last executing test programs: 3m23.519893863s ago: executing program 4 (id=1526): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xd9\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xda\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x10~') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be48381"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00'}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 3m23.414539893s ago: executing program 4 (id=1529): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 3m23.368755728s ago: executing program 4 (id=1532): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 3m23.24559999s ago: executing program 4 (id=1535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000390400"/20, @ANYRES32=r5, @ANYBLOB="0198000000000000300012800b00010067656e65766500002000028005000800010000001400070000000000000000000000000b62000000"], 0x50}}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m23.213597873s ago: executing program 4 (id=1536): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000480)={[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@hash}]}, 0xfb, 0x541, &(0x7f0000001180)="$eJzs3d9uI1cZAPBvJnE22c3WLnBRVqKtaFFSoXWShm0jLvgjIXFVCSjXlJA4UYgTrxKnbKIKpeIBkBACJG7gHokH4KaPgJAq4AUAgSrYwgVChUG2x6mT2InTdeLd+PeTJnPmzIy/czyZ4zkzo5kARtbzETEbEVmWZd+KiGKen+ZDHLaGxnLvP3xrpTEkkWWv/z2JJM9rf9aNfHwrX20yIr7x1YjvJKfj7u4fbC5Xq5WdfHquvpV8kGUHdze2ltcr65XtxcWFV5ZeXbq3ND+QepYi4gtf+ctPftgu5N9mv9+qYEtnPQapVfVC87toG4+IncsINiTjzRq23BtyWQAAOFvjeP9jEfHpiHgpijHWPJoDAAAArpPsi9PxQdK6/gcAAABcT2lETEeSlvP7facjTcvl1j28n4ibabW2W/9sVjw6X1CKQrq2Ua3M5/cOlKKQrH03Oucnjfkv5/fctqcXI+LpiPhxcao5XV6pVVeHc8oDAAAARs6tE/3/fxVb/X8AAADgmikNuwAAAADApdP/BwAAgOvvgv1/bwgAAACAJ8vXXnutMWTt91+vvrm/t1l78+5qZXezvLW3Ul6p7dwvr9dq681n9m2d93nVWu3+52J778FcvbJbn9vdP3hjq7a3XX9j49grsJtuX1alAAAAgGOefu6dPyYRcfj5qTQisqRjXiEiG+tc2IV/uFbSHvlJt339z5dcGOBKjXXLnLj6cgBXzyE9jK7CsAsADN157cCpm3fafnsq50Yf4Yr9lAkAABismU8eXf9vDtFx+j8ZasmAy5Zf/0/s6zB6ul7/B0aC638wugpnHQHoFMC1l/axq1/g+n+HzlsBsuwoqV0BAIChmG4OSVrO+wHTcZiWy61n85WikKxtVCvzEfFURPyhWLjRmF5orpk4jAcAAAAAAAAAAAAAAAAAAAAAAACAPmVZElkPU0fLAAAAAE+yiPSvSf5Krpnii9Mnzw9MJP8uNscR8b2fv/7TB8v1+s5CI/8fR/n1n+X5L593tuG9SziDAQAAAJzU7qe3+/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEjvP3xrpT1cZdz3vhwRpW7xx2OyOZ6MQkTc/GcS4x3rJRExNoD4h29HxDPd4ieNYkUpL8VT0Rl/OtKImLrC+Cfr34h/awDxYZS902h/vtRt/0vj+eb41P53O5qtUxzbHz+q3u1fetT+jfVo/253+8D0dNadd3891zP+2xF3xru3P+34SY/4L/RZx29/8+Cg17zslxEzXX9/kmOx5pLx+3O7+wd3N7aW1yvrle3FxYVXll5durc0P7e2Ua3kf7vG+NGnfvO/s+p/s0f80jn1f7HP+v/33QcPP95KFk7MKsQvsmz2he7b/5ke8du/fZ/JN3djeqadPmylOz37q989+9wZ9V/tUf/ztv9sn/V/6es/+FOfiwIAV2B3/2BzuVqt7FwskUQcPsLqQ0j8/k5E91ntI+Zhl/DDxGQ8FsX4MDHxaP8t+1PxKNF7bbgeieU4a5n2QeylfmP/yVpaoR6HLXjxRLuFGMRZNgAA4HHQ2cs6w8SVFQgAAAAAAAAAAAAAAAAAAABG0HmPARvEU/FOxjwcTlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM70/wAAAP//GY+/wg==") bpf$ITER_CREATE(0xb, 0x0, 0x0) getgroups(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x31, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x4008015) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000440)=0x7, 0x0, 0x4) getpeername$qrtr(r3, &(0x7f00000001c0), &(0x7f0000000340)=0xc) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x5, &(0x7f0000000240)=""/1, &(0x7f00000003c0)=0x1) clock_gettime(0x6, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 3m22.318877521s ago: executing program 4 (id=1559): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x48f2, 0x10000, 0x7fff, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3m7.236729903s ago: executing program 32 (id=1559): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x48f2, 0x10000, 0x7fff, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 50.14545428s ago: executing program 0 (id=3951): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62060280) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 49.94765845s ago: executing program 0 (id=3961): socket(0x10, 0x2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6871cddc5ee58a1d, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRESHEX], &(0x7f0000019300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff00004485"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) futex(&(0x7f000000cffc)=0x2, 0x7, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019380)={&(0x7f0000019400)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000", @ANYRES64=r4], 0xb4}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800002, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000340)=0xa, 0x4) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000195c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x7}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[@ANYBLOB="0e000000cc000000ff0f00000400000000400000", @ANYRES32=0x1, @ANYBLOB="0900000000000000000000000000000000000000301b2ebad170398a4bfb0bf9b734389be409335dc68882752728cf6ca703000000000000005885755c4046b2a5640553cbe4e6610c397bf82d75ec48c8bdf6e4a89106dc35a8281bccfaa7047ee8061fd4511bed8610ad54750fa00300000000000000a2aeba3980678e9b518f968a332a0291876173c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) getsockopt$inet6_mreq(r10, 0x29, 0x0, &(0x7f00000193c0)={@private1}, &(0x7f0000019340)=0x14) 48.21737974s ago: executing program 2 (id=3988): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}], 0x2}, 0x20000044) 48.193652392s ago: executing program 0 (id=3989): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000001c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r0, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 48.180141083s ago: executing program 1 (id=3990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c9000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000000)) 48.10948313s ago: executing program 1 (id=3993): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000070000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 48.10912999s ago: executing program 1 (id=3994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 48.052054656s ago: executing program 0 (id=3997): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000d40)={0x7fff, 0x3, 0xb985, 0x0, 0x2000000000000b, 0x7ffd, 0x4, 0x7, 0xc6}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f0000003bc0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f773ca9f2fdc865df02384cd3bd200c7b482c96687ef6f6bccd3da27505661055d253f261527f1d13b030580f3dc6228790193ee4b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889f", 0xb0}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd88335663000000000000000000", 0x59}], 0x7, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f00000000c0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a", 0x3c}, {&(0x7f0000004040)="ae528d0c38de4bfae46c16c1be56dbfc2905a0879fe655b8accc30c56a21432cad6f0ba64996d025dc00ce264cb2d630393b95d43ac7c6747d89d45506795ff19b055e5c585964ca2e5c9eca44bf362065830afe3634218baa45eb06ab13f0b94bedabeebf9e000457f1507af74f0070fb5cfeac92833079460fbef76a1d7788fc8233107a680dc8c757dc4c36a17b", 0x8f}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001) getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) setgroups(0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, r4, 0xffffffffffffffff]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, 0x0, 0xc00) 48.037630377s ago: executing program 1 (id=3998): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) 47.977698613s ago: executing program 0 (id=3999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xe, 0x0, 0x7, 0x3, @dev, @private0, 0x0, 0x1, 0xfffffffe}}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r5, 0x1}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) socket$inet6(0xa, 0x802, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002df02ed0f39a5c34153579efb02c17d7a4539e9ed30f657d843928825b24875c2dac9cfbebfc153f25eb5df6e8363fdd97cb59e4f264fdf89f90fafe7cb60c4dc9e68d8b13255f30e41d393dca3d0a7999", @ANYRES32=r8, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="05000000030000000500"/28], 0x50) open(&(0x7f0000000240)='\x00', 0x80, 0x0) 47.977374343s ago: executing program 2 (id=4000): socket(0x10, 0x2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6871cddc5ee58a1d, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRESHEX], &(0x7f0000019300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff00004485"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) futex(&(0x7f000000cffc)=0x2, 0x7, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019380)={&(0x7f0000019400)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff03000500000000", @ANYRES64=r4], 0xb4}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800002, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000340)=0xa, 0x4) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000195c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x7}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[@ANYBLOB="0e000000cc000000ff0f00000400000000400000", @ANYRES32=0x1, @ANYBLOB="0900000000000000000000000000000000000000301b2ebad170398a4bfb0bf9b734389be409335dc68882752728cf6ca703000000000000005885755c4046b2a5640553cbe4e6610c397bf82d75ec48c8bdf6e4a89106dc35a8281bccfaa7047ee8061fd4511bed8610ad54750fa00300000000000000a2aeba3980678e9b518f968a332a0291876173c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) getsockopt$inet6_mreq(r10, 0x29, 0x0, &(0x7f00000193c0)={@private1}, &(0x7f0000019340)=0x14) 47.542735156s ago: executing program 5 (id=4001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) unshare(0x28000600) fcntl$getownex(r1, 0x10, &(0x7f0000000800)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/ip_mr_vif\x00') r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x40, 0x0, 0x0, 0x0, r3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0x1000004803}, 0x18) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x6}}, 0xa, 0x2, 0x8, 0x8}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000580)={r9, 0x3}, &(0x7f00000007c0)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) 47.434173727s ago: executing program 5 (id=4002): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 47.285236711s ago: executing program 3 (id=4003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c9000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000000)) 47.244000125s ago: executing program 3 (id=4004): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) (fail_nth: 1) 47.176347292s ago: executing program 5 (id=4005): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000700000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 47.072862912s ago: executing program 5 (id=4006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000000840)="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", 0xa98}], 0x3}, 0x20000044) 46.98798361s ago: executing program 5 (id=4007): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000001c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r0, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 46.894074849s ago: executing program 0 (id=4008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x5, &(0x7f0000000100)=0x100, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_migrate_pages\x00', r3, 0x0, 0x7}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) shutdown(r0, 0x1) 46.879693631s ago: executing program 5 (id=4009): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x5}) 46.822023217s ago: executing program 2 (id=4010): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x535, 0x1a2b, {{0x2e, 0x4, 0x2, 0x7, 0xb8, 0x66, 0x0, 0x5, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x14, 0x96, 0x1, 0x4, [{@multicast2, 0x7}, {@loopback, 0x200}]}, @timestamp_addr={0x44, 0x3c, 0x74, 0x1, 0x2, [{@remote, 0xfadf}, {@multicast1, 0x40}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x101}, {@rand_addr=0x64010100, 0x4000000}, {@empty}, {@private=0xa010101, 0xffffda50}, {@empty, 0x8}]}, @timestamp={0x44, 0x18, 0x63, 0x0, 0x2, [0x7f, 0xdd9, 0x6, 0x3, 0x400]}, @timestamp_addr={0x44, 0x24, 0xc6, 0x1, 0x9, [{@multicast2, 0x49}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff8}, {@private=0xa010102, 0xc}, {@multicast1, 0xffffff72}]}, @rr={0x7, 0x17, 0xa, [@private=0xa010100, @empty, @remote, @remote, @rand_addr=0x64010100]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@deltclass={0x4c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xd}, {0xb, 0xffe0}, {0x1, 0x8}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x4c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0x2f}, @initr0]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 46.643645524s ago: executing program 2 (id=4011): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x0, 0x0) finit_module(r0, 0x0, 0x7) (fail_nth: 5) 46.354123183s ago: executing program 3 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 46.351884033s ago: executing program 2 (id=4013): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x1de0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRESOCT=0x0, @ANYRES64=r4, @ANYRES8, @ANYRES32=r1], 0x48}}, 0x40a5) r5 = dup2(r0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, 0x0, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f00000040c0), 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190da) ioctl$TIOCMGET(r5, 0x5415, 0x0) 46.334469955s ago: executing program 3 (id=4014): io_uring_setup(0x68af, &(0x7f0000000740)={0x0, 0x0, 0x1880, 0x1}) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 46.236273144s ago: executing program 3 (id=4015): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x133) fchmodat(r0, &(0x7f00000002c0)='./bus\x00', 0x31) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) set_mempolicy(0x4005, 0x0, 0x4) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) 46.190306389s ago: executing program 2 (id=4016): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000706050000000000000000000100070000006e656cfc917a47eb8b8623e92c4bac35a7b93b2bbdc6e8475c8c370631fa4318412fe383a95cb04607ab6fa72181e3a4b6a97bfd90c825c10feae75961da66af770b2e4c63325505c76d17a77fe0386ebb472cdb7e6c76486be35a8301ddf45f49e2c9ecfc6c15a2d03738fbc98b52acec8bf8b06b95e1294a29caee359e438ba7cdb64ddc436eeceb1e2a9eb3021f1f4b1ef2dec312fe4baf84848d8b966aa788a2123acb1fbbf393eb3da69873a8416604bc91196a085792a0e81129ab41943ba3a5986757775f25c1dd0f99"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r0, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r9 = dup3(r5, r0, 0x80000) read$watch_queue(r9, &(0x7f0000001d40)=""/4095, 0xfff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40088, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2, @perf_config_ext={0x7f, 0x100000001}, 0x0, 0xfffffffffffffffc, 0x37a, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r9, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) readv(r10, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000440)=""/73, 0x49}], 0x2) 46.140695453s ago: executing program 1 (id=4017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000000840)="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", 0xa98}], 0x3}, 0x20000044) 46.140358664s ago: executing program 1 (id=4018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3e, 0x2, 0x3, 0x80000001}, {0x81, 0x32, 0x24, 0x7}, {0x7, 0xf, 0x4, 0x6c8}, {0x1, 0xef, 0x4, 0x2}]}) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) 46.105593767s ago: executing program 3 (id=4019): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000001c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r0, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 7.838990659s ago: executing program 33 (id=4008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x5, &(0x7f0000000100)=0x100, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_migrate_pages\x00', r3, 0x0, 0x7}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) shutdown(r0, 0x1) 7.798281893s ago: executing program 34 (id=4018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3e, 0x2, 0x3, 0x80000001}, {0x81, 0x32, 0x24, 0x7}, {0x7, 0xf, 0x4, 0x6c8}, {0x1, 0xef, 0x4, 0x2}]}) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) 7.753843008s ago: executing program 35 (id=4016): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000706050000000000000000000100070000006e656cfc917a47eb8b8623e92c4bac35a7b93b2bbdc6e8475c8c370631fa4318412fe383a95cb04607ab6fa72181e3a4b6a97bfd90c825c10feae75961da66af770b2e4c63325505c76d17a77fe0386ebb472cdb7e6c76486be35a8301ddf45f49e2c9ecfc6c15a2d03738fbc98b52acec8bf8b06b95e1294a29caee359e438ba7cdb64ddc436eeceb1e2a9eb3021f1f4b1ef2dec312fe4baf84848d8b966aa788a2123acb1fbbf393eb3da69873a8416604bc91196a085792a0e81129ab41943ba3a5986757775f25c1dd0f99"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r0, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r9 = dup3(r5, r0, 0x80000) read$watch_queue(r9, &(0x7f0000001d40)=""/4095, 0xfff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40088, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2, @perf_config_ext={0x7f, 0x100000001}, 0x0, 0xfffffffffffffffc, 0x37a, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r9, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) readv(r10, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000440)=""/73, 0x49}], 0x2) 7.716196831s ago: executing program 36 (id=4019): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000001c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r0, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 7.653453697s ago: executing program 37 (id=4009): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x5}) 568.598904ms ago: executing program 7 (id=4021): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {0x0}], 0x3}, 0x20000044) 533.940637ms ago: executing program 8 (id=4022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x2}) select(0x40, &(0x7f0000000080)={0x3, 0x8, 0x2, 0x933f, 0x0, 0x36, 0x800, 0x8}, &(0x7f00000000c0)={0xb3, 0x7fffffffffffffff, 0x97b, 0xfffffffffffffffd, 0x800, 0x5, 0x8fb, 0x1ff}, &(0x7f0000000100)={0x7f, 0x7, 0x2, 0xa1, 0x0, 0x9, 0x7a6, 0x2}, &(0x7f0000000140)={0x0, 0x2710}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) readlinkat(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/140, 0x8c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000580)=0xfffffffd, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x2}) (async) select(0x40, &(0x7f0000000080)={0x3, 0x8, 0x2, 0x933f, 0x0, 0x36, 0x800, 0x8}, &(0x7f00000000c0)={0xb3, 0x7fffffffffffffff, 0x97b, 0xfffffffffffffffd, 0x800, 0x5, 0x8fb, 0x1ff}, &(0x7f0000000100)={0x7f, 0x7, 0x2, 0xa1, 0x0, 0x9, 0x7a6, 0x2}, &(0x7f0000000140)={0x0, 0x2710}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) readlinkat(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/140, 0x8c) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000580)=0xfffffffd, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") (async) sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) (async) 495.497781ms ago: executing program 6 (id=4020): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0x61, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) readahead(0xffffffffffffffff, 0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a240000000c0a010100000000000000000a0000060900010073797a310000000004000380140000001100010000000000000000aec18f4c0a"], 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000000320207b1af8fe00000000bfa1000e00b702829c08040000b703000007000000850000081100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x10001, 0x80302) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f0000000600)=""/251) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r5, 0x0, 0xfffffffff7ffffdc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x627, 0x200004c1, 0x43, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000ebdefff5000000e1250000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r14 = dup(r13) ioctl$GIO_UNISCRNMAP(r14, 0x43403d0e, 0x0) 381.767362ms ago: executing program 7 (id=4025): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x688200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x100fb) getdents64(r1, &(0x7f0000000140)=""/219, 0xdb) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r3 = syz_io_uring_setup(0x2515, &(0x7f0000000280)={0x0, 0x100002, 0x1}, &(0x7f0000000000), &(0x7f0000000140)) unshare(0x22020600) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r3, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0xec07}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0) unshare(0x22020400) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000002940), &(0x7f0000000000)=0x4) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/214, 0xd6) 212.228969ms ago: executing program 7 (id=4026): io_uring_setup(0x68af, &(0x7f0000000740)={0x0, 0x0, 0x1880, 0x1}) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 204.699329ms ago: executing program 8 (id=4027): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) 113.931299ms ago: executing program 8 (id=4028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) move_pages(r1, 0x3, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) timer_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796100000000000000007e000010"], 0x14}}, 0x4000054) 18.815988ms ago: executing program 8 (id=4029): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000000840)="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", 0xa98}], 0x3}, 0x20000044) 18.034188ms ago: executing program 7 (id=4030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0x3, 0x0, &(0x7f0000000240)) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000003000)=@filename='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000840)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000089000a00000008000000e00000020c00088008000c00000000000000", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000740)) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@uid_gt={'uid>', r4}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") statfs(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)=""/205) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a000000080000000000000030b4"], 0x48) r7 = fsmount(r6, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r7, &(0x7f0000000080)='./file0\x00') readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/196, 0xc4) 0s ago: executing program 9 (id=4023): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) kernel console output (not intermixed with test programs): t(2000000009.460:22421): avc: denied { mounton } for pid=12336 comm="syz.5.3073" path="/244/file0" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 222.181890][ T336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.212614][T12337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.223144][ T29] audit: type=1400 audit(2000000009.520:22422): avc: denied { mounton } for pid=12192 comm="syz-executor" path="/root/syzkaller.4PjvL9/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 222.228230][ T336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.250398][ T29] audit: type=1400 audit(2000000009.520:22423): avc: denied { mount } for pid=12192 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.250438][ T29] audit: type=1400 audit(2000000009.520:22424): avc: denied { mount } for pid=12192 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 222.250474][ T29] audit: type=1400 audit(2000000009.520:22425): avc: denied { mounton } for pid=12192 comm="syz-executor" path="/root/syzkaller.4PjvL9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 222.268320][T12337] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.281714][ T29] audit: type=1400 audit(2000000009.520:22426): avc: denied { mounton } for pid=12192 comm="syz-executor" path="/root/syzkaller.4PjvL9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 222.369901][ T29] audit: type=1400 audit(2000000009.520:22427): avc: denied { unmount } for pid=12192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 222.390400][ T29] audit: type=1400 audit(2000000009.530:22428): avc: denied { mounton } for pid=12192 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 222.413623][ T29] audit: type=1400 audit(2000000009.540:22429): avc: denied { mount } for pid=12192 comm="syz-executor" name="/" dev="gadgetfs" ino=4047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 222.448494][ T8589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.459732][ T29] audit: type=1400 audit(2000000009.570:22430): avc: denied { mount } for pid=12336 comm="syz.5.3073" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 222.491812][T12342] macvtap0: refused to change device tx_queue_len [ 222.575392][T12347] __nla_validate_parse: 4 callbacks suppressed [ 222.575408][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3028'. [ 223.051537][T12360] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 223.438091][T12357] lo speed is unknown, defaulting to 1000 [ 223.515776][T12372] macvtap0: refused to change device tx_queue_len [ 223.645708][T12357] lo speed is unknown, defaulting to 1000 [ 223.658069][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 224.079181][T12410] macvtap0: refused to change device tx_queue_len [ 224.207981][T12376] lo speed is unknown, defaulting to 1000 [ 224.299465][T12426] macvtap0: refused to change device tx_queue_len [ 224.353862][ T1767] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.391516][T12376] lo speed is unknown, defaulting to 1000 [ 224.447599][T12434] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 224.457698][ T1767] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.472753][T12434] SELinux: failed to load policy [ 224.545777][ T1767] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.598951][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 224.607978][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 224.628318][ T1767] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.741763][T12376] chnl_net:caif_netlink_parms(): no params data found [ 224.878784][ T1767] dummy0: left allmulticast mode [ 224.893862][T12443] netlink: 'syz.0.3112': attribute type 13 has an invalid length. [ 224.894583][ T1767] dummy0: left promiscuous mode [ 224.901745][T12443] netlink: 'syz.0.3112': attribute type 17 has an invalid length. [ 224.906944][ T1767] bridge0: port 3(dummy0) entered disabled state [ 224.967309][ T1767] bridge_slave_1: left allmulticast mode [ 224.973101][ T1767] bridge_slave_1: left promiscuous mode [ 224.978958][ T1767] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.007287][ T1767] bridge_slave_0: left allmulticast mode [ 225.013047][ T1767] bridge_slave_0: left promiscuous mode [ 225.018768][ T1767] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.048742][ T1767] tipc: Resetting bearer [ 225.194587][ T1767] tipc: Disabling bearer [ 225.275091][ T1767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.306357][ T1767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.336695][ T1767] bond0 (unregistering): Released all slaves [ 225.358522][ T1767] bond1 (unregistering): Released all slaves [ 225.399618][T12443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.415494][T12447] netlink: 'syz.3.3111': attribute type 4 has an invalid length. [ 225.450201][ T1767] tipc: Left network mode [ 225.550302][T12376] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.557459][T12376] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.621244][T12376] bridge_slave_0: entered allmulticast mode [ 225.633567][T12376] bridge_slave_0: entered promiscuous mode [ 225.668520][ T1767] veth1_macvtap: left promiscuous mode [ 225.693066][ T1767] veth0_macvtap: left promiscuous mode [ 225.703723][ T1767] veth1_vlan: left promiscuous mode [ 225.709325][T12477] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 225.732576][ T1767] veth0_vlan: left promiscuous mode [ 225.758134][T12477] SELinux: failed to load policy [ 225.820170][T12482] SELinux: failed to load policy [ 225.883275][ T1767] team0 (unregistering): Port device team_slave_1 removed [ 225.901876][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 225.976532][T12376] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.983777][T12376] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.012720][T12376] bridge_slave_1: entered allmulticast mode [ 226.019437][T12376] bridge_slave_1: entered promiscuous mode [ 226.113943][T12478] lo speed is unknown, defaulting to 1000 [ 226.126048][T12376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.183054][T12376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.276439][T12376] team0: Port device team_slave_0 added [ 226.285879][T12376] team0: Port device team_slave_1 added [ 226.355219][T12376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.362383][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.388514][T12376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.402332][T12376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.409445][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.435502][T12376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.483480][T12376] hsr_slave_0: entered promiscuous mode [ 226.530278][T12376] hsr_slave_1: entered promiscuous mode [ 226.540230][T12376] debugfs: 'hsr0' already exists in 'hsr' [ 226.546074][T12376] Cannot create hsr debugfs directory [ 226.551588][T12478] lo speed is unknown, defaulting to 1000 [ 226.846620][T12545] lo speed is unknown, defaulting to 1000 [ 226.922542][T12551] lo speed is unknown, defaulting to 1000 [ 227.041495][T12376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.069272][T12376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.089758][T12567] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 227.099465][T12567] SELinux: failed to load policy [ 227.110681][T12376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.160142][T12376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.223767][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 227.233061][T12545] lo speed is unknown, defaulting to 1000 [ 227.373885][T12593] netlink: 'syz.2.3135': attribute type 39 has an invalid length. [ 227.401712][T12376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.417106][T12591] SELinux: failed to load policy [ 227.453458][T12551] lo speed is unknown, defaulting to 1000 [ 227.460115][T12596] macvtap0: refused to change device tx_queue_len [ 227.474840][T12376] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.498273][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.505422][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.541147][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.548388][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.597541][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 227.597559][ T29] audit: type=1107 audit(2000000014.910:22816): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ô' [ 227.790692][T12376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.944886][T12376] veth0_vlan: entered promiscuous mode [ 227.961672][T12376] veth1_vlan: entered promiscuous mode [ 227.995332][T12376] veth0_macvtap: entered promiscuous mode [ 228.011288][T12376] veth1_macvtap: entered promiscuous mode [ 228.052244][T12376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.068186][T12376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.081659][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.112208][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.139003][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.171749][T12660] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 228.181324][ T29] audit: type=1326 audit(2000000015.490:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.204996][ T29] audit: type=1326 audit(2000000015.490:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.213834][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.228527][ T29] audit: type=1326 audit(2000000015.490:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.260828][ T29] audit: type=1326 audit(2000000015.490:22820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.284560][ T29] audit: type=1326 audit(2000000015.490:22821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.308198][ T29] audit: type=1326 audit(2000000015.490:22822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.331983][ T29] audit: type=1326 audit(2000000015.490:22823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.355701][ T29] audit: type=1326 audit(2000000015.490:22824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.379260][ T29] audit: type=1326 audit(2000000015.490:22825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 228.636489][T12667] netlink: 'syz.2.3141': attribute type 4 has an invalid length. [ 228.745271][T12691] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 228.774546][T12691] SELinux: failed to load policy [ 228.789642][T12698] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 228.801519][T12699] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 228.817225][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.885936][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.975155][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'. [ 228.986519][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.039812][T12692] lo speed is unknown, defaulting to 1000 [ 229.096241][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.119278][T12726] netlink: 'syz.2.3162': attribute type 4 has an invalid length. [ 229.384645][ T57] bond0 (unregistering): Released all slaves [ 229.523563][T12692] lo speed is unknown, defaulting to 1000 [ 229.733945][ T57] hsr_slave_0: left promiscuous mode [ 229.764406][ T57] hsr_slave_1: left promiscuous mode [ 229.790474][T12759] SELinux: failed to load policy [ 229.818669][ T57] veth1_macvtap: left promiscuous mode [ 229.853474][ T57] veth0_macvtap: left promiscuous mode [ 229.859065][ T57] veth1_vlan: left promiscuous mode [ 229.880700][T12776] netlink: 'syz.3.3169': attribute type 13 has an invalid length. [ 229.888626][T12776] netlink: 'syz.3.3169': attribute type 17 has an invalid length. [ 229.891785][ T57] veth0_vlan: left promiscuous mode [ 230.033320][T12784] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 230.053544][T12784] SELinux: failed to load policy [ 230.162745][ T1767] smc: removing ib device syz0 [ 230.179085][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 230.332365][T12776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.351546][T12692] chnl_net:caif_netlink_parms(): no params data found [ 230.700102][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.707317][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.765445][T12692] bridge_slave_0: entered allmulticast mode [ 230.791285][T12692] bridge_slave_0: entered promiscuous mode [ 230.806576][T12692] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.813736][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.831516][T12692] bridge_slave_1: entered allmulticast mode [ 230.844549][T12692] bridge_slave_1: entered promiscuous mode [ 230.855137][T12824] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 230.885223][T12817] SELinux: failed to load policy [ 230.887366][T12692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.901700][ T57] IPVS: stop unused estimator thread 0... [ 230.934137][T12692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.003702][T12833] macvtap0: refused to change device tx_queue_len [ 231.023197][T12692] team0: Port device team_slave_0 added [ 231.030027][T12692] team0: Port device team_slave_1 added [ 231.057780][T12838] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 231.082575][T12838] SELinux: failed to load policy [ 231.089001][T12692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.096038][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.122098][T12692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.196580][T12692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.201888][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3185'. [ 231.203626][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.238416][T12692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.373118][T12692] hsr_slave_0: entered promiscuous mode [ 231.392453][T12692] hsr_slave_1: entered promiscuous mode [ 231.402380][T12692] debugfs: 'hsr0' already exists in 'hsr' [ 231.408192][T12692] Cannot create hsr debugfs directory [ 231.954755][T12692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.983147][T12692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.005892][T12692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.027857][T12692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.110830][T12883] SELinux: failed to load policy [ 232.164705][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.385207][T12692] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.432040][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.439301][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.465186][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.472307][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.650546][T12692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.807224][T12692] veth0_vlan: entered promiscuous mode [ 232.836900][T12692] veth1_vlan: entered promiscuous mode [ 232.868579][T12692] veth0_macvtap: entered promiscuous mode [ 232.885275][T12692] veth1_macvtap: entered promiscuous mode [ 232.909095][T12692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.935356][T12692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.965098][ T1767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.991302][ T1767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.009519][ T1767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.034012][ T1767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.151279][T12977] block device autoloading is deprecated and will be removed. [ 233.278492][T12983] SELinux: failed to load policy [ 233.351264][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 233.351279][ T29] audit: type=1400 audit(2000000020.660:22880): avc: denied { create } for pid=12997 comm="syz.2.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.391659][ T29] audit: type=1400 audit(2000000020.700:22881): avc: denied { write } for pid=12997 comm="syz.2.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.429371][ T29] audit: type=1326 audit(2000000020.730:22882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.453212][ T29] audit: type=1326 audit(2000000020.730:22883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.476830][ T29] audit: type=1326 audit(2000000020.730:22884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.500504][ T29] audit: type=1326 audit(2000000020.730:22885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.524125][ T29] audit: type=1326 audit(2000000020.730:22886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.547795][ T29] audit: type=1326 audit(2000000020.730:22887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.571473][ T29] audit: type=1326 audit(2000000020.730:22888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.595101][ T29] audit: type=1326 audit(2000000020.730:22889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b0acefc9 code=0x7ffc0000 [ 233.603809][T13002] vlan2: entered allmulticast mode [ 234.034907][T13016] lo speed is unknown, defaulting to 1000 [ 234.127163][T13016] lo speed is unknown, defaulting to 1000 [ 234.317070][T13027] netlink: 'syz.3.3218': attribute type 13 has an invalid length. [ 234.324995][T13027] netlink: 'syz.3.3218': attribute type 17 has an invalid length. [ 234.359016][T13027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.470390][T13036] block device autoloading is deprecated and will be removed. [ 234.627907][T13045] lo speed is unknown, defaulting to 1000 [ 234.736944][T13045] lo speed is unknown, defaulting to 1000 [ 234.970455][T13050] vlan2: entered allmulticast mode [ 235.034210][T13056] lo speed is unknown, defaulting to 1000 [ 235.104812][T13054] SELinux: failed to load policy [ 235.202919][T13056] lo speed is unknown, defaulting to 1000 [ 235.295861][T13077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.305355][T13077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.401789][T13080] macvtap0: refused to change device tx_queue_len [ 235.982650][T13096] SELinux: failed to load policy [ 236.033641][T13101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3245'. [ 236.072904][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 236.180539][T13110] macvtap0: refused to change device tx_queue_len [ 236.269584][T13113] lo speed is unknown, defaulting to 1000 [ 236.291706][T13107] netlink: 'syz.5.3248': attribute type 4 has an invalid length. [ 236.333091][T13113] lo speed is unknown, defaulting to 1000 [ 236.494170][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.523055][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.717455][T13141] lo speed is unknown, defaulting to 1000 [ 236.851316][T13141] lo speed is unknown, defaulting to 1000 [ 236.855451][T13140] lo speed is unknown, defaulting to 1000 [ 236.954691][T13140] lo speed is unknown, defaulting to 1000 [ 237.050704][T13146] block device autoloading is deprecated and will be removed. [ 237.220761][T13152] lo speed is unknown, defaulting to 1000 [ 237.303938][T13152] lo speed is unknown, defaulting to 1000 [ 237.319765][T13149] netlink: 'syz.2.3262': attribute type 4 has an invalid length. [ 237.435712][T13162] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 237.662764][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.706023][T13174] SELinux: failed to load policy [ 237.712689][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.886563][T13189] netlink: 'syz.2.3275': attribute type 4 has an invalid length. [ 238.186417][T13203] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 238.353761][T13212] lo speed is unknown, defaulting to 1000 [ 238.452142][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 238.452159][ T29] audit: type=1326 audit(2000000025.760:23065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.484201][T13212] lo speed is unknown, defaulting to 1000 [ 238.502726][T13216] lo speed is unknown, defaulting to 1000 [ 238.543513][ T29] audit: type=1326 audit(2000000025.800:23066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.567287][ T29] audit: type=1326 audit(2000000025.800:23067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.590979][ T29] audit: type=1326 audit(2000000025.800:23068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.614950][ T29] audit: type=1326 audit(2000000025.810:23069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.639151][ T29] audit: type=1326 audit(2000000025.810:23070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.663219][ T29] audit: type=1326 audit(2000000025.810:23071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.687574][ T29] audit: type=1326 audit(2000000025.810:23072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.711209][ T29] audit: type=1326 audit(2000000025.810:23073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.735505][ T29] audit: type=1326 audit(2000000025.810:23074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 238.759371][T13226] macvtap0: refused to change device tx_queue_len [ 238.765949][T13216] lo speed is unknown, defaulting to 1000 [ 238.840239][T13233] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 238.854811][T13235] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 238.865190][T13235] SELinux: failed to load policy [ 238.985931][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3292'. [ 239.009535][T13242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.020189][T13242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.712119][T13272] netlink: 'syz.0.3306': attribute type 13 has an invalid length. [ 239.720133][T13272] netlink: 'syz.0.3306': attribute type 17 has an invalid length. [ 239.786724][T13272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.126575][T13287] lo speed is unknown, defaulting to 1000 [ 240.244767][T13287] lo speed is unknown, defaulting to 1000 [ 240.385571][T13300] lo speed is unknown, defaulting to 1000 [ 240.490792][T13302] lo speed is unknown, defaulting to 1000 [ 240.636333][T13315] SELinux: failed to load policy [ 240.643963][T13302] lo speed is unknown, defaulting to 1000 [ 240.708231][T13300] lo speed is unknown, defaulting to 1000 [ 241.028113][T13343] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 241.039061][T13343] SELinux: failed to load policy [ 241.242340][T13347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3333'. [ 241.463190][T13354] lo speed is unknown, defaulting to 1000 [ 241.626190][T13367] lo speed is unknown, defaulting to 1000 [ 241.634632][T13354] lo speed is unknown, defaulting to 1000 [ 241.702737][T13379] SELinux: failed to load policy [ 241.734296][T13383] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 241.754903][T13367] lo speed is unknown, defaulting to 1000 [ 241.762171][T13383] SELinux: failed to load policy [ 241.946793][T13391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3346'. [ 242.307714][T13412] SELinux: failed to load policy [ 242.319000][T13419] lo speed is unknown, defaulting to 1000 [ 242.422789][T13419] lo speed is unknown, defaulting to 1000 [ 242.424040][T13424] lo speed is unknown, defaulting to 1000 [ 242.501382][T13424] lo speed is unknown, defaulting to 1000 [ 242.635570][T13438] netlink: 'syz.3.3366': attribute type 13 has an invalid length. [ 242.643561][T13438] netlink: 'syz.3.3366': attribute type 17 has an invalid length. [ 242.664111][T13440] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 242.680267][T13438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.699043][T13440] SELinux: failed to load policy [ 242.813375][T13447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3367'. [ 243.104633][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.129546][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.215857][T13463] lo speed is unknown, defaulting to 1000 [ 243.290588][T13463] lo speed is unknown, defaulting to 1000 [ 243.420012][T13479] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 243.429285][T13479] SELinux: failed to load policy [ 243.612423][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 243.612438][ T29] audit: type=1326 audit(2000000030.920:23210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.623061][T13492] vlan2: entered allmulticast mode [ 243.648227][ T29] audit: type=1326 audit(2000000030.920:23211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.672024][ T29] audit: type=1326 audit(2000000030.930:23212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.695815][ T29] audit: type=1326 audit(2000000030.930:23213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.719526][ T29] audit: type=1326 audit(2000000030.930:23214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.743220][ T29] audit: type=1326 audit(2000000030.930:23215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.766952][ T29] audit: type=1326 audit(2000000030.930:23216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.790545][ T29] audit: type=1326 audit(2000000030.930:23217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.814201][ T29] audit: type=1326 audit(2000000030.930:23218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.823714][T13493] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3385'. [ 243.838105][ T29] audit: type=1326 audit(2000000030.930:23219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 243.862887][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 243.955190][T13499] lo speed is unknown, defaulting to 1000 [ 244.000388][T13499] lo speed is unknown, defaulting to 1000 [ 244.158028][T13511] netlink: 'syz.3.3393': attribute type 13 has an invalid length. [ 244.165981][T13511] netlink: 'syz.3.3393': attribute type 17 has an invalid length. [ 244.186740][T13511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.265559][T13518] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3397'. [ 244.312378][T13521] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 244.322085][T13521] SELinux: failed to load policy [ 244.484262][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.502692][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.526704][T13535] lo speed is unknown, defaulting to 1000 [ 244.586587][T13535] lo speed is unknown, defaulting to 1000 [ 244.657932][T13538] lo speed is unknown, defaulting to 1000 [ 244.685003][T13540] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 244.722755][T13538] lo speed is unknown, defaulting to 1000 [ 244.739866][T13541] lo speed is unknown, defaulting to 1000 [ 244.888686][T13541] lo speed is unknown, defaulting to 1000 [ 245.070558][T13561] lo speed is unknown, defaulting to 1000 [ 245.083488][T13563] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 245.094167][T13563] SELinux: failed to load policy [ 245.115174][T13565] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 245.156110][T13561] lo speed is unknown, defaulting to 1000 [ 245.796052][T13594] lo speed is unknown, defaulting to 1000 [ 245.859502][T13599] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 245.891975][T13594] lo speed is unknown, defaulting to 1000 [ 245.901960][T13597] lo speed is unknown, defaulting to 1000 [ 245.943147][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.972532][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.013239][T13597] lo speed is unknown, defaulting to 1000 [ 246.130911][T13618] FAULT_INJECTION: forcing a failure. [ 246.130911][T13618] name failslab, interval 1, probability 0, space 0, times 0 [ 246.143661][T13618] CPU: 0 UID: 0 PID: 13618 Comm: syz.3.3435 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.143694][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.143772][T13618] Call Trace: [ 246.143783][T13618] [ 246.143790][T13618] __dump_stack+0x1d/0x30 [ 246.143815][T13618] dump_stack_lvl+0xe8/0x140 [ 246.143840][T13618] dump_stack+0x15/0x1b [ 246.143858][T13618] should_fail_ex+0x265/0x280 [ 246.143892][T13618] ? usbdev_open+0x4c/0x450 [ 246.143918][T13618] should_failslab+0x8c/0xb0 [ 246.143953][T13618] __kmalloc_cache_noprof+0x4c/0x4a0 [ 246.144061][T13618] ? avc_has_perm+0xf7/0x180 [ 246.144084][T13618] usbdev_open+0x4c/0x450 [ 246.144193][T13618] chrdev_open+0x2eb/0x3a0 [ 246.144226][T13618] do_dentry_open+0x649/0xa20 [ 246.144247][T13618] ? __pfx_chrdev_open+0x10/0x10 [ 246.144342][T13618] vfs_open+0x37/0x1e0 [ 246.144359][T13618] path_openat+0x1c5e/0x2170 [ 246.144384][T13618] ? filemap_map_pages+0xae0/0xd40 [ 246.144419][T13618] do_filp_open+0x109/0x230 [ 246.144472][T13618] do_sys_openat2+0xa6/0x110 [ 246.144560][T13618] __x64_sys_openat+0xf2/0x120 [ 246.144586][T13618] x64_sys_call+0x2eab/0x3000 [ 246.144614][T13618] do_syscall_64+0xd2/0x200 [ 246.144631][T13618] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 246.144739][T13618] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 246.144772][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.144828][T13618] RIP: 0033:0x7ff2a828d810 [ 246.144847][T13618] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 246.144869][T13618] RSP: 002b:00007ff2a6ceeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 246.144891][T13618] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007ff2a828d810 [ 246.144904][T13618] RDX: 0000000000101301 RSI: 00007ff2a6ceec10 RDI: 00000000ffffff9c [ 246.144915][T13618] RBP: 00007ff2a6ceec10 R08: 0000000000000000 R09: 0000000000000000 [ 246.144927][T13618] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 246.144964][T13618] R13: 00007ff2a84e6038 R14: 00007ff2a84e5fa0 R15: 00007ffc4cdeea08 [ 246.144987][T13618] [ 246.389678][T13618] lo speed is unknown, defaulting to 1000 [ 246.445934][T13618] lo speed is unknown, defaulting to 1000 [ 246.476593][T13626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13626 comm=syz.3.3435 [ 246.493021][T13626] netlink: 'syz.3.3435': attribute type 4 has an invalid length. [ 246.528363][T13628] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3437'. [ 246.538511][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3437'. [ 247.146352][T13657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.164903][T13657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.386239][T13674] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 247.479353][T13676] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 247.499296][T13676] SELinux: failed to load policy [ 247.735724][T13688] €Â: renamed from hsr0 (while UP) [ 247.798311][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 247.836558][T13699] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3462'. [ 247.845771][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3462'. [ 247.858927][T13698] netlink: 'syz.3.3464': attribute type 13 has an invalid length. [ 247.866895][T13698] netlink: 'syz.3.3464': attribute type 17 has an invalid length. [ 247.982941][T13698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.101931][T13705] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 248.248952][T13708] SELinux: failed to load policy [ 248.352068][T13730] netlink: 'syz.0.3477': attribute type 13 has an invalid length. [ 248.360735][T13730] netlink: 'syz.0.3477': attribute type 17 has an invalid length. [ 248.396064][T13730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.548902][T13745] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3482'. [ 248.558134][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 249.144350][T13788] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3502'. [ 249.267304][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 249.267387][ T29] audit: type=1400 audit(2000000036.580:23576): avc: denied { ioctl } for pid=13799 comm="syz.0.3508" path="socket:[42430]" dev="sockfs" ino=42430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.342529][ T29] audit: type=1400 audit(2000000036.610:23577): avc: denied { bind } for pid=13799 comm="syz.0.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.362436][ T29] audit: type=1107 audit(2000000036.640:23578): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ô' [ 249.747743][T13815] lo speed is unknown, defaulting to 1000 [ 249.860446][T13815] lo speed is unknown, defaulting to 1000 [ 249.866518][T13817] lo speed is unknown, defaulting to 1000 [ 250.013637][T13817] lo speed is unknown, defaulting to 1000 [ 250.106215][T13822] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3516'. [ 250.208689][ T29] audit: type=1400 audit(2000000037.520:23579): avc: denied { read } for pid=2990 comm="acpid" name="mouse3" dev="devtmpfs" ino=854 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 250.230727][ T29] audit: type=1400 audit(2000000037.520:23580): avc: denied { open } for pid=2990 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=854 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 250.253559][ T29] audit: type=1400 audit(2000000037.520:23581): avc: denied { ioctl } for pid=2990 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=854 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 250.347363][ T29] audit: type=1400 audit(2000000037.520:23582): avc: denied { bind } for pid=13834 comm="syz.3.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.367993][ T29] audit: type=1400 audit(2000000037.520:23583): avc: denied { setopt } for pid=13834 comm="syz.3.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.388665][ T29] audit: type=1326 audit(2000000037.520:23584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a828efc9 code=0x7ffc0000 [ 250.412624][ T29] audit: type=1326 audit(2000000037.520:23585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7ff2a828efc9 code=0x7ffc0000 [ 250.444739][T13848] netlink: 'syz.3.3528': attribute type 13 has an invalid length. [ 250.452739][T13848] netlink: 'syz.3.3528': attribute type 17 has an invalid length. [ 250.474286][T13848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.806575][T13860] lo speed is unknown, defaulting to 1000 [ 250.864007][T13860] lo speed is unknown, defaulting to 1000 [ 250.915922][T13862] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3531'. [ 251.065456][T13866] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 251.075121][T13866] SELinux: failed to load policy [ 251.320585][T13887] netlink: 'syz.5.3541': attribute type 4 has an invalid length. [ 251.552528][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 251.577309][T13909] veth0_macvtap: left promiscuous mode [ 251.794735][T13923] lo speed is unknown, defaulting to 1000 [ 251.829816][T13920] netlink: 'syz.3.3554': attribute type 4 has an invalid length. [ 251.889369][T13925] lo speed is unknown, defaulting to 1000 [ 251.901077][T13923] lo speed is unknown, defaulting to 1000 [ 252.031053][T13925] lo speed is unknown, defaulting to 1000 [ 252.080881][T13939] lo speed is unknown, defaulting to 1000 [ 252.163005][T13939] lo speed is unknown, defaulting to 1000 [ 252.430548][T13959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3569'. [ 252.439715][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'. [ 252.572106][T13962] netlink: 'syz.5.3570': attribute type 10 has an invalid length. [ 252.582788][T13962] team0: Port device dummy0 added [ 252.591135][T13961] netlink: 'syz.5.3570': attribute type 10 has an invalid length. [ 252.602563][T13961] team0: Port device dummy0 removed [ 252.610780][T13961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.052763][T13984] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3578'. [ 253.321413][T13992] SELinux: failed to load policy [ 253.338575][T13999] lo speed is unknown, defaulting to 1000 [ 253.382433][T14001] netlink: 'syz.1.3584': attribute type 13 has an invalid length. [ 253.390352][T14001] netlink: 'syz.1.3584': attribute type 17 has an invalid length. [ 253.407257][T13999] lo speed is unknown, defaulting to 1000 [ 253.446841][T14001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.806073][T14024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14024 comm=syz.1.3593 [ 253.820509][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3593'. [ 254.035447][T14035] FAULT_INJECTION: forcing a failure. [ 254.035447][T14035] name failslab, interval 1, probability 0, space 0, times 0 [ 254.048144][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.0.3596 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.048176][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.048233][T14035] Call Trace: [ 254.048239][T14035] [ 254.048246][T14035] __dump_stack+0x1d/0x30 [ 254.048269][T14035] dump_stack_lvl+0xe8/0x140 [ 254.048291][T14035] dump_stack+0x15/0x1b [ 254.048313][T14035] should_fail_ex+0x265/0x280 [ 254.048389][T14035] should_failslab+0x8c/0xb0 [ 254.048431][T14035] kmem_cache_alloc_noprof+0x50/0x480 [ 254.048460][T14035] ? security_file_alloc+0x32/0x100 [ 254.048525][T14035] security_file_alloc+0x32/0x100 [ 254.048587][T14035] init_file+0x5c/0x1d0 [ 254.048607][T14035] alloc_empty_file+0x8b/0x200 [ 254.048877][T14035] alloc_file_pseudo+0xc6/0x160 [ 254.048898][T14035] anon_inode_getfd+0xc1/0x150 [ 254.048925][T14035] do_inotify_init+0x220/0x270 [ 254.048959][T14035] __ia32_sys_inotify_init+0x10/0x20 [ 254.049017][T14035] x64_sys_call+0x2e7f/0x3000 [ 254.049042][T14035] do_syscall_64+0xd2/0x200 [ 254.049064][T14035] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.049105][T14035] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 254.049210][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.049232][T14035] RIP: 0033:0x7fbde8c4efc9 [ 254.049247][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.049265][T14035] RSP: 002b:00007fbde76b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 254.049287][T14035] RAX: ffffffffffffffda RBX: 00007fbde8ea5fa0 RCX: 00007fbde8c4efc9 [ 254.049302][T14035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.049364][T14035] RBP: 00007fbde76b7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.049376][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.049390][T14035] R13: 00007fbde8ea6038 R14: 00007fbde8ea5fa0 R15: 00007ffc07ddcb38 [ 254.049413][T14035] [ 254.284447][T14039] netlink: 'syz.3.3597': attribute type 13 has an invalid length. [ 254.292339][T14039] netlink: 'syz.3.3597': attribute type 17 has an invalid length. [ 254.311701][T14039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.539520][ T3424] IPVS: starting estimator thread 0... [ 254.575013][T14060] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 254.632768][T14058] IPVS: using max 2400 ests per chain, 120000 per kthread [ 254.780198][ T29] kauditd_printk_skb: 1749 callbacks suppressed [ 254.780217][ T29] audit: type=1107 audit(2000000042.090:25335): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ô' [ 254.930506][ T29] audit: type=1107 audit(2000000042.240:25336): pid=14080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ô' [ 255.340514][ T29] audit: type=1326 audit(2000000042.650:25337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14098 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.364824][ T29] audit: type=1326 audit(2000000042.650:25338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14098 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.393418][ T29] audit: type=1326 audit(2000000042.650:25339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14098 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.416959][ T29] audit: type=1326 audit(2000000042.700:25340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14098 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.441918][ T29] audit: type=1326 audit(2000000042.700:25341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbde8c81885 code=0x7ffc0000 [ 255.467345][ T29] audit: type=1326 audit(2000000042.710:25342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14098 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.491508][ T29] audit: type=1326 audit(2000000042.710:25343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14098 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.517096][T14101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.526398][T14101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.542504][ T29] audit: type=1326 audit(2000000042.850:25344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 255.886647][T14117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3626'. [ 256.449410][T14131] lo speed is unknown, defaulting to 1000 [ 256.502709][T14134] lo speed is unknown, defaulting to 1000 [ 256.527109][T14131] lo speed is unknown, defaulting to 1000 [ 256.664131][T14134] lo speed is unknown, defaulting to 1000 [ 256.695357][T14139] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 256.705100][T14139] SELinux: failed to load policy [ 256.733622][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3638'. [ 256.923075][T14164] netlink: 'syz.3.3643': attribute type 13 has an invalid length. [ 256.930993][T14164] netlink: 'syz.3.3643': attribute type 17 has an invalid length. [ 256.944617][T14165] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3642'. [ 256.953935][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 257.052941][T14164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.220754][T14149] Set syz1 is full, maxelem 65536 reached [ 257.270835][T14171] veth0_vlan: entered allmulticast mode [ 257.319284][T14175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3649'. [ 257.332749][T14171] veth0_vlan: left promiscuous mode [ 257.340037][T14171] veth0_vlan: entered promiscuous mode [ 257.350014][T14171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3646'. [ 257.395448][T14181] lo speed is unknown, defaulting to 1000 [ 257.491790][T14177] SELinux: failed to load policy [ 257.537936][T14181] lo speed is unknown, defaulting to 1000 [ 257.548643][T14184] lo speed is unknown, defaulting to 1000 [ 257.606827][T14199] $Hÿ: renamed from bond0 (while UP) [ 257.623210][T14199] $Hÿ: entered promiscuous mode [ 257.628365][T14199] bond_slave_0: entered promiscuous mode [ 257.634167][T14199] bond_slave_1: entered promiscuous mode [ 257.699747][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3660'. [ 257.727880][T14210] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 257.859788][T14184] lo speed is unknown, defaulting to 1000 [ 257.859842][T14217] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 257.892619][T14217] SELinux: failed to load policy [ 257.961970][T14215] lo speed is unknown, defaulting to 1000 [ 258.008743][T14223] netlink: 'syz.2.3665': attribute type 13 has an invalid length. [ 258.016794][T14223] netlink: 'syz.2.3665': attribute type 17 has an invalid length. [ 258.025602][T14215] lo speed is unknown, defaulting to 1000 [ 258.122391][T14223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.204803][T14231] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3668'. [ 258.344182][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'. [ 258.373192][T14247] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 258.452290][T14249] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 258.465320][T14249] SELinux: failed to load policy [ 258.641862][T14254] lo speed is unknown, defaulting to 1000 [ 258.797524][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 258.814672][T14274] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 258.815896][T14259] lo speed is unknown, defaulting to 1000 [ 258.845233][T14254] lo speed is unknown, defaulting to 1000 [ 259.100763][T14259] lo speed is unknown, defaulting to 1000 [ 259.137630][T14276] SELinux: failed to load policy [ 259.270718][T14292] FAULT_INJECTION: forcing a failure. [ 259.270718][T14292] name failslab, interval 1, probability 0, space 0, times 0 [ 259.283471][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.3.3692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.283512][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.283527][T14292] Call Trace: [ 259.283536][T14292] [ 259.283546][T14292] __dump_stack+0x1d/0x30 [ 259.283569][T14292] dump_stack_lvl+0xe8/0x140 [ 259.283627][T14292] dump_stack+0x15/0x1b [ 259.283644][T14292] should_fail_ex+0x265/0x280 [ 259.283686][T14292] should_failslab+0x8c/0xb0 [ 259.283723][T14292] __kvmalloc_node_noprof+0x12e/0x670 [ 259.283762][T14292] ? map_get_next_key+0x19c/0x330 [ 259.283788][T14292] map_get_next_key+0x19c/0x330 [ 259.283813][T14292] ? __sys_bpf+0x599/0x7c0 [ 259.283917][T14292] __sys_bpf+0x5a3/0x7c0 [ 259.283951][T14292] __x64_sys_bpf+0x41/0x50 [ 259.283991][T14292] x64_sys_call+0x2aee/0x3000 [ 259.284018][T14292] do_syscall_64+0xd2/0x200 [ 259.284070][T14292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.284103][T14292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 259.284139][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.284210][T14292] RIP: 0033:0x7ff2a828efc9 [ 259.284227][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.284255][T14292] RSP: 002b:00007ff2a6cef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.284273][T14292] RAX: ffffffffffffffda RBX: 00007ff2a84e5fa0 RCX: 00007ff2a828efc9 [ 259.284287][T14292] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 259.284300][T14292] RBP: 00007ff2a6cef090 R08: 0000000000000000 R09: 0000000000000000 [ 259.284315][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.284406][T14292] R13: 00007ff2a84e6038 R14: 00007ff2a84e5fa0 R15: 00007ffc4cdeea08 [ 259.284426][T14292] [ 259.502261][T14300] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 259.524181][T14298] lo speed is unknown, defaulting to 1000 [ 259.674171][T14298] lo speed is unknown, defaulting to 1000 [ 259.696422][T14311] lo speed is unknown, defaulting to 1000 [ 259.821210][T14311] lo speed is unknown, defaulting to 1000 [ 259.847342][T14315] lo speed is unknown, defaulting to 1000 [ 259.861682][T14320] netlink: 'syz.0.3703': attribute type 13 has an invalid length. [ 259.861700][T14320] netlink: 'syz.0.3703': attribute type 17 has an invalid length. [ 259.896620][T14317] SELinux: failed to load policy [ 259.924556][T14320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.987809][T14315] lo speed is unknown, defaulting to 1000 [ 260.029066][T14323] tmpfs: Bad value for 'mpol' [ 260.029504][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 260.029516][ T29] audit: type=1400 audit(2000000047.340:25919): avc: denied { wake_alarm } for pid=14322 comm="syz.1.3704" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.047992][ T29] audit: type=1400 audit(2000000047.360:25920): avc: denied { ioctl } for pid=14322 comm="syz.1.3704" path="socket:[44021]" dev="sockfs" ino=44021 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 260.076609][T14323] syzkaller0: entered promiscuous mode [ 260.076633][T14323] syzkaller0: entered allmulticast mode [ 260.080374][T14333] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 260.132251][ T29] audit: type=1400 audit(2000000047.440:25921): avc: denied { getopt } for pid=14324 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.390314][T14362] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 260.422221][ T29] audit: type=1400 audit(2000000047.730:25922): avc: denied { listen } for pid=14364 comm="syz.2.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.423293][T14366] netlink: 'syz.2.3719': attribute type 1 has an invalid length. [ 260.425620][ T29] audit: type=1400 audit(2000000047.740:25923): avc: denied { accept } for pid=14364 comm="syz.2.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.476621][ T29] audit: type=1400 audit(2000000047.790:25924): avc: denied { module_load } for pid=14369 comm="syz.3.3717" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 260.542841][T14376] IPv6: Can't replace route, no match found [ 260.562863][T14380] vlan2: entered allmulticast mode [ 260.694510][T14390] netlink: 'syz.3.3729': attribute type 13 has an invalid length. [ 260.702380][T14390] netlink: 'syz.3.3729': attribute type 17 has an invalid length. [ 260.752639][T14390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.801569][T14395] bond0 (unregistering): Released all slaves [ 260.845153][ T29] audit: type=1400 audit(2000000048.140:25925): avc: denied { remount } for pid=14394 comm="syz.1.3732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.934665][ T29] audit: type=1400 audit(2000000048.230:25926): avc: denied { unmount } for pid=12376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.955097][ T29] audit: type=1326 audit(2000000048.250:25927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.1.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 260.991614][ T29] audit: type=1326 audit(2000000048.250:25928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.1.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 261.017014][T14413] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 261.017014][T14413] program syz.3.3737 not setting count and/or reply_len properly [ 261.325435][T14445] siw: device registration error -23 [ 261.400864][T14445] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.408283][T14445] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.468727][T14445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.488916][T14445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.541769][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.567870][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.579433][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.589674][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.838226][T14476] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3760'. [ 261.847439][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3760'. [ 261.980157][T14487] lo speed is unknown, defaulting to 1000 [ 262.041705][T14487] lo speed is unknown, defaulting to 1000 [ 262.212261][T14508] netlink: 'syz.5.3774': attribute type 13 has an invalid length. [ 262.220197][T14508] netlink: 'syz.5.3774': attribute type 17 has an invalid length. [ 262.259231][T14508] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 262.651276][T14534] lo speed is unknown, defaulting to 1000 [ 262.785148][T14534] lo speed is unknown, defaulting to 1000 [ 262.885422][T14539] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 262.912801][T14545] lo speed is unknown, defaulting to 1000 [ 263.041460][T14545] lo speed is unknown, defaulting to 1000 [ 263.047411][T14550] lo speed is unknown, defaulting to 1000 [ 263.160122][T14567] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 263.184443][T14550] lo speed is unknown, defaulting to 1000 [ 263.193733][T14567] SELinux: failed to load policy [ 263.949136][T14609] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3811'. [ 264.201308][T14614] lo speed is unknown, defaulting to 1000 [ 264.282394][T14614] lo speed is unknown, defaulting to 1000 [ 264.293355][T14635] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 264.314181][T14636] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 264.325584][T14636] SELinux: failed to load policy [ 264.936022][T14667] netlink: 'syz.2.3832': attribute type 13 has an invalid length. [ 264.944079][T14667] netlink: 'syz.2.3832': attribute type 17 has an invalid length. [ 264.982513][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.998913][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.020026][T14667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.132173][T14672] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 265.183882][T14674] syz.5.3835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 265.246035][T14681] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3838'. [ 265.484920][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3841'. [ 265.553827][T14701] SELinux: failed to load policy [ 265.655058][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 265.702692][T14711] netlink: 'syz.3.3849': attribute type 3 has an invalid length. [ 265.711427][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.727705][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.962408][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 265.962423][ T29] audit: type=1326 audit(2000000053.270:26635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 265.993603][ T29] audit: type=1326 audit(2000000053.270:26636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.017359][ T29] audit: type=1326 audit(2000000053.270:26637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.082497][ T29] audit: type=1326 audit(2000000053.350:26638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.100374][T14735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.106141][ T29] audit: type=1326 audit(2000000053.350:26639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbde8c81885 code=0x7ffc0000 [ 266.125784][T14735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.138762][ T29] audit: type=1326 audit(2000000053.360:26640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.262504][ T29] audit: type=1326 audit(2000000053.510:26641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.286134][ T29] audit: type=1326 audit(2000000053.510:26642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbde8beb099 code=0x7ffc0000 [ 266.309811][ T29] audit: type=1326 audit(2000000053.510:26643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.333944][ T29] audit: type=1326 audit(2000000053.510:26644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde8c4efc9 code=0x7ffc0000 [ 266.577568][T14752] FAULT_INJECTION: forcing a failure. [ 266.577568][T14752] name failslab, interval 1, probability 0, space 0, times 0 [ 266.590739][T14752] CPU: 0 UID: 0 PID: 14752 Comm: syz.2.3864 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.590772][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.590941][T14752] Call Trace: [ 266.590948][T14752] [ 266.590956][T14752] __dump_stack+0x1d/0x30 [ 266.590984][T14752] dump_stack_lvl+0xe8/0x140 [ 266.591010][T14752] dump_stack+0x15/0x1b [ 266.591031][T14752] should_fail_ex+0x265/0x280 [ 266.591072][T14752] should_failslab+0x8c/0xb0 [ 266.591155][T14752] __kvmalloc_node_noprof+0x12e/0x670 [ 266.591322][T14752] ? __do_semtimedop+0x78a/0x1080 [ 266.591360][T14752] ? idr_find+0x2d/0x40 [ 266.591377][T14752] __do_semtimedop+0x78a/0x1080 [ 266.591403][T14752] do_semtimedop+0x18f/0x220 [ 266.591454][T14752] __x64_sys_semop+0x41/0x50 [ 266.591479][T14752] x64_sys_call+0x2978/0x3000 [ 266.591504][T14752] do_syscall_64+0xd2/0x200 [ 266.591535][T14752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.591567][T14752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 266.591605][T14752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.591630][T14752] RIP: 0033:0x7f0f6fdfefc9 [ 266.591649][T14752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.591715][T14752] RSP: 002b:00007f0f6e846038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 266.591734][T14752] RAX: ffffffffffffffda RBX: 00007f0f70056090 RCX: 00007f0f6fdfefc9 [ 266.591746][T14752] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000000 [ 266.591758][T14752] RBP: 00007f0f6e846090 R08: 0000000000000000 R09: 0000000000000000 [ 266.591773][T14752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.591789][T14752] R13: 00007f0f70056128 R14: 00007f0f70056090 R15: 00007fffec230d98 [ 266.591812][T14752] [ 266.914778][T14764] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 267.048238][T14779] lo speed is unknown, defaulting to 1000 [ 267.230173][T14784] lo speed is unknown, defaulting to 1000 [ 267.236348][T14779] lo speed is unknown, defaulting to 1000 [ 267.340368][T14784] lo speed is unknown, defaulting to 1000 [ 267.412993][T14804] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 267.530431][T14806] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 267.586637][T14806] SELinux: failed to load policy [ 267.748485][T14814] SELinux: failed to load policy [ 267.938046][T14835] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 267.952179][T14833] lo speed is unknown, defaulting to 1000 [ 268.070344][T14840] SELinux: failed to load policy [ 268.173174][T14845] loop0: detected capacity change from 0 to 1024 [ 268.197667][T14845] EXT4-fs: Ignoring removed bh option [ 268.212873][T14838] lo speed is unknown, defaulting to 1000 [ 268.221694][T14845] EXT4-fs: inline encryption not supported [ 268.235517][T14833] lo speed is unknown, defaulting to 1000 [ 268.253026][T14845] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.308406][T14845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 268.349498][T14845] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3896: lblock 2 mapped to illegal pblock 2 (length 1) [ 268.404632][T14838] lo speed is unknown, defaulting to 1000 [ 268.471546][T14845] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3896: lblock 0 mapped to illegal pblock 48 (length 1) [ 268.553345][T14845] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3896: Failed to acquire dquot type 0 [ 268.636112][T14845] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 268.686832][T14845] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3896: mark_inode_dirty error [ 268.763040][T14845] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 268.793585][T14845] EXT4-fs (loop0): 1 orphan inode deleted [ 268.812598][ T1729] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.823117][T14845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.860605][ T1729] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 268.946092][T12692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.987205][T12692] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 269.020898][T12692] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 269.057443][T12692] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 269.081869][T14897] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 269.334571][T14907] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 269.382919][T14909] lo speed is unknown, defaulting to 1000 [ 269.419513][T14913] tap0: tun_chr_ioctl cmd 1074025677 [ 269.434602][T14913] tap0: linktype set to 773 [ 269.450590][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3922'. [ 269.460374][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3922'. [ 269.540811][T14909] lo speed is unknown, defaulting to 1000 [ 269.540811][T14910] lo speed is unknown, defaulting to 1000 [ 269.626209][T14918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3924'. [ 269.703230][T14910] lo speed is unknown, defaulting to 1000 [ 269.733207][T14918] lo speed is unknown, defaulting to 1000 [ 269.856545][T14927] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 269.937919][T14918] lo speed is unknown, defaulting to 1000 [ 270.292132][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 270.309265][T14971] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 270.325158][T14971] SELinux: failed to load policy [ 270.344919][T14973] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 270.385127][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3943'. [ 270.531739][T14985] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3948'. [ 270.574994][T14985] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3948'. [ 270.626008][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 270.671015][T14994] lo speed is unknown, defaulting to 1000 [ 270.711173][T14994] lo speed is unknown, defaulting to 1000 [ 270.818498][T15001] lo speed is unknown, defaulting to 1000 [ 270.857212][T15006] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 270.962842][T15001] lo speed is unknown, defaulting to 1000 [ 271.035630][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 271.035645][ T29] audit: type=1400 audit(2000000058.350:26852): avc: denied { mount } for pid=15009 comm="syz.2.3957" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 271.065267][ T29] audit: type=1400 audit(2000000058.350:26853): avc: denied { read write } for pid=15009 comm="syz.2.3957" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.090013][ T29] audit: type=1400 audit(2000000058.350:26854): avc: denied { open } for pid=15009 comm="syz.2.3957" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.114965][ T29] audit: type=1326 audit(2000000058.350:26855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.139728][ T29] audit: type=1326 audit(2000000058.350:26856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.164566][ T29] audit: type=1326 audit(2000000058.350:26857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.188791][ T29] audit: type=1326 audit(2000000058.350:26858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.212628][ T29] audit: type=1326 audit(2000000058.350:26859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.236501][ T29] audit: type=1326 audit(2000000058.350:26860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.255312][T15018] 9pnet: Could not find request transport: f [ 271.260551][ T29] audit: type=1326 audit(2000000058.350:26861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6fdfefc9 code=0x7ffc0000 [ 271.414709][T15026] lo speed is unknown, defaulting to 1000 [ 271.513350][T15034] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 271.590269][T15026] lo speed is unknown, defaulting to 1000 [ 271.642510][T15044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.691773][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3971'. [ 271.825659][T15044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.864935][T15060] lo speed is unknown, defaulting to 1000 [ 271.890673][T15044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.923571][T15068] netlink: 'syz.5.3976': attribute type 10 has an invalid length. [ 271.979833][T15072] netlink: 'syz.5.3976': attribute type 10 has an invalid length. [ 271.980087][T15068] bond0: (slave dummy0): Releasing backup interface [ 272.062882][T15068] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 272.092635][T15068] team0: Failed to send options change via netlink (err -105) [ 272.100444][T15068] team0: Port device dummy0 added [ 272.133998][T15060] lo speed is unknown, defaulting to 1000 [ 272.134065][T15062] lo speed is unknown, defaulting to 1000 [ 272.153896][T15044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.170521][T15072] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 272.186778][T15072] team0: Failed to send options change via netlink (err -105) [ 272.205379][T15072] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 272.236896][T15072] team0: Port device dummy0 removed [ 272.256860][T15072] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.294244][T15062] lo speed is unknown, defaulting to 1000 [ 272.324531][ T336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.413807][ T336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.435822][ T336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.492063][ T336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.699276][T15112] netlink: 'syz.3.3985': attribute type 13 has an invalid length. [ 272.707419][T15112] netlink: 'syz.3.3985': attribute type 17 has an invalid length. [ 272.716075][T15112] netlink: 'syz.3.3985': attribute type 27 has an invalid length. [ 272.917999][T15135] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 272.924581][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.932146][T15135] vhci_hcd vhci_hcd.0: Device attached [ 272.955175][T15133] lo speed is unknown, defaulting to 1000 [ 272.959010][T15143] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 272.968883][T15143] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.978011][T15143] vhci_hcd vhci_hcd.0: Device attached [ 273.073722][T15141] lo speed is unknown, defaulting to 1000 [ 273.112779][T15133] lo speed is unknown, defaulting to 1000 [ 273.137426][T15148] xt_CT: No such helper "pptp" [ 273.167073][T15137] vhci_hcd: connection closed [ 273.168016][T15144] vhci_hcd: connection closed [ 273.173192][ T37] vhci_hcd: stop threads [ 273.182123][ T37] vhci_hcd: release socket [ 273.186742][ T37] vhci_hcd: disconnect device [ 273.196106][ T37] vhci_hcd: stop threads [ 273.200530][ T37] vhci_hcd: release socket [ 273.205025][ T37] vhci_hcd: disconnect device [ 273.212505][ T3378] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 273.219908][ T3378] usb 7-1: enqueue for inactive port 0 [ 273.225567][ T3378] usb 7-1: enqueue for inactive port 0 [ 273.231073][ T3378] usb 7-1: enqueue for inactive port 0 [ 273.304628][T15141] lo speed is unknown, defaulting to 1000 [ 273.312629][ T3378] vhci_hcd: vhci_device speed not set [ 273.537347][T15158] lo speed is unknown, defaulting to 1000 [ 273.590357][T15158] lo speed is unknown, defaulting to 1000 [ 273.794752][T15166] FAULT_INJECTION: forcing a failure. [ 273.794752][T15166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.799925][T15165] lo speed is unknown, defaulting to 1000 [ 273.808072][T15166] CPU: 0 UID: 0 PID: 15166 Comm: syz.3.4004 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.808141][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.808159][T15166] Call Trace: [ 273.808168][T15166] [ 273.808179][T15166] __dump_stack+0x1d/0x30 [ 273.808281][T15166] dump_stack_lvl+0xe8/0x140 [ 273.808310][T15166] dump_stack+0x15/0x1b [ 273.808333][T15166] should_fail_ex+0x265/0x280 [ 273.808380][T15166] should_fail+0xb/0x20 [ 273.808402][T15166] should_fail_usercopy+0x1a/0x20 [ 273.808507][T15166] _copy_from_user+0x1c/0xb0 [ 273.808606][T15166] get_itimerspec64+0x4c/0x1a0 [ 273.808643][T15166] __x64_sys_timer_settime+0x9a/0x160 [ 273.808676][T15166] x64_sys_call+0x17f0/0x3000 [ 273.808762][T15166] do_syscall_64+0xd2/0x200 [ 273.808787][T15166] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 273.808887][T15166] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 273.808930][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.809012][T15166] RIP: 0033:0x7ff2a828efc9 [ 273.809032][T15166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.809057][T15166] RSP: 002b:00007ff2a6cce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 273.809103][T15166] RAX: ffffffffffffffda RBX: 00007ff2a84e6090 RCX: 00007ff2a828efc9 [ 273.809190][T15166] RDX: 00002000000001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 273.809207][T15166] RBP: 00007ff2a6cce090 R08: 0000000000000000 R09: 0000000000000000 [ 273.809225][T15166] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 273.809242][T15166] R13: 00007ff2a84e6128 R14: 00007ff2a84e6090 R15: 00007ffc4cdeea08 [ 273.809268][T15166] [ 274.102787][T15165] lo speed is unknown, defaulting to 1000 [ 274.259387][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'. [ 274.332563][T15185] FAULT_INJECTION: forcing a failure. [ 274.332563][T15185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.345800][T15185] CPU: 1 UID: 0 PID: 15185 Comm: syz.2.4011 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.345893][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.345905][T15185] Call Trace: [ 274.345912][T15185] [ 274.345919][T15185] __dump_stack+0x1d/0x30 [ 274.345941][T15185] dump_stack_lvl+0xe8/0x140 [ 274.345982][T15185] dump_stack+0x15/0x1b [ 274.346005][T15185] should_fail_ex+0x265/0x280 [ 274.346051][T15185] should_fail+0xb/0x20 [ 274.346076][T15185] should_fail_usercopy+0x1a/0x20 [ 274.346096][T15185] _copy_to_user+0x20/0xa0 [ 274.346135][T15185] simple_read_from_buffer+0xb5/0x130 [ 274.346178][T15185] proc_fail_nth_read+0x10e/0x150 [ 274.346248][T15185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.346283][T15185] vfs_read+0x1a8/0x770 [ 274.346306][T15185] ? __rcu_read_unlock+0x4f/0x70 [ 274.346339][T15185] ? __fget_files+0x184/0x1c0 [ 274.346428][T15185] ksys_read+0xda/0x1a0 [ 274.346463][T15185] __x64_sys_read+0x40/0x50 [ 274.346535][T15185] x64_sys_call+0x27c0/0x3000 [ 274.346572][T15185] do_syscall_64+0xd2/0x200 [ 274.346591][T15185] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 274.346715][T15185] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 274.346757][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.346805][T15185] RIP: 0033:0x7f0f6fdfd9dc [ 274.346834][T15185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.346858][T15185] RSP: 002b:00007f0f6e867030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.346879][T15185] RAX: ffffffffffffffda RBX: 00007f0f70055fa0 RCX: 00007f0f6fdfd9dc [ 274.346907][T15185] RDX: 000000000000000f RSI: 00007f0f6e8670a0 RDI: 0000000000000004 [ 274.347008][T15185] RBP: 00007f0f6e867090 R08: 0000000000000000 R09: 0000000000000000 [ 274.347024][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.347036][T15185] R13: 00007f0f70056038 R14: 00007f0f70055fa0 R15: 00007fffec230d98 [ 274.347054][T15185] [ 274.657742][T15191] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4014'. [ 274.687236][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 274.726241][T15189] SELinux: failed to load policy [ 274.760406][T15194] netlink: 'syz.3.4015': attribute type 13 has an invalid length. [ 274.768369][T15194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4015'. [ 274.842434][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4016'. [ 276.057620][ T29] kauditd_printk_skb: 1235 callbacks suppressed [ 276.057638][ T29] audit: type=1326 audit(2000000063.360:28097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.087511][ T29] audit: type=1326 audit(2000000063.370:28098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.111087][ T29] audit: type=1326 audit(2000000063.370:28099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.134618][ T29] audit: type=1326 audit(2000000063.370:28100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.158149][ T29] audit: type=1326 audit(2000000063.370:28101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.181653][ T29] audit: type=1326 audit(2000000063.370:28102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.205467][ T29] audit: type=1326 audit(2000000063.370:28103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.229017][ T29] audit: type=1326 audit(2000000063.370:28104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.252538][ T29] audit: type=1326 audit(2000000063.370:28105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 276.276334][ T29] audit: type=1326 audit(2000000063.370:28106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 280.453087][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.461741][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.064092][ T29] kauditd_printk_skb: 2876 callbacks suppressed [ 281.064110][ T29] audit: type=1326 audit(2000000068.380:30983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 281.094072][ T29] audit: type=1326 audit(2000000068.380:30984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.117674][ T29] audit: type=1326 audit(2000000068.380:30985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 281.141178][ T29] audit: type=1326 audit(2000000068.380:30986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.164758][ T29] audit: type=1326 audit(2000000068.380:30987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.188634][ T29] audit: type=1326 audit(2000000068.380:30988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.212337][ T29] audit: type=1326 audit(2000000068.380:30989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.235943][ T29] audit: type=1326 audit(2000000068.380:30990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.259760][ T29] audit: type=1326 audit(2000000068.380:30991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 281.283625][ T29] audit: type=1326 audit(2000000068.380:30992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cdcefc9 code=0x7ffc0000 [ 286.097717][ T29] kauditd_printk_skb: 2070 callbacks suppressed [ 286.097789][ T29] audit: type=1326 audit(2000000073.410:33063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.127723][ T29] audit: type=1326 audit(2000000073.410:33064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.151275][ T29] audit: type=1326 audit(2000000073.410:33065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.174886][ T29] audit: type=1326 audit(2000000073.410:33066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.198423][ T29] audit: type=1326 audit(2000000073.410:33067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.222291][ T29] audit: type=1326 audit(2000000073.410:33068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.245806][ T29] audit: type=1326 audit(2000000073.410:33069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.269308][ T29] audit: type=1326 audit(2000000073.410:33070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.293117][ T29] audit: type=1326 audit(2000000073.410:33071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 286.316792][ T29] audit: type=1326 audit(2000000073.410:33072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691cd6b099 code=0x7ffc0000 [ 288.042563][T15196] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 313.485336][T15212] lo speed is unknown, defaulting to 1000 [ 313.664729][T15217] lo speed is unknown, defaulting to 1000 [ 313.664732][T15212] lo speed is unknown, defaulting to 1000 [ 313.683119][ T37] bridge_slave_1: left allmulticast mode [ 313.688820][ T37] bridge_slave_1: left promiscuous mode [ 313.694605][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.725352][ T37] bridge_slave_0: left promiscuous mode [ 313.733409][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.846097][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.857337][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.869823][ T37] bond0 (unregistering): Released all slaves [ 313.884086][T15217] lo speed is unknown, defaulting to 1000 [ 313.886748][T15221] lo speed is unknown, defaulting to 1000 [ 313.982721][T15228] lo speed is unknown, defaulting to 1000 [ 314.076434][T15240] lo speed is unknown, defaulting to 1000 [ 314.086560][T15212] chnl_net:caif_netlink_parms(): no params data found [ 314.125990][T15217] chnl_net:caif_netlink_parms(): no params data found [ 314.173221][T15240] lo speed is unknown, defaulting to 1000 [ 314.182958][T15228] lo speed is unknown, defaulting to 1000 [ 314.226481][T15221] lo speed is unknown, defaulting to 1000 [ 314.352995][ T37] hsr_slave_0: left promiscuous mode [ 314.358811][ T37] hsr_slave_1: left promiscuous mode [ 314.365523][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.375026][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.420904][ T37] team0 (unregistering): Port device team_slave_1 removed [ 314.434003][ T37] team0 (unregistering): Port device team_slave_0 removed [ 314.523254][T15212] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.530360][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.547514][T15212] bridge_slave_0: entered allmulticast mode [ 314.554215][T15212] bridge_slave_0: entered promiscuous mode [ 314.562268][T15212] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.569528][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.576705][T15212] bridge_slave_1: entered allmulticast mode [ 314.583362][T15212] bridge_slave_1: entered promiscuous mode [ 314.629242][T15217] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.636473][T15217] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.644707][T15217] bridge_slave_0: entered allmulticast mode [ 314.651190][T15217] bridge_slave_0: entered promiscuous mode [ 314.664602][T15212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.698505][T15217] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.705712][T15217] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.716275][T15217] bridge_slave_1: entered allmulticast mode [ 314.723389][T15217] bridge_slave_1: entered promiscuous mode [ 314.731309][T15212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.764334][T15228] chnl_net:caif_netlink_parms(): no params data found [ 314.839447][T15217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.850592][T15212] team0: Port device team_slave_0 added [ 314.858124][T15212] team0: Port device team_slave_1 added [ 314.868654][T15240] chnl_net:caif_netlink_parms(): no params data found [ 314.891387][T15217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.916050][T15221] chnl_net:caif_netlink_parms(): no params data found [ 314.944814][T15212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.951813][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.977964][T15212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.019492][T15212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.026565][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.052526][T15212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.072228][T15217] team0: Port device team_slave_0 added [ 315.079147][T15217] team0: Port device team_slave_1 added [ 315.107809][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.177663][T15217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.184701][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.210668][T15217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.221496][T15228] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.228618][T15228] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.236163][T15228] bridge_slave_0: entered allmulticast mode [ 315.243083][T15228] bridge_slave_0: entered promiscuous mode [ 315.260250][T15212] hsr_slave_0: entered promiscuous mode [ 315.266944][T15212] hsr_slave_1: entered promiscuous mode [ 315.275326][T15212] debugfs: 'hsr0' already exists in 'hsr' [ 315.281217][T15212] Cannot create hsr debugfs directory [ 315.288993][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.300855][T15240] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.308042][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.315720][T15240] bridge_slave_0: entered allmulticast mode [ 315.322414][T15240] bridge_slave_0: entered promiscuous mode [ 315.329825][T15217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.336826][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.362914][T15217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.376671][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.400244][T15228] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.407470][T15228] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.415296][T15228] bridge_slave_1: entered allmulticast mode [ 315.421853][T15228] bridge_slave_1: entered promiscuous mode [ 315.436868][T15240] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.444067][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.459223][T15240] bridge_slave_1: entered allmulticast mode [ 315.467378][T15240] bridge_slave_1: entered promiscuous mode [ 315.499078][T15221] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.506319][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.513769][T15221] bridge_slave_0: entered allmulticast mode [ 315.520372][T15221] bridge_slave_0: entered promiscuous mode [ 315.535485][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.551721][T15221] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.558833][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.566543][T15221] bridge_slave_1: entered allmulticast mode [ 315.573340][T15221] bridge_slave_1: entered promiscuous mode [ 315.582197][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.614886][T15217] hsr_slave_0: entered promiscuous mode [ 315.621004][T15217] hsr_slave_1: entered promiscuous mode [ 315.627102][T15217] debugfs: 'hsr0' already exists in 'hsr' [ 315.632884][T15217] Cannot create hsr debugfs directory [ 315.639697][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.662297][T15228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.673464][T15221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.717521][T15228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.727859][T15221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.768380][T15240] team0: Port device team_slave_0 added [ 315.802200][T15240] team0: Port device team_slave_1 added [ 315.825026][T15221] team0: Port device team_slave_0 added [ 315.831870][T15228] team0: Port device team_slave_0 added [ 315.859258][T15221] team0: Port device team_slave_1 added [ 315.866158][T15228] team0: Port device team_slave_1 added [ 315.954142][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.961390][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.987386][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.023540][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.033918][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.084119][T15221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.091117][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.117117][T15221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.129072][T15228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.136144][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.162248][T15228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.175230][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.182264][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.208301][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.227077][T15221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.234148][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.260150][T15221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.284759][T15228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.291786][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.317799][T15228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.334945][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.345417][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.410731][T15240] hsr_slave_0: entered promiscuous mode [ 316.416915][T15240] hsr_slave_1: entered promiscuous mode [ 316.423178][T15240] debugfs: 'hsr0' already exists in 'hsr' [ 316.428916][T15240] Cannot create hsr debugfs directory [ 316.459813][T15221] hsr_slave_0: entered promiscuous mode [ 316.466231][T15221] hsr_slave_1: entered promiscuous mode [ 316.472157][T15221] debugfs: 'hsr0' already exists in 'hsr' [ 316.477950][T15221] Cannot create hsr debugfs directory [ 316.485525][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.495843][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.509204][T15212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.527025][T15228] hsr_slave_0: entered promiscuous mode [ 316.533632][T15228] hsr_slave_1: entered promiscuous mode [ 316.539531][T15228] debugfs: 'hsr0' already exists in 'hsr' [ 316.545346][T15228] Cannot create hsr debugfs directory [ 316.556471][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.566829][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.594808][T15212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.631575][T15212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.658557][T15212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.744879][T15217] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.757802][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.780076][T15217] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 316.822235][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.847862][T15217] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 316.876098][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.898307][T15217] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 316.941105][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.997642][T15240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.029571][T15221] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 317.044772][T15221] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 317.076182][T15212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.086614][T15221] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 317.100349][T15240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.123850][T15221] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 317.156110][T15212] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.184063][T15240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.204713][ T37] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.229198][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.236370][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.249428][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.256652][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.270160][T15217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.283434][T15240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.304348][ T37] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.374242][ T37] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.397108][T15217] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.418622][T15221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.436683][T15228] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 317.449361][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.456527][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.477290][ T37] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.507471][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.514748][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.529653][T15228] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 317.548050][T15228] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 317.569862][T15221] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.591809][T15228] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 317.604383][T15240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.620669][T15240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.631147][T15240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.643743][T15217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.659798][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.666909][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.688523][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.695708][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.707124][T15240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.734739][ T37] bridge_slave_1: left allmulticast mode [ 317.740429][ T37] bridge_slave_1: left promiscuous mode [ 317.746262][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.762118][ T37] bridge_slave_0: left allmulticast mode [ 317.767957][ T37] bridge_slave_0: left promiscuous mode [ 317.773735][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.783724][ T37] bridge_slave_1: left allmulticast mode [ 317.789387][ T37] bridge_slave_1: left promiscuous mode [ 317.795255][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.803930][ T37] bridge_slave_0: left allmulticast mode [ 317.809700][ T37] bridge_slave_0: left promiscuous mode [ 317.815460][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.824027][ T37] bridge_slave_1: left allmulticast mode [ 317.829695][ T37] bridge_slave_1: left promiscuous mode [ 317.835490][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.844725][ T37] bridge_slave_0: left promiscuous mode [ 317.850435][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.858695][ T37] bridge_slave_1: left allmulticast mode [ 317.864415][ T37] bridge_slave_1: left promiscuous mode [ 317.870090][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.878053][ T37] bridge_slave_0: left promiscuous mode [ 317.883803][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.045086][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.055101][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.065207][ T37] bond0 (unregistering): Released all slaves [ 318.091986][ T37] bond1 (unregistering): (slave geneve3): Releasing active interface [ 318.145096][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.155763][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.165866][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 318.175181][ T37] bond0 (unregistering): Released all slaves [ 318.184427][ T37] bond1 (unregistering): Released all slaves [ 318.235772][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.246784][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.257014][ T37] bond0 (unregistering): Released all slaves [ 318.345100][ T37] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.353831][ T37] bond_slave_0: left promiscuous mode [ 318.360657][ T37] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.369847][ T37] bond_slave_1: left promiscuous mode [ 318.376200][ T37] $Hÿ (unregistering): Released all slaves [ 318.385339][ T37] bond1 (unregistering): Released all slaves [ 318.408147][T15221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.418565][T15221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.503984][T15212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.537500][T15217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.602264][T15221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.635420][T15228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.700140][T15228] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.748758][ T1729] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.755875][ T1729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.785230][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.792342][ T1729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.816792][T15240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.842522][ T37] hsr_slave_0: left promiscuous mode [ 318.853529][ T37] hsr_slave_1: left promiscuous mode [ 318.862816][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.870287][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.882884][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.890324][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.900923][ T37] hsr_slave_0: left promiscuous mode [ 318.906722][ T37] hsr_slave_1: left promiscuous mode [ 318.912357][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.919806][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.928120][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.935718][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.945480][ T37] hsr_slave_0: left promiscuous mode [ 318.951174][ T37] hsr_slave_1: left promiscuous mode [ 318.957097][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.964529][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.975048][ T37] hsr_slave_0: left promiscuous mode [ 318.980822][ T37] hsr_slave_1: left promiscuous mode [ 318.986718][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.994191][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.002099][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.009519][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.028261][ T37] veth1_macvtap: left promiscuous mode [ 319.033863][ T37] veth0_macvtap: left promiscuous mode [ 319.039426][ T37] veth1_vlan: left promiscuous mode [ 319.044807][ T37] veth0_vlan: left promiscuous mode [ 319.050508][ T37] veth1_macvtap: left promiscuous mode [ 319.056283][ T37] veth0_macvtap: left promiscuous mode [ 319.061788][ T37] veth1_vlan: left promiscuous mode [ 319.067420][ T37] veth0_vlan: left promiscuous mode [ 319.073549][ T37] veth1_macvtap: left promiscuous mode [ 319.079127][ T37] veth1_vlan: left promiscuous mode [ 319.084448][ T37] veth0_vlan: left promiscuous mode [ 319.090108][ T37] veth1_macvtap: left promiscuous mode [ 319.095647][ T37] veth0_macvtap: left promiscuous mode [ 319.101220][ T37] veth1_vlan: left promiscuous mode [ 319.106578][ T37] veth0_vlan: left promiscuous mode [ 319.278383][ T37] team0 (unregistering): Port device team_slave_1 removed [ 319.290503][ T37] team0 (unregistering): Port device team_slave_0 removed [ 319.356927][ T37] team0 (unregistering): Port device team_slave_1 removed [ 319.368269][ T37] team0 (unregistering): Port device team_slave_0 removed [ 319.426066][ T37] team0 (unregistering): Port device team_slave_1 removed [ 319.436108][ T37] team0 (unregistering): Port device team_slave_0 removed [ 319.499416][ T37] team0 (unregistering): Port device team_slave_1 removed [ 319.510696][ T37] team0 (unregistering): Port device team_slave_0 removed [ 319.614815][T15228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.660719][T15240] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.704396][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.711491][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.747480][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.754616][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.779130][T15228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.786867][T15217] veth0_vlan: entered promiscuous mode [ 319.810956][T15240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.821372][T15240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.857291][T15212] veth0_vlan: entered promiscuous mode [ 319.873411][T15217] veth1_vlan: entered promiscuous mode [ 319.884979][T15221] veth0_vlan: entered promiscuous mode [ 319.927968][T15221] veth1_vlan: entered promiscuous mode [ 319.951073][T15212] veth1_vlan: entered promiscuous mode [ 319.967872][T15217] veth0_macvtap: entered promiscuous mode [ 319.984821][T15240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.019178][T15217] veth1_macvtap: entered promiscuous mode [ 320.038264][T15221] veth0_macvtap: entered promiscuous mode [ 320.056250][T15217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.068699][T15212] veth0_macvtap: entered promiscuous mode [ 320.077001][T15221] veth1_macvtap: entered promiscuous mode [ 320.098533][T15212] veth1_macvtap: entered promiscuous mode [ 320.117668][T15221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.126587][T15217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.142525][T15212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.155384][ T1767] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.171862][T15221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.196082][T15212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.233555][ T1767] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.243162][ T336] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.251963][ T336] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.305223][ T336] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.320764][T15228] veth0_vlan: entered promiscuous mode [ 320.359137][ T336] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.373592][T15228] veth1_vlan: entered promiscuous mode [ 320.389085][ T336] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.421196][ T1729] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.440460][ T1729] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.474472][T15228] veth0_macvtap: entered promiscuous mode [ 320.481885][T15228] veth1_macvtap: entered promiscuous mode [ 320.520256][T15228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.543832][ T1729] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.575181][T15240] veth0_vlan: entered promiscuous mode [ 320.590295][T15228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.608083][ T1729] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.621009][T15240] veth1_vlan: entered promiscuous mode [ 320.626935][ T29] kauditd_printk_skb: 1616 callbacks suppressed [ 320.626947][ T29] audit: type=1400 audit(2000000107.940:34689): avc: denied { create } for pid=15578 comm="syz.7.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 320.660735][ T1729] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.698958][ T1729] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.704061][ T29] audit: type=1400 audit(2000000107.970:34690): avc: denied { setopt } for pid=15572 comm="syz.8.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 320.712163][T15240] veth0_macvtap: entered promiscuous mode [ 320.727739][ T29] audit: type=1400 audit(2000000108.000:34691): avc: denied { getopt } for pid=15578 comm="syz.7.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 320.775148][ T1729] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.796762][T15587] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4026'. [ 320.800029][T15240] veth1_macvtap: entered promiscuous mode [ 320.830412][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4026'. [ 320.840257][ T1729] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.861041][ T1729] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.876987][T15240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.887521][ T37] IPVS: stop unused estimator thread 0... [ 320.924332][T15240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.973179][T15240] ================================================================== [ 320.981294][T15240] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 320.988316][T15240] [ 320.990642][T15240] read-write to 0xffff888237c29de4 of 4 bytes by task 9 on cpu 0: [ 320.998435][T15240] wq_worker_running+0x95/0x120 [ 321.003310][T15240] schedule_timeout+0xb7/0x170 [ 321.008072][T15240] msleep+0x50/0x90 [ 321.011887][T15240] nsim_fib_event_work+0x42e6/0x4790 [ 321.017206][T15240] process_scheduled_works+0x4ce/0x9d0 [ 321.022673][T15240] worker_thread+0x582/0x770 [ 321.027257][T15240] kthread+0x489/0x510 [ 321.031321][T15240] ret_from_fork+0x122/0x1b0 [ 321.035922][T15240] ret_from_fork_asm+0x1a/0x30 [ 321.040687][T15240] [ 321.043003][T15240] read to 0xffff888237c29de4 of 4 bytes by task 15240 on cpu 1: [ 321.050638][T15240] kick_pool+0x49/0x2d0 [ 321.054814][T15240] __queue_work+0x8cb/0xb50 [ 321.059327][T15240] queue_work_on+0xd1/0x160 [ 321.063839][T15240] nsim_fib_event_nb+0xb5a/0xcb0 [ 321.068773][T15240] atomic_notifier_call_chain+0x76/0x1c0 [ 321.074406][T15240] call_fib_notifiers+0x65/0xa0 [ 321.079255][T15240] call_fib4_notifiers+0x93/0xe0 [ 321.084208][T15240] call_fib_entry_notifiers+0xa9/0xe0 [ 321.089580][T15240] fib_table_insert+0x701/0xeb0 [ 321.094427][T15240] fib_magic+0x19a/0x1f0 [ 321.098659][T15240] fib_add_ifaddr+0xdb/0x320 [ 321.103243][T15240] fib_inetaddr_event+0xb2/0x1f0 [ 321.108190][T15240] blocking_notifier_call_chain+0x9b/0x1f0 [ 321.113991][T15240] __inet_insert_ifa+0x516/0x630 [ 321.118932][T15240] inet_rtm_newaddr+0x908/0xc30 [ 321.123774][T15240] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 321.128707][T15240] netlink_rcv_skb+0x123/0x220 [ 321.133474][T15240] rtnetlink_rcv+0x1c/0x30 [ 321.137886][T15240] netlink_unicast+0x5c0/0x690 [ 321.142652][T15240] netlink_sendmsg+0x58b/0x6b0 [ 321.147408][T15240] __sock_sendmsg+0x145/0x180 [ 321.152079][T15240] __sys_sendto+0x268/0x330 [ 321.156585][T15240] __x64_sys_sendto+0x76/0x90 [ 321.161263][T15240] x64_sys_call+0x2d14/0x3000 [ 321.165951][T15240] do_syscall_64+0xd2/0x200 [ 321.170446][T15240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.176335][T15240] [ 321.178665][T15240] value changed: 0x00000000 -> 0x00000001 [ 321.184388][T15240] [ 321.186701][T15240] Reported by Kernel Concurrency Sanitizer on: [ 321.192841][T15240] CPU: 1 UID: 0 PID: 15240 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.202827][T15240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.212887][T15240] ================================================================== [ 321.295123][T15604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15604 comm=syz.7.4030 [ 321.424333][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.433979][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.456500][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.481877][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0