiscuous mode [ 149.036983][ T6776] ip6tnl0: left promiscuous mode [ 149.042030][ T6776] ip6gre0: left promiscuous mode [ 149.047092][ T6776] syz_tun: left promiscuous mode [ 149.052093][ T6776] ip6gretap0: left promiscuous mode [ 149.057314][ T6776] bridge0: left promiscuous mode [ 149.062311][ T6776] vcan0: left promiscuous mode [ 149.067140][ T6776] team0: left promiscuous mode [ 149.072148][ T6776] nlmon0: left promiscuous mode [ 149.077033][ T6776] caif0: left promiscuous mode [ 149.081897][ T6776] vxcan0: left promiscuous mode [ 149.086796][ T6776] vxcan1: left promiscuous mode [ 149.091741][ T6776] wg0: left promiscuous mode [ 149.096435][ T6776] wg1: left promiscuous mode [ 149.101067][ T6776] wg2: left promiscuous mode [ 149.105729][ T6776] veth0_to_bridge: left promiscuous mode [ 149.111597][ T6776] veth1_to_bridge: left promiscuous mode [ 149.117371][ T6776] veth0_to_bond: left promiscuous mode [ 149.122874][ T6776] bond_slave_0: left promiscuous mode [ 149.128338][ T6776] veth1_to_bond: left promiscuous mode [ 149.133860][ T6776] bond_slave_1: left promiscuous mode [ 149.139352][ T6776] veth0_to_team: left promiscuous mode [ 149.144836][ T6776] team_slave_0: left promiscuous mode [ 149.150330][ T6776] veth1_to_team: left promiscuous mode [ 149.155873][ T6776] team_slave_1: left promiscuous mode [ 149.161276][ T6776] veth0_to_batadv: left promiscuous mode [ 149.167076][ T6776] batadv_slave_0: left promiscuous mode [ 149.172729][ T6776] xfrm0: left promiscuous mode [ 149.177515][ T6776] veth0_to_hsr: left promiscuous mode [ 149.183044][ T6776] veth1_to_hsr: left promiscuous mode [ 149.188723][ T6776] hsr0: left promiscuous mode [ 149.193431][ T6776] veth1_virt_wifi: left promiscuous mode [ 149.199304][ T6776] veth0_virt_wifi: left promiscuous mode [ 149.205140][ T6776] @: left promiscuous mode [ 149.209750][ T6776] vlan1: left promiscuous mode [ 149.214630][ T6776] macvlan0: left promiscuous mode [ 149.219771][ T6776] macvlan1: left promiscuous mode [ 149.224862][ T6776] ipvlan0: left promiscuous mode [ 149.229990][ T6776] ipvlan1: left promiscuous mode [ 149.235012][ T6776] geneve0: left promiscuous mode [ 149.240083][ T6776] geneve1: left promiscuous mode [ 149.245139][ T6776] : left promiscuous mode [ 149.709140][ T6776] netdevsim netdevsim3 eth0: left promiscuous mode [ 149.727155][ T6776] netdevsim netdevsim3 eth1: left promiscuous mode [ 149.734136][ T6776] netdevsim netdevsim3 eth2: left promiscuous mode [ 149.741207][ T6776] netdevsim netdevsim3 eth3: left promiscuous mode [ 149.751487][ T6782] syz_tun: entered allmulticast mode [ 149.885617][ T6775] syz_tun: left allmulticast mode [ 149.925590][ T6789] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1030'. [ 149.955039][ T6789] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 150.071700][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 150.107931][ T6789] 0ªî{X¹¦: entered allmulticast mode [ 150.114264][ T6789] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 150.142438][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 150.154112][ T6803] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1034'. [ 150.275343][ T6811] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 150.283198][ T6811] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1038'. [ 150.310201][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.324560][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.386267][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 150.386283][ T29] audit: type=1400 audit(1755985273.117:6300): avc: denied { setopt } for pid=6799 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.417087][ T29] audit: type=1400 audit(1755985273.147:6301): avc: denied { name_connect } for pid=6799 comm="syz.3.1033" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 150.439274][ T29] audit: type=1400 audit(1755985273.147:6302): avc: denied { shutdown } for pid=6799 comm="syz.3.1033" lport=54579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.550460][ T29] audit: type=1400 audit(1755985273.277:6303): avc: denied { name_connect } for pid=6818 comm="syz.5.1040" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 150.595442][ T29] audit: type=1400 audit(1755985273.327:6304): avc: denied { append } for pid=6822 comm="syz.5.1042" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.655238][ T6821] lo speed is unknown, defaulting to 1000 [ 150.661425][ T29] audit: type=1400 audit(1755985273.367:6305): avc: denied { create } for pid=6822 comm="syz.5.1042" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.790514][ T29] audit: type=1400 audit(1755985273.517:6306): avc: denied { unlink } for pid=5745 comm="syz-executor" name="file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.845869][ T29] audit: type=1400 audit(1755985273.567:6307): avc: denied { create } for pid=6828 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.865368][ T29] audit: type=1326 audit(1755985273.567:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 150.888756][ T29] audit: type=1326 audit(1755985273.567:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 150.997663][ T6833] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 151.004204][ T6833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.011711][ T6833] vhci_hcd vhci_hcd.0: Device attached [ 151.043378][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1045'. [ 151.052684][ T6842] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 151.055423][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1045'. [ 151.059352][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.059444][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 151.116344][ T6833] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.146332][ T6833] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 151.153004][ T6833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.160663][ T6833] vhci_hcd vhci_hcd.0: Device attached [ 151.193801][ T6843] vhci_hcd: connection closed [ 151.193917][ T56] vhci_hcd: stop threads [ 151.193953][ T6845] vhci_hcd: connection closed [ 151.198650][ T56] vhci_hcd: release socket [ 151.204886][ T6837] vhci_hcd: connection closed [ 151.207539][ T56] vhci_hcd: disconnect device [ 151.251392][ T56] vhci_hcd: stop threads [ 151.255702][ T56] vhci_hcd: release socket [ 151.260141][ T56] vhci_hcd: disconnect device [ 151.274135][ T56] vhci_hcd: stop threads [ 151.278445][ T56] vhci_hcd: release socket [ 151.282849][ T56] vhci_hcd: disconnect device [ 152.017810][ T6858] lo speed is unknown, defaulting to 1000 [ 152.060872][ T6859] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1050'. [ 152.510011][ T6862] netlink: 'syz.5.1061': attribute type 27 has an invalid length. [ 152.640426][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.647636][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.690848][ T6862] veth0_to_team: left promiscuous mode [ 153.248696][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.261573][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.297524][ T6870] syz_tun: entered allmulticast mode [ 153.313636][ T6871] lo speed is unknown, defaulting to 1000 [ 153.489018][ T31] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.513109][ T31] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.550042][ T31] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.559405][ T6888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1054'. [ 153.584087][ T31] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.999619][ T6861] syz_tun: left allmulticast mode [ 154.073457][ T6903] syzkaller0: entered promiscuous mode [ 154.079041][ T6903] syzkaller0: entered allmulticast mode [ 154.129369][ T6905] syzkaller1: entered promiscuous mode [ 154.134908][ T6905] syzkaller1: entered allmulticast mode [ 154.155260][ T6905] netlink: 'syz.0.1063': attribute type 10 has an invalid length. [ 154.172495][ T6905] netlink: 'syz.0.1063': attribute type 10 has an invalid length. [ 154.182033][ T6905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.493209][ T6914] lo speed is unknown, defaulting to 1000 [ 155.014361][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 155.024238][ T6920] bridge_slave_0: left allmulticast mode [ 155.029918][ T6920] bridge_slave_0: left promiscuous mode [ 155.035612][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.067292][ T6920] bridge_slave_1: left allmulticast mode [ 155.073027][ T6920] bridge_slave_1: left promiscuous mode [ 155.078672][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.099935][ T6920] team0: Port device C removed [ 155.109109][ T6920] team0: Port device team_slave_1 removed [ 155.119528][ T6932] team0: Mode changed to "loadbalance" [ 155.179890][ T6920] team0: Device veth1_vlan failed to register rx_handler [ 155.220812][ T6937] syzkaller0: entered allmulticast mode [ 155.246958][ T6941] bridge0: entered promiscuous mode [ 155.252545][ T6941] macsec3: entered promiscuous mode [ 155.258970][ T6941] bridge0: port 3(macsec3) entered blocking state [ 155.265431][ T6941] bridge0: port 3(macsec3) entered disabled state [ 155.272158][ T6941] macsec3: entered allmulticast mode [ 155.277453][ T6941] bridge0: entered allmulticast mode [ 155.304205][ T6966] program syz.3.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.333214][ T6941] macsec3: left allmulticast mode [ 155.338287][ T6941] bridge0: left allmulticast mode [ 155.367822][ T6988] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 155.375636][ T6988] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1077'. [ 155.385351][ T6941] bridge0: left promiscuous mode [ 155.403966][ T6942] lo speed is unknown, defaulting to 1000 [ 155.410471][ T6936] syzkaller0: left allmulticast mode [ 155.565266][ T7003] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 155.574111][ T7003] netlink: 'syz.2.1081': attribute type 3 has an invalid length. [ 155.605438][ T7005] lo speed is unknown, defaulting to 1000 [ 155.633545][ T7011] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1070'. [ 155.829544][ T7014] netlink: 'syz.5.1072': attribute type 1 has an invalid length. [ 155.837393][ T7014] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1072'. [ 155.852212][ T7016] lo speed is unknown, defaulting to 1000 [ 155.999109][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 155.999122][ T29] audit: type=1326 audit(1755985278.737:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.3.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x0 [ 156.089025][ T7021] hub 9-0:1.0: USB hub found [ 156.097118][ T7021] hub 9-0:1.0: 8 ports detected [ 156.173398][ T29] audit: type=1400 audit(1755985278.837:6670): avc: denied { bind } for pid=7018 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.486532][ T29] audit: type=1326 audit(1755985279.217:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.561339][ T7016] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1084'. [ 156.716923][ T29] audit: type=1326 audit(1755985279.247:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.740530][ T29] audit: type=1326 audit(1755985279.257:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.763948][ T29] audit: type=1326 audit(1755985279.257:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.787337][ T29] audit: type=1326 audit(1755985279.257:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.810870][ T29] audit: type=1326 audit(1755985279.287:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.834283][ T29] audit: type=1326 audit(1755985279.287:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 156.857668][ T29] audit: type=1326 audit(1755985279.287:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 157.175811][ T7027] lo speed is unknown, defaulting to 1000 [ 157.745674][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1082'. [ 157.805779][ T7049] block device autoloading is deprecated and will be removed. [ 157.910115][ T7051] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1083'. [ 157.930583][ T7051] bridge: RTM_NEWNEIGH with invalid ether address [ 157.956520][ T7053] syzkaller0: entered promiscuous mode [ 157.962101][ T7053] syzkaller0: entered allmulticast mode [ 158.008179][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.027589][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.116340][ T7060] lo speed is unknown, defaulting to 1000 [ 158.178127][ T7064] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 158.185948][ T7064] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1088'. [ 158.231431][ T7068] bond0: entered promiscuous mode [ 158.236462][ T7068] bond0: entered allmulticast mode [ 158.242090][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.250955][ T7068] bond0 (unregistering): Released all slaves [ 158.278107][ T7072] sctp: [Deprecated]: syz.5.1091 (pid 7072) Use of int in max_burst socket option deprecated. [ 158.278107][ T7072] Use struct sctp_assoc_value instead [ 158.372867][ T7074] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 158.379441][ T7074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.386965][ T7074] vhci_hcd vhci_hcd.0: Device attached [ 158.395555][ T7075] vhci_hcd: cannot find the pending unlink 6 [ 158.414810][ T7075] vhci_hcd: connection closed [ 158.414898][ T6980] vhci_hcd: stop threads [ 158.423936][ T6980] vhci_hcd: release socket [ 158.428336][ T6980] vhci_hcd: disconnect device [ 158.716958][ T7091] 0ªî{X¹¦: left allmulticast mode [ 158.732443][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.739667][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.785121][ T6980] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.793851][ T6980] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.802658][ T6980] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.811299][ T6980] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.934301][ T7097] lo speed is unknown, defaulting to 1000 [ 160.037183][ T7117] bridge_slave_0: left allmulticast mode [ 160.042934][ T7117] bridge_slave_0: left promiscuous mode [ 160.048577][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.105095][ T7118] netlink: zone id is out of range [ 160.128796][ T7117] bridge_slave_1: left allmulticast mode [ 160.134474][ T7117] bridge_slave_1: left promiscuous mode [ 160.140207][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.159341][ T7118] netlink: zone id is out of range [ 160.164463][ T7118] netlink: zone id is out of range [ 160.169626][ T7118] netlink: zone id is out of range [ 160.208837][ T7117] team0: Port device team_slave_0 removed [ 160.226685][ T7117] team0: Port device team_slave_1 removed [ 160.238478][ T7118] netlink: zone id is out of range [ 160.277330][ T7119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1103'. [ 160.293796][ T7118] netlink: zone id is out of range [ 160.338596][ T7118] netlink: zone id is out of range [ 160.343837][ T7118] netlink: zone id is out of range [ 160.348968][ T7118] netlink: zone id is out of range [ 160.354105][ T7118] netlink: zone id is out of range [ 160.542522][ T7124] block device autoloading is deprecated and will be removed. [ 160.746052][ T7127] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1106'. [ 160.771689][ T7127] 0ªî{X¹¦: renamed from gretap0 [ 160.793335][ T7127] 0ªî{X¹¦: entered allmulticast mode [ 160.802278][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 160.910757][ T7144] netlink: 'syz.2.1110': attribute type 4 has an invalid length. [ 161.338847][ T7146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 161.345476][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.353003][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 161.360365][ T7146] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 161.366989][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.374565][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 161.381448][ T7146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.390957][ T7146] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 161.397576][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.405175][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 161.412634][ T7146] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 161.419381][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.427043][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 161.434060][ T7146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 161.440663][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 161.448433][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 161.454967][ T7146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.464073][ T7146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.485506][ T7146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.495092][ T7146] vhci_hcd vhci_hcd.0: port 0 already used [ 161.510778][ T7155] vhci_hcd: connection closed [ 161.511022][ T6973] vhci_hcd: stop threads [ 161.520002][ T6973] vhci_hcd: release socket [ 161.524405][ T6973] vhci_hcd: disconnect device [ 161.537778][ T7147] vhci_hcd: connection closed [ 161.537822][ T7153] vhci_hcd: connection closed [ 161.542723][ T7149] vhci_hcd: connection closed [ 161.547490][ T7151] vhci_hcd: connection closed [ 161.552351][ T6388] vhci_hcd: vhci_device speed not set [ 161.564693][ T6973] vhci_hcd: stop threads [ 161.568962][ T6973] vhci_hcd: release socket [ 161.573364][ T6973] vhci_hcd: disconnect device [ 161.579225][ T6973] vhci_hcd: stop threads [ 161.583462][ T6973] vhci_hcd: release socket [ 161.587868][ T6973] vhci_hcd: disconnect device [ 161.594611][ T6973] vhci_hcd: stop threads [ 161.598903][ T6973] vhci_hcd: release socket [ 161.603457][ T6973] vhci_hcd: disconnect device [ 161.608303][ T6973] vhci_hcd: stop threads [ 161.612686][ T6973] vhci_hcd: release socket [ 161.617091][ T6973] vhci_hcd: disconnect device [ 161.622700][ T6388] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 161.630259][ T6388] usb 3-1: enqueue for inactive port 0 [ 161.635747][ T6388] usb 3-1: enqueue for inactive port 0 [ 161.650723][ T6388] usb 3-1: enqueue for inactive port 0 [ 161.673964][ T7163] netlink: 'syz.3.1114': attribute type 6 has an invalid length. [ 161.709529][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 161.709544][ T29] audit: type=1400 audit(1755985284.451:6953): avc: denied { create } for pid=7161 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.761729][ T6388] vhci_hcd: vhci_device speed not set [ 161.769807][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'. [ 161.800954][ T29] audit: type=1400 audit(1755985284.451:6954): avc: denied { bind } for pid=7159 comm="syz.5.1112" lport=32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.821171][ T29] audit: type=1400 audit(1755985284.451:6955): avc: denied { node_bind } for pid=7159 comm="syz.5.1112" saddr=fe88::6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 161.842384][ T29] audit: type=1400 audit(1755985284.501:6956): avc: denied { relabelfrom } for pid=7162 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.862214][ T29] audit: type=1400 audit(1755985284.511:6957): avc: denied { relabelto } for pid=7162 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.881911][ T29] audit: type=1400 audit(1755985284.521:6958): avc: denied { ioctl } for pid=7161 comm="syz.0.1113" path="socket:[20325]" dev="sockfs" ino=20325 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.937950][ T7169] syzkaller0: entered allmulticast mode [ 161.944630][ T7169] syzkaller0: entered promiscuous mode [ 161.981695][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 162.001870][ T29] audit: type=1326 audit(1755985284.741:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 162.025533][ T29] audit: type=1326 audit(1755985284.741:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 162.053884][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7172 comm=syz.2.1118 [ 162.071148][ T7169] syzkaller0 (unregistering): left allmulticast mode [ 162.073821][ T29] audit: type=1326 audit(1755985284.741:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 162.078267][ T7169] syzkaller0 (unregistering): left promiscuous mode [ 162.101560][ T29] audit: type=1326 audit(1755985284.741:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 162.500937][ T7188] bridge_slave_0: left allmulticast mode [ 162.506621][ T7188] bridge_slave_0: left promiscuous mode [ 162.512413][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.529649][ T7188] bridge_slave_1: left allmulticast mode [ 162.535320][ T7188] bridge_slave_1: left promiscuous mode [ 162.540986][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.619985][ T7188] bond0: (slave bond_slave_0): Releasing backup interface [ 162.639047][ T7188] bond0: (slave bond_slave_1): Releasing backup interface [ 162.659277][ T7191] SELinux: failed to load policy [ 162.664739][ T7188] team0: Port device team_slave_0 removed [ 162.672350][ T7188] team0: Port device team_slave_1 removed [ 162.685649][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.693761][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.800801][ T7193] syzkaller0: entered promiscuous mode [ 162.806309][ T7193] syzkaller0: entered allmulticast mode [ 162.886205][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 162.952146][ T7197] siw: device registration error -23 [ 163.165424][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.204271][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.198714][ T7307] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 164.205307][ T7307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.212930][ T7307] vhci_hcd vhci_hcd.0: Device attached [ 164.274059][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1136'. [ 164.324106][ T7330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7330 comm=syz.3.1136 [ 164.350951][ T7325] vhci_hcd: connection closed [ 164.351206][ T6965] vhci_hcd: stop threads [ 164.360207][ T6965] vhci_hcd: release socket [ 164.364622][ T6965] vhci_hcd: disconnect device [ 164.408617][ T6393] vhci_hcd: vhci_device speed not set [ 164.478697][ T7337] pimreg: entered allmulticast mode [ 164.771122][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 164.780056][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 164.896058][ T7377] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1143'. [ 164.954092][ T7381] bond0: entered promiscuous mode [ 164.959264][ T7381] bond0: entered allmulticast mode [ 164.976574][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.985700][ T7381] bond0 (unregistering): Released all slaves [ 164.994486][ T7362] serio: Serial port ptm0 [ 165.032488][ T7405] bond0: entered promiscuous mode [ 165.037558][ T7405] bond0: entered allmulticast mode [ 165.072872][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.123789][ T7405] bond0 (unregistering): Released all slaves [ 165.148250][ T7415] serio: Serial port ptm1 [ 166.491139][ T7466] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 166.497710][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.505272][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 167.043854][ T29] kauditd_printk_skb: 4205 callbacks suppressed [ 167.043914][ T29] audit: type=1400 audit(1755985289.701:11168): avc: denied { execmem } for pid=7509 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.110732][ T7467] vhci_hcd: connection closed [ 167.110981][ T7396] vhci_hcd: stop threads [ 167.120065][ T7396] vhci_hcd: release socket [ 167.124479][ T7396] vhci_hcd: disconnect device [ 167.148453][ T29] audit: type=1400 audit(1755985289.881:11169): avc: denied { prog_load } for pid=7511 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.167765][ T29] audit: type=1400 audit(1755985289.881:11170): avc: denied { bpf } for pid=7511 comm="syz.3.1155" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.188501][ T29] audit: type=1400 audit(1755985289.881:11171): avc: denied { perfmon } for pid=7511 comm="syz.3.1155" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.209473][ T29] audit: type=1400 audit(1755985289.881:11172): avc: denied { prog_run } for pid=7511 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.228511][ T29] audit: type=1400 audit(1755985289.881:11173): avc: denied { create } for pid=7511 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.247818][ T7517] lo speed is unknown, defaulting to 1000 [ 167.248277][ T29] audit: type=1400 audit(1755985289.881:11174): avc: denied { map_create } for pid=7511 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.273178][ T29] audit: type=1400 audit(1755985289.881:11175): avc: denied { ioctl } for pid=7511 comm="syz.3.1155" path="socket:[21653]" dev="sockfs" ino=21653 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.309705][ T29] audit: type=1400 audit(1755985289.911:11176): avc: denied { bind } for pid=7511 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.329365][ T29] audit: type=1400 audit(1755985289.991:11177): avc: denied { map_read map_write } for pid=7514 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.447035][ T6388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.456033][ T6388] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.837663][ T7538] __nla_validate_parse: 1 callbacks suppressed [ 167.837679][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 167.930583][ T7540] lo speed is unknown, defaulting to 1000 [ 168.193470][ T7545] can0: slcan on ttyS3. [ 168.258669][ T7545] can0 (unregistered): slcan off ttyS3. [ 168.283248][ T7548] can0: slcan on ttyS3. [ 168.337011][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 168.367147][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 168.377625][ T7542] can0 (unregistered): slcan off ttyS3. [ 168.558224][ T7552] random: crng reseeded on system resumption [ 169.467694][ T6388] IPVS: starting estimator thread 0... [ 169.513108][ T7578] sctp: [Deprecated]: syz.3.1170 (pid 7578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.513108][ T7578] Use struct sctp_sack_info instead [ 169.640663][ T7576] IPVS: using max 2784 ests per chain, 139200 per kthread [ 171.423396][ T7613] @: renamed from vlan0 (while UP) [ 171.888684][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1182'. [ 172.037964][ T7716] serio: Serial port ptm0 [ 172.170565][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 172.170581][ T29] audit: type=1400 audit(172.150:11457): avc: denied { read } for pid=7717 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.732693][ T7721] atomic_op ffff88814c49a528 conn xmit_atomic 0000000000000000 [ 172.740373][ T29] audit: type=1400 audit(172.710:11458): avc: denied { map } for pid=7720 comm="syz.5.1188" path="socket:[20830]" dev="sockfs" ino=20830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.746255][ T7721] binfmt_misc: register: failed to install interpreter file ./file2 [ 172.763210][ T29] audit: type=1400 audit(172.710:11459): avc: denied { create } for pid=7720 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.790070][ T29] audit: type=1400 audit(172.710:11460): avc: denied { bind } for pid=7720 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.809015][ T29] audit: type=1400 audit(172.710:11461): avc: denied { write } for pid=7720 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.836387][ T29] audit: type=1400 audit(172.780:11462): avc: denied { remount } for pid=7720 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.864373][ T29] audit: type=1400 audit(172.840:11463): avc: denied { create } for pid=7726 comm="syz.5.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.883703][ T29] audit: type=1400 audit(172.840:11464): avc: denied { connect } for pid=7726 comm="syz.5.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.952247][ T29] audit: type=1400 audit(172.900:11465): avc: denied { sys_module } for pid=7725 comm="syz.0.1191" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.972902][ T29] audit: type=1400 audit(172.920:11466): avc: denied { read write } for pid=7731 comm="syz.1.1193" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.018106][ T7739] hub 9-0:1.0: USB hub found [ 173.023857][ T7739] hub 9-0:1.0: 8 ports detected [ 173.049276][ T7739] lo speed is unknown, defaulting to 1000 [ 173.258985][ T7757] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 173.267720][ T7757] ref_ctr increment failed for inode: 0x550 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109b70b80 [ 173.389045][ T7772] sctp: [Deprecated]: syz.2.1201 (pid 7772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.389045][ T7772] Use struct sctp_sack_info instead [ 173.563627][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1202'. [ 173.576348][ T7797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1202'. [ 173.589127][ T7800] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1203'. [ 173.626732][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 173.656941][ T7815] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1204'. [ 173.869801][ T7849] hub 9-0:1.0: USB hub found [ 173.874601][ T7849] hub 9-0:1.0: 8 ports detected [ 173.904903][ T7849] lo speed is unknown, defaulting to 1000 [ 173.957310][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1212'. [ 173.994684][ T7859] block device autoloading is deprecated and will be removed. [ 174.017880][ T7862] loop3: detected capacity change from 0 to 1024 [ 174.040143][ T7862] /dev/loop3: Can't open blockdev [ 174.306144][ T7882] lo speed is unknown, defaulting to 1000 [ 174.616017][ T7885] loop3: detected capacity change from 0 to 1024 [ 174.851534][ T7885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.976997][ T7896] netlink: 'syz.2.1221': attribute type 10 has an invalid length. [ 175.145149][ T7907] lo speed is unknown, defaulting to 1000 [ 175.549856][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1229'. [ 175.779341][ T7939] lo speed is unknown, defaulting to 1000 [ 176.376063][ T7953] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1231'. [ 177.690685][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 177.690698][ T29] audit: type=1400 audit(177.670:11763): avc: denied { ioctl } for pid=7956 comm="syz.5.1233" path="socket:[21254]" dev="sockfs" ino=21254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.781758][ T29] audit: type=1400 audit(177.750:11764): avc: denied { open } for pid=7959 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.800517][ T29] audit: type=1400 audit(177.750:11765): avc: denied { kernel } for pid=7959 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.840673][ T7960] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1234'. [ 177.862855][ T7960] SELinux: Context +net_cls +cpuset is not valid (left unmapped). [ 177.888313][ T29] audit: type=1400 audit(177.820:11766): avc: denied { block_suspend } for pid=7959 comm="syz.2.1235" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.909327][ T29] audit: type=1400 audit(177.820:11767): avc: denied { create } for pid=7959 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.928354][ T29] audit: type=1400 audit(177.840:11768): avc: denied { mac_admin } for pid=7958 comm="syz.5.1234" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.948912][ T29] audit: type=1400 audit(177.850:11769): avc: denied { write } for pid=7963 comm="syz.2.1236" name="protocols" dev="proc" ino=4026532721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 178.059154][ T29] audit: type=1400 audit(178.040:11770): avc: denied { create } for pid=7969 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 178.112492][ T29] audit: type=1400 audit(178.080:11771): avc: denied { ioctl } for pid=7969 comm="syz.2.1239" path="socket:[22107]" dev="sockfs" ino=22107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.136794][ T29] audit: type=1400 audit(178.080:11772): avc: denied { create } for pid=7969 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.230185][ T7970] random: crng reseeded on system resumption [ 178.254572][ T7970] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1239'. [ 178.614853][ T7994] __nla_validate_parse: 1 callbacks suppressed [ 178.614908][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'. [ 178.631348][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.641784][ T7992] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1246'. [ 178.850087][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1249'. [ 178.886969][ T8001] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1249'. [ 179.030181][ T8008] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1251'. [ 179.309616][ T8013] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1253'. [ 179.398495][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 179.524676][ T8021] 0ªî{X¹¦: left allmulticast mode [ 179.547975][ T8021] veth0_vlan: left allmulticast mode [ 179.619666][ T8026] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1258'. [ 179.628770][ T8026] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1258'. [ 179.669816][ T8027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8027 comm=syz.1.1257 [ 179.683134][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 179.698447][ T8027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.715019][ T8027] macvlan2: entered promiscuous mode [ 179.720525][ T8027] macvlan2: entered allmulticast mode [ 179.726989][ T8027] bond0: entered promiscuous mode [ 179.732487][ T8027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.740821][ T8027] bond0: left promiscuous mode [ 180.211921][ T8061] lo speed is unknown, defaulting to 1000 [ 180.435790][ T8056] pim6reg1: entered promiscuous mode [ 180.441208][ T8056] pim6reg1: entered allmulticast mode [ 180.762192][ T8067] lo speed is unknown, defaulting to 1000 [ 181.343883][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.364152][ T8083] net_ratelimit: 90 callbacks suppressed [ 181.364163][ T8083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.482512][ T8091] netlink: 'syz.1.1275': attribute type 7 has an invalid length. [ 181.525879][ T8096] IPVS: Unknown mcast interface: vcan0 [ 181.677557][ T8107] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 181.684101][ T8107] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 181.691821][ T8107] vhci_hcd vhci_hcd.0: Device attached [ 181.845592][ T8108] vhci_hcd: connection closed [ 181.845769][ T7396] vhci_hcd: stop threads [ 181.854694][ T7396] vhci_hcd: release socket [ 181.859103][ T7396] vhci_hcd: disconnect device [ 184.322544][ T8247] futex_wake_op: syz.5.1287 tries to shift op by -1; fix this program [ 184.322801][ T8248] hub 9-0:1.0: USB hub found [ 184.337048][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 184.337062][ T29] audit: type=1326 audit(183.948:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.339511][ T8248] hub 9-0:1.0: 8 ports detected [ 184.343390][ T29] audit: type=1326 audit(183.948:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.393949][ T29] audit: type=1326 audit(183.948:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.416911][ T29] audit: type=1326 audit(183.948:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.439843][ T29] audit: type=1326 audit(183.948:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.454091][ T8256] lo speed is unknown, defaulting to 1000 [ 184.462772][ T29] audit: type=1326 audit(183.948:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.491852][ T29] audit: type=1326 audit(183.948:12023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.514808][ T29] audit: type=1326 audit(183.948:12024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.537663][ T29] audit: type=1326 audit(183.948:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8816dd550 code=0x7ffc0000 [ 184.560541][ T29] audit: type=1326 audit(183.948:12026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8816debe9 code=0x7ffc0000 [ 184.627348][ T8247] lo speed is unknown, defaulting to 1000 [ 184.775929][ T8264] can0: slcan on ttyS3. [ 184.887017][ T8272] lo speed is unknown, defaulting to 1000 [ 184.927702][ T8264] can0 (unregistered): slcan off ttyS3. [ 184.944476][ T8268] can0: slcan on ttyS3. [ 185.010715][ T8278] tipc: Enabling of bearer rejected, failed to enable media [ 185.020814][ T8278] syzkaller0: entered promiscuous mode [ 185.026416][ T8278] syzkaller0: entered allmulticast mode [ 185.078417][ T8263] can0 (unregistered): slcan off ttyS3. [ 185.141958][ T8255] Set syz1 is full, maxelem 65536 reached [ 185.239272][ T8289] lo speed is unknown, defaulting to 1000 [ 185.378097][ T8291] __nla_validate_parse: 7 callbacks suppressed [ 185.378111][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 185.450763][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 186.576147][ T8297] pimreg: entered allmulticast mode [ 186.602144][ T8297] pimreg: left allmulticast mode [ 187.023326][ T8309] hub 9-0:1.0: USB hub found [ 187.028050][ T8309] hub 9-0:1.0: 8 ports detected [ 187.106188][ T8311] lo speed is unknown, defaulting to 1000 [ 187.257485][ T8319] 9pnet_fd: Insufficient options for proto=fd [ 187.522241][ T8321] macvlan1: entered promiscuous mode [ 187.536410][ T8321] ipvlan0: entered promiscuous mode [ 187.545519][ T8321] ipvlan0: left promiscuous mode [ 187.550672][ T8321] macvlan1: left promiscuous mode [ 187.557508][ T8323] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1307'. [ 188.063927][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1312'. [ 188.158957][ T8344] block device autoloading is deprecated and will be removed. [ 188.214957][ T8348] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 188.637904][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 188.766904][ T6384] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 188.783543][ T6384] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.849646][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'. [ 188.870463][ T8383] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1326'. [ 189.029073][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 189.139406][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 189.323608][ T8401] ------------[ cut here ]------------ [ 189.329196][ T8401] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 189.349422][ T8401] WARNING: CPU: 0 PID: 8401 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 189.359820][ T8401] Modules linked in: [ 189.363726][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.5.1332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.373468][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.383575][ T8401] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 189.389910][ T8401] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 189.399456][ T8403] random: crng reseeded on system resumption [ 189.409583][ T8401] RSP: 0018:ffffc90001ae3440 EFLAGS: 00010292 [ 189.421659][ T8401] RAX: 66d0ab5f21402200 RBX: ffff88811a415040 RCX: 0000000000080000 [ 189.429709][ T8401] RDX: ffffc9000fc14000 RSI: 00000000000210f4 RDI: 00000000000210f5 [ 189.437741][ T8401] RBP: 0000000000000000 R08: 0001c90001ae327f R09: 0000000000000000 [ 189.445812][ T8401] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a415000 [ 189.453785][ T8401] R13: ffff8881818e0000 R14: ffff8881818e0000 R15: ffff88811a415038 [ 189.461783][ T8401] FS: 00007fb7847c76c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 189.470729][ T8401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.477331][ T8401] CR2: 00007fb77c3b6000 CR3: 0000000185e7e000 CR4: 00000000003506f0 [ 189.485378][ T8401] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.493367][ T8401] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 189.501347][ T8401] Call Trace: [ 189.504617][ T8401] [ 189.507553][ T8401] reg_set_min_max+0x1eb/0x260 [ 189.512418][ T8401] check_cond_jmp_op+0x1080/0x16e0 [ 189.517616][ T8401] do_check+0x332a/0x7a10 [ 189.521990][ T8401] do_check_common+0xc3a/0x12a0 [ 189.526853][ T8401] bpf_check+0x942b/0xd9e0 [ 189.531351][ T8401] ? __rcu_read_unlock+0x4f/0x70 [ 189.536311][ T8401] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 189.542404][ T8401] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 189.548072][ T8401] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 189.554038][ T8401] ? try_charge_memcg+0x200/0x9e0 [ 189.559072][ T8401] ? pcpu_block_update+0x24e/0x3b0 [ 189.564292][ T8401] ? mutex_spin_on_owner+0xc4/0x170 [ 189.569562][ T8401] ? _find_next_zero_bit+0x64/0xa0 [ 189.574827][ T8401] ? pcpu_block_refresh_hint+0x157/0x170 [ 189.580470][ T8401] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 189.586643][ T8401] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 189.586675][ T8401] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 189.597935][ T8401] ? css_rstat_updated+0xb7/0x240 [ 189.603100][ T8401] ? __rcu_read_unlock+0x4f/0x70 [ 189.608088][ T8401] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 189.613891][ T8401] ? should_fail_ex+0x30/0x280 [ 189.618693][ T8401] ? selinux_bpf_prog_load+0x36/0xf0 [ 189.623978][ T8401] ? should_failslab+0x8c/0xb0 [ 189.628776][ T8401] ? __kmalloc_cache_noprof+0x189/0x320 [ 189.634336][ T8401] ? selinux_bpf_prog_load+0xbf/0xf0 [ 189.639666][ T8401] ? security_bpf_prog_load+0x2c/0xa0 [ 189.645042][ T8401] bpf_prog_load+0xedd/0x1070 [ 189.649803][ T8401] ? security_bpf+0x2b/0x90 [ 189.654404][ T8401] __sys_bpf+0x462/0x7b0 [ 189.658699][ T8401] __x64_sys_bpf+0x41/0x50 [ 189.663168][ T8401] x64_sys_call+0x2aea/0x2ff0 [ 189.667845][ T8401] do_syscall_64+0xd2/0x200 [ 189.672430][ T8401] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.678514][ T8401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.684255][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.690158][ T8401] RIP: 0033:0x7fb785d5ebe9 [ 189.694658][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.714272][ T8401] RSP: 002b:00007fb7847c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.722766][ T8401] RAX: ffffffffffffffda RBX: 00007fb785f85fa0 RCX: 00007fb785d5ebe9 [ 189.730749][ T8401] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 189.738809][ T8401] RBP: 00007fb785de1e19 R08: 0000000000000000 R09: 0000000000000000 [ 189.746844][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.754849][ T8401] R13: 00007fb785f86038 R14: 00007fb785f85fa0 R15: 00007ffc807423f8 [ 189.762941][ T8401] [ 189.765954][ T8401] ---[ end trace 0000000000000000 ]--- [ 189.860367][ T8412] pim6reg: entered allmulticast mode [ 190.126971][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 190.126996][ T29] audit: type=1400 audit(189.237:12526): avc: denied { create } for pid=8419 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.152035][ T29] audit: type=1400 audit(189.237:12527): avc: denied { setopt } for pid=8419 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.452135][ T29] audit: type=1400 audit(189.504:12528): avc: denied { bind } for pid=8422 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.471042][ T29] audit: type=1400 audit(189.532:12529): avc: denied { lock } for pid=8422 comm="syz.2.1338" path="socket:[22904]" dev="sockfs" ino=22904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.494858][ T29] audit: type=1326 audit(189.532:12530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 190.517789][ T29] audit: type=1326 audit(189.532:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 190.540689][ T29] audit: type=1326 audit(189.532:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 190.563643][ T29] audit: type=1326 audit(189.532:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 190.586493][ T29] audit: type=1326 audit(189.532:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 190.609354][ T29] audit: type=1326 audit(189.532:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf707ebe9 code=0x7ffc0000 [ 190.803391][ T8428] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1339'. [ 190.834652][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.874576][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.925417][ T8434] lo speed is unknown, defaulting to 1000 [ 191.158155][ T8436] tipc: New replicast peer: 255.255.255.255 [ 191.164232][ T8436] tipc: Enabled bearer , priority 10 [ 191.784760][ T8450] lo speed is unknown, defaulting to 1000 [ 192.116064][ T8461] lo speed is unknown, defaulting to 1000 [ 193.233988][ T8475] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 193.274705][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 193.312772][ T8482] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1356'. [ 193.389171][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 193.427684][ T8495] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1360'. [ 193.439517][ T8495] hsr_slave_0: left promiscuous mode [ 193.852262][ T8507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.461168][ T8505] lo speed is unknown, defaulting to 1000 [ 194.795169][ T8517] netlink: 'syz.3.1365': attribute type 1 has an invalid length. [ 194.802942][ T8517] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1365'. [ 194.893389][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 194.945541][ T8523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.059252][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 195.192898][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 195.219842][ T8537] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1371'. [ 195.372921][ T8553] netlink: 'syz.3.1375': attribute type 21 has an invalid length. [ 195.433902][ T8557] wireguard0: entered promiscuous mode [ 195.439486][ T8557] wireguard0: entered allmulticast mode [ 196.156133][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 196.156145][ T29] audit: type=1326 audit(194.858:12838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.185426][ T29] audit: type=1326 audit(194.858:12839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.208457][ T29] audit: type=1326 audit(194.858:12840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.232166][ T29] audit: type=1326 audit(194.895:12841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.255200][ T29] audit: type=1326 audit(194.904:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.278254][ T29] audit: type=1326 audit(194.913:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.301215][ T29] audit: type=1326 audit(194.913:12844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.324245][ T29] audit: type=1326 audit(194.913:12845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.347185][ T29] audit: type=1326 audit(194.913:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.370220][ T29] audit: type=1326 audit(194.913:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.0.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e68bebe9 code=0x7ffc0000 [ 196.490787][ T8585] __nla_validate_parse: 2 callbacks suppressed [ 196.490805][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1383'. [ 196.535877][ T8585] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1383'. [ 196.668975][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 196.765553][ T8598] SELinux: security policydb version 17 (MLS) not backwards compatible [ 196.791588][ T8598] SELinux: failed to load policy [ 197.164434][ T8606] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1389'. [ 197.578429][ T8624] lo speed is unknown, defaulting to 1000 [ 199.010088][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.018907][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.406716][ T8662] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1406'. [ 199.449192][ T8662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1406'. [ 199.489548][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'. [ 199.544635][ T8662] hsr_slave_1 (unregistering): left promiscuous mode [ 199.586479][ T8667] gretap1: entered promiscuous mode [ 199.607681][ T8667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8667 comm=syz.2.1408 [ 199.754494][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 199.830454][ T8681] lo speed is unknown, defaulting to 1000 [ 199.845507][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 199.854416][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 200.177538][ T8699] blktrace: Concurrent blktraces are not allowed on sg0 [ 200.189076][ T8699] serio: Serial port ptm0 [ 200.486299][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8707 comm=syz.2.1416 [ 200.935462][ T8722] lo speed is unknown, defaulting to 1000 [ 201.726749][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 201.726763][ T29] audit: type=1326 audit(199.990:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.800091][ T29] audit: type=1326 audit(200.026:13211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.823271][ T29] audit: type=1326 audit(200.026:13212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.846394][ T29] audit: type=1326 audit(200.026:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.869422][ T29] audit: type=1326 audit(200.026:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.892506][ T29] audit: type=1326 audit(200.026:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.915662][ T29] audit: type=1326 audit(200.026:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.938571][ T29] audit: type=1326 audit(200.026:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.961574][ T29] audit: type=1326 audit(200.026:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 201.984547][ T29] audit: type=1326 audit(200.026:13219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 202.144592][ T6389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 202.163451][ T6389] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.212077][ T8746] __nla_validate_parse: 12 callbacks suppressed [ 202.212094][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1426'. [ 202.227759][ T6389] IPVS: starting estimator thread 0... [ 202.326079][ T8751] IPVS: using max 3168 ests per chain, 158400 per kthread [ 202.778232][ T8772] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1432'. [ 202.778275][ T8772] unsupported nla_type 8573 [ 203.690230][ T8781] lo speed is unknown, defaulting to 1000 [ 204.297425][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 204.468073][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 204.521539][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 205.224636][ T8822] smc: net device bond0 applied user defined pnetid SYZ0 [ 205.283748][ T8822] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 205.353596][ T8830] smc: net device bond0 erased user defined pnetid SYZ0 [ 205.416840][ T8830] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 205.883820][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1449'. [ 205.892887][ T8881] netlink: 'syz.3.1449': attribute type 20 has an invalid length. [ 205.918276][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1449'. [ 205.927348][ T8881] netlink: 'syz.3.1449': attribute type 20 has an invalid length. [ 205.944001][ T8884] netem: incorrect ge model size [ 205.949124][ T8884] netem: change failed [ 206.355303][ T8957] tipc: Enabled bearer , priority 0 [ 206.362371][ T8957] syzkaller0: entered promiscuous mode [ 206.367941][ T8957] syzkaller0: entered allmulticast mode [ 206.376784][ T8957] tipc: Resetting bearer [ 206.383321][ T8955] tipc: Resetting bearer [ 206.390193][ T8955] tipc: Disabling bearer [ 206.521110][ T8961] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1456'. [ 206.534061][ T8961] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1456'. [ 207.001116][ T8974] block device autoloading is deprecated and will be removed. [ 207.074798][ T8974] lo speed is unknown, defaulting to 1000 [ 207.124384][ T8979] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1461'. [ 207.149545][ T29] kauditd_printk_skb: 3199 callbacks suppressed [ 207.149559][ T29] audit: type=1326 audit(204.992:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62e68b5ba7 code=0x7ffc0000 [ 207.178876][ T29] audit: type=1326 audit(204.992:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62e685ade9 code=0x7ffc0000 [ 207.202068][ T29] audit: type=1326 audit(204.992:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62e68b5ba7 code=0x7ffc0000 [ 207.225070][ T29] audit: type=1326 audit(204.992:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62e685ade9 code=0x7ffc0000 [ 207.225094][ T29] audit: type=1326 audit(204.992:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62e68b5ba7 code=0x7ffc0000 [ 207.225145][ T29] audit: type=1326 audit(204.992:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62e685ade9 code=0x7ffc0000 [ 207.294023][ T29] audit: type=1326 audit(204.992:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62e68b5ba7 code=0x7ffc0000 [ 207.294055][ T29] audit: type=1326 audit(204.992:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62e685ade9 code=0x7ffc0000 [ 207.294125][ T29] audit: type=1326 audit(204.992:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62e68b5ba7 code=0x7ffc0000 [ 207.294151][ T29] audit: type=1326 audit(204.992:16428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62e685ade9 code=0x7ffc0000 [ 207.545428][ T8990] tipc: Enabling of bearer rejected, already enabled [ 207.712185][ T9001] bond0: option mode: unable to set because the bond device has slaves [ 207.813685][ T9006] lo speed is unknown, defaulting to 1000 [ 208.603104][ T9001] hub 6-0:1.0: USB hub found [ 208.636962][ T9001] hub 6-0:1.0: 8 ports detected [ 208.950582][ T9016] lo speed is unknown, defaulting to 1000 [ 209.152199][ T9018] lo speed is unknown, defaulting to 1000 [ 209.262475][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 209.910782][ T9027] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1477'. [ 210.305172][ T9034] loop3: detected capacity change from 0 to 1024 [ 210.431535][ T9034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.604349][ T9052] netlink: 'syz.5.1484': attribute type 5 has an invalid length. [ 210.672206][ T9055] 9pnet_fd: Insufficient options for proto=fd [ 210.691137][ T9057] hub 9-0:1.0: USB hub found [ 210.695896][ T9057] hub 9-0:1.0: 8 ports detected [ 211.140650][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.804496][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 211.881933][ T9089] IPVS: Unknown mcast interface: vcan0 [ 211.990317][ T9078] Falling back ldisc for ttyS3. [ 212.013405][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 212.023051][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 212.037661][ T9096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9096 comm=syz.3.1498 [ 212.038451][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 212.081397][ T9099] SELinux: Context  is not valid (left unmapped). [ 212.157692][ T9103] program syz.3.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.167190][ T9103] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 212.207992][ T9101] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 212.214419][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 212.367551][ T9113] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1503'. [ 212.651109][ T29] kauditd_printk_skb: 1282 callbacks suppressed [ 212.651122][ T29] audit: type=1326 audit(210.078:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.688475][ T29] audit: type=1326 audit(210.115:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.711482][ T29] audit: type=1326 audit(210.115:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.734379][ T29] audit: type=1326 audit(210.115:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.757315][ T29] audit: type=1326 audit(210.115:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.780137][ T29] audit: type=1326 audit(210.115:17716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.803054][ T29] audit: type=1326 audit(210.115:17717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.825957][ T29] audit: type=1326 audit(210.115:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 212.848789][ T29] audit: type=1400 audit(210.115:17719): avc: denied { lock } for pid=9118 comm="syz.3.1506" path="socket:[25588]" dev="sockfs" ino=25588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 212.872165][ T29] audit: type=1326 audit(210.115:17720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e9febe9 code=0x7ffc0000 [ 213.054636][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'. [ 214.229532][ T9163] netlink: 'syz.0.1518': attribute type 21 has an invalid length. [ 214.578980][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 215.229851][ T9200] __nla_validate_parse: 1 callbacks suppressed [ 215.229863][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 215.781920][ T9215] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 215.886772][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 215.896561][ T9217] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1535'. [ 215.941606][ T9221] tipc: Enabled bearer , priority 0 [ 215.948670][ T9221] syzkaller0: entered promiscuous mode [ 215.954175][ T9221] syzkaller0: entered allmulticast mode [ 215.962536][ T9221] tipc: Resetting bearer [ 217.037862][ T6384] tipc: Node number set to 201910081 [ 217.056091][ T9252] syzkaller0: entered promiscuous mode [ 217.061622][ T9252] syzkaller0: entered allmulticast mode [ 217.134486][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 217.144477][ T9256] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1548'. [ 217.167263][ T9252] tipc: Enabling of bearer rejected, failed to enable media [ 217.177745][ T9262] tipc: Enabling of bearer rejected, already enabled [ 217.446046][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.453496][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.457502][ T9277] SELinux: Context @ is not valid (left unmapped). [ 217.460887][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.474925][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.482313][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.489787][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.497196][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.504598][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.512034][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.519489][ T6384] hid-generic 0000:00E2:0000.000F: unknown main item tag 0x0 [ 217.613937][ T6384] hid-generic 0000:00E2:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 217.646938][ T9280] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1555'. [ 217.812314][ T9272] dummy0: entered allmulticast mode [ 217.819855][ T9271] dummy0: left allmulticast mode [ 218.011636][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 218.091405][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 218.091420][ T29] audit: type=1326 audit(215.108:18079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.173138][ T9295] __vm_enough_memory: pid: 9295, comm: syz.5.1559, bytes: 21200463519744 not enough memory for the allocation [ 218.400224][ T29] audit: type=1326 audit(215.136:18080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.423132][ T29] audit: type=1326 audit(215.136:18081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.434349][ T9300] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 218.446135][ T29] audit: type=1326 audit(215.145:18083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.453963][ T9300] netlink: 'syz.0.1561': attribute type 2 has an invalid length. [ 218.459749][ T9301] random: crng reseeded on system resumption [ 218.476963][ T29] audit: type=1326 audit(215.145:18084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.476993][ T29] audit: type=1326 audit(215.145:18085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.477052][ T29] audit: type=1326 audit(215.145:18086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.477073][ T29] audit: type=1326 audit(215.145:18087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.477099][ T29] audit: type=1326 audit(215.154:18088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 218.510443][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 218.513794][ T29] audit: type=1326 audit(215.154:18089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb785d5ebe9 code=0x7ffc0000 [ 219.017338][ T9313] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.1563'. [ 219.066459][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 219.266256][ T9328] netlink: 'syz.0.1568': attribute type 4 has an invalid length. [ 219.574331][ T9313] ================================================================== [ 219.582434][ T9313] BUG: KCSAN: data-race in touch_atime / touch_atime [ 219.589120][ T9313] [ 219.591430][ T9313] write to 0xffff88811d806f70 of 4 bytes by task 9309 on cpu 1: [ 219.599050][ T9313] touch_atime+0x1e8/0x340 [ 219.603466][ T9313] shmem_file_splice_read+0x5b1/0x600 [ 219.608835][ T9313] splice_direct_to_actor+0x26f/0x680 [ 219.614196][ T9313] do_splice_direct+0xda/0x150 [ 219.618947][ T9313] do_sendfile+0x380/0x650 [ 219.623362][ T9313] __x64_sys_sendfile64+0x105/0x150 [ 219.628558][ T9313] x64_sys_call+0x2bb0/0x2ff0 [ 219.633223][ T9313] do_syscall_64+0xd2/0x200 [ 219.637730][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.643615][ T9313] [ 219.645924][ T9313] read to 0xffff88811d806f70 of 4 bytes by task 9313 on cpu 0: [ 219.653448][ T9313] touch_atime+0x194/0x340 [ 219.657855][ T9313] shmem_file_splice_read+0x5b1/0x600 [ 219.663227][ T9313] splice_direct_to_actor+0x26f/0x680 [ 219.668583][ T9313] do_splice_direct+0xda/0x150 [ 219.673328][ T9313] do_sendfile+0x380/0x650 [ 219.677742][ T9313] __x64_sys_sendfile64+0x105/0x150 [ 219.682931][ T9313] x64_sys_call+0x2bb0/0x2ff0 [ 219.687594][ T9313] do_syscall_64+0xd2/0x200 [ 219.692082][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.697957][ T9313] [ 219.700260][ T9313] value changed: 0x1bc05f60 -> 0x1c4d360f [ 219.705959][ T9313] [ 219.708294][ T9313] Reported by Kernel Concurrency Sanitizer on: [ 219.714427][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.5.1563 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.725690][ T9313] Tainted: [W]=WARN [ 219.729507][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.739550][ T9313] ==================================================================