last executing test programs: 5.660008532s ago: executing program 4 (id=644): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @remote, 'wlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24005805) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) write$binfmt_elf32(r2, &(0x7f0000019280)=ANY=[@ANYBLOB="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"/2469], 0x9a5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000000ff072d68bb32723d8b8ebb14895252d1dc"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r7}, 0x18) write$binfmt_elf64(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/376], 0x178) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000019c40)={0x0, 0x0}) rt_tgsigqueueinfo(r8, 0x0, 0xbffffffd, &(0x7f0000019200)={0x10, 0x3ff, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x492, &(0x7f0000001500)="$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") setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 5.607978962s ago: executing program 3 (id=645): socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa84911, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setlease(r0, 0x400, 0x2) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getpeername$qrtr(r5, &(0x7f00000001c0), &(0x7f0000000340)=0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000440)=0x8, 0x4) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) clock_gettime(0x6, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 4.897382456s ago: executing program 1 (id=647): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000006c0)={@rand_addr=' \x01\x00', 0xc737, 0x0, 0x2, 0x4, 0x6, 0x7f94}, 0x20) shutdown(r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) r6 = syz_io_uring_setup(0x5cdf, &(0x7f00000003c0)={0x0, 0x731f, 0x400, 0x1, 0x3ae}, &(0x7f0000000200), &(0x7f00000004c0)) io_uring_enter(r6, 0x2b49, 0xcb1d, 0x7, &(0x7f0000000540)={[0x400000000000000]}, 0x8) r7 = signalfd(r2, &(0x7f00000005c0)={[0x9]}, 0x8) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='tcp_probe\x00', r5, 0x0, 0x10000000}, 0x18) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000640)={0x0, @isdn={0x22, 0x0, 0x3, 0x2, 0x80}, @isdn={0x22, 0x7, 0x2, 0xcd, 0xe5}, @llc={0x1a, 0x310, 0x8e, 0xa, 0xa5, 0x9, @broadcast}, 0x3, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)='nicvf0\x00', 0x0, 0x1, 0x401}) ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x7, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x106}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r11, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r12, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0x40, r12, 0x0, 0x0, 0x1}}, 0x20) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000010000000000000000700000000000000"], 0x30}, 0x200040c4) 4.818653126s ago: executing program 1 (id=648): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0xfffffff7fffffffe}, 0x18) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffff, 0x1, 0x4}}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x5, 0x4cfe, 0x4b, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7800, 0x7, 0x7, 0x9}}) pipe2$watch_queue(&(0x7f00000003c0), 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x9, '\x00', r8, r4, 0x5, 0x5}, 0x50) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = dup(r9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, 0x0, 0x0) r11 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x98000, 0x0) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r10) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r13, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004801}, 0x48000) add_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r11) read$usbmon(r12, &(0x7f0000000000)=""/83, 0x53) 4.779446987s ago: executing program 4 (id=649): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000820004000000950968ea987c1426b5db8a5b6e4db9a4df2ada72451a39b93dd62ab56a6fc080841b1ebac274971f989b70a7a302fca45e6850ae37a900dfb776d57527207a8e72e4c38f9c1495bb12aef6abc2db14da0016a5872e77c5d1fde403c7a5739b35fb23364d5f6e5ef9a784dc9537b89f0451602c0fdaa3d71f0f4140"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='f2fs_bmap\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f00000008c0), &(0x7f0000000880)=r9}, 0x20) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') memfd_secret(0x80000) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000000)={0xb}, 0x8) close(r10) getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 4.668567557s ago: executing program 4 (id=651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffdb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f0000018c5bcc"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sync() syz_emit_ethernet(0x110, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000140)={0x2, 0xfffffffb, 0x1, 0x227b, 0xfffffffe, 0x401}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910b00000000000c4090000010000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) dup3(r4, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000100)) 4.546363557s ago: executing program 1 (id=653): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="273734eac92bfa691f9a170000000000000000000000000020e0b51c5da94c65e1f8fa779dc31372594127a5", @ANYRES16=r1, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40004030}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r6 = dup(r5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7, 0x868f, 0x5, 0x1421, 0xffffffffffffffff, 0x800, '\x00', 0x0, r6, 0x4, 0x3, 0x5, 0x7}, 0x50) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000300)={0x3, r0, 0x8, {0xffff, 0x2}, 0x3c}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="150ee89500000000b7080000070000007b8af8ff0000000800bfa200000000e1ac070200f3f8ffffffb703000008000000b70400060014000085feffff8100000095000000000000aebb2b0045dd9e98262aa7337992323a883646fab7b1c2fd2298eb262b0147bf80e54c46aa1a05ebfc5a1e42351fa0892c43734591f5f9e94bf2c0300ec9efb17944de9352eb993ac5fab72198267cb29819910dc273223860d87bf6dc13dbcbd1dac0c6487f83a39243c9cb8769aa71"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r9, 0xee72) sendfile(r6, r9, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x19) 4.16142829s ago: executing program 2 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004fcd2467f73a0909ada99ef59a24e4b51c57c9c511101fe18f14771b92f0809d6a48d7f1fff92e7a56d629c64429b17b971a283a32cd1ebcd0c65a73f5a0cef0ad5ad6487bba49c31b262167bffa124a8d422bc445d00c30ce44da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x84) lgetxattr(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x70, r9, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) 4.16040733s ago: executing program 0 (id=666): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES8=r0, @ANYRES8=r3, @ANYBLOB="e37fca206724c84d02df9780a549be86ecf707262a64542758541e53a9e4ed543bcdc0eece89d55c7920a2bf3662ff79cccb5cdad75dcc7464292a1353f23e2cf7aa7aebabb4beae0886ff8328c2a22828d391fb7f9a263aeece09b43fecc5c6c87560310d79a957121e86efdc1c"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000002480)=ANY=[], 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x0}, 0x94) 3.575500243s ago: executing program 2 (id=657): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0ec404000000a6d7570e99102d08f25b15ba4dc9e367eb7c80d4bf61d02d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x3db}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 3.575118192s ago: executing program 3 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18f8ff2f369466bed5cdfebaf6812601787caf00c1a254ecc854810d3ea72a5a3738da02d2c170545627152330efe088b99788183d6e89168564d965173350d6b06465eee97b08db019f3cf7a32530db232426343effa5e2e86d29200a03f239", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="9838707247aa7aab840e7eb5c61c6b73d209f6ac114b75ccce59a28b9b81935728350e2b21852bc2aa1228510162e733fba15ea8664daebe6ec4bb1de665bd247a8bb641d99b58d95a7b7f43ece3978b554f4a95e457dd56615b98910eedf880ff80ca7e96a79da9c1e44522330bef3796d3a3f810bbc6841c00ddf0315e8ef60378672fbae1ab1f3ec795eae42cdd0f8aaf95435bd3bdc8a4f4f1e9e3438132b75e21742ecf9a761932d078714ed04a85009d4d1e66f7488247783d709f1cfbb4ec848e498fe3b3", @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xa000010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) socket(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0xffffffff, 0x3, "000080f100df0000009c6783d29c0800"}) r7 = syz_open_pts(r6, 0x42) r8 = dup3(r7, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 2.663369567s ago: executing program 3 (id=659): setresuid(0x0, 0x0, 0xee00) setreuid(0xee00, 0xee00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x200000000000, 0x5}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x8, 0x6, 0x8, 0x5, 0x5}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x100000000000}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) r10 = semget$private(0x0, 0x6, 0x0) semtimedop(r10, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0xc881}, 0x40800) semop(r10, &(0x7f00000000c0)=[{0x4, 0x2}, {0x2}], 0x2) 2.650377937s ago: executing program 4 (id=660): r0 = epoll_create1(0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xf87, &(0x7f000001dec0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r2 = getpgrp(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0x0, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f00000004c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x80}}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4000000}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x802}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="000104000000ffdbdf2117000000340001801400020000000000000000001400020030696d7265673000000000000000000008000100badbb2dad6f77c06eb00d166ab75d9022ae3245942", @ANYRES32=r5, @ANYBLOB="0400018004000180a800018008000100", @ANYRES32=r8, @ANYBLOB="1400020074756e6c300000000000000000000000140002007663616e300000000000000000000000140002006e7230000000000000000000000000001400020076657468305f746f5f626f6e64000000140002006970366772653000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020073697430000000000000000000000000040001801400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000380)={'gre0\x00', r11, 0x40, 0x0, 0xa50, 0x8, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x10, "6cbbbf7676825a1010b4d4c3f085"}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000600)='\xf1\x95\xb3>-\x8c\xd4M\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000400000000000000001bc01788d3ae5770fc47425fd0b777f1cc8e853544a4cf544f77e8a4f6a650"], 0x50) 2.588555418s ago: executing program 3 (id=662): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="1801000000dd00000000a74cb1190000850000006d000000a500000050000000958153051f79c5e035463cb3beee518e9680a47750bec3ba1c6be3ef363b59faafbd386c77d7c1c6831883b61cd96da9243993aa31798c26b5bd8c6a461e406da7ca5afe0e965d7fe8c21f35a10bcc6356b81ff4ddc1aeaf720e0a70e1d4e90a1f371c3a063ed417c320cd6b14a918daf9393ecd98158bf6d4ee3019597ac13a853f25f8bde71e82caaa3c5c3c20987156efe7671ef6105d58ed41e22a8e84c9613122b534"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) r7 = socket$netlink(0x10, 0x3, 0x14) unshare(0x22020600) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 2.400468859s ago: executing program 2 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/179) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) r6 = syz_io_uring_setup(0x298b, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x4004844) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) close_range(r11, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x18) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200, 0x2400, 0x1}) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db}, 0x94) 2.311959809s ago: executing program 3 (id=664): syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000206030000000000000000000700000705000100070000000c00078008001240010000001100030068"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000280), 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.261434639s ago: executing program 2 (id=665): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000280)="51ba2466491087ef277006e2", 0xc, 0x1, &(0x7f0000000300)={0x23, 0x9c, 0x5, 0x7}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = fcntl$getown(r3, 0x9) r5 = syz_open_procfs(r4, 0x0) r6 = open(0x0, 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) r9 = syz_open_pts(r8, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) ioctl$TCXONC(r9, 0x540a, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 2.15456248s ago: executing program 1 (id=667): socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa84911, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setlease(r0, 0x400, 0x2) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getpeername$qrtr(r5, &(0x7f00000001c0), &(0x7f0000000340)=0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000440)=0x8, 0x4) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) clock_gettime(0x6, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 2.000803411s ago: executing program 0 (id=668): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0xd, 0x1, 0x0, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 1.719250272s ago: executing program 0 (id=669): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c"], 0x65) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r11 = socket(0x40000000015, 0x805, 0x0) getsockopt(r11, 0x114, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x88) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 1.693738012s ago: executing program 4 (id=670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000070000000000000000000000850000000500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x3200841, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000200)=[{0x7, 0x7, 0x2, 0x4}, {0x6, 0xfd, 0x9b, 0x3}, {0xd2a, 0x6, 0xa, 0x7}, {0x5, 0x6, 0x40, 0x7}, {0x8000, 0xb, 0x7, 0x7fffffff}, {0x3, 0xf, 0x1, 0x6}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x2, &(0x7f0000000000)=0x0) r8 = eventfd(0x74c) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r8, &(0x7f0000000180)="0055fd600000e7ff", 0x8, 0x36}]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 1.440231703s ago: executing program 2 (id=671): r0 = epoll_create1(0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xf87, &(0x7f000001dec0)=ANY=[], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0x0, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x0}, 0x94) 1.097673595s ago: executing program 3 (id=674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x10, 0x6, @remote}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r6, 0x1, 0x3, 0x3}, 0x50) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 217.61659ms ago: executing program 1 (id=675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0ec404000000a6d7570e99102d08f25b15ba4dc9e367eb7c80d4bf61d02d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d966359534a3e3685aceb80652e6bb44b13e60b4d07e31b791a8f640b41ac3dfb3a92cc86f53732e42970e2f804c920fce94390a55cfbc9d3781bc8fa8ae9260f931f86b459cb61a2f61ba133c539fc8518656a0d7699335e4efd7ab62a9cd0e0bfeae1b6299a227d33241814d833f11172bc800fc3f316fde29b4253629fe6941908c05990b1257e068d78a100b153244bd0d9d2298d51b423778b8e34552be08befe8d6f918fc979b049b944fee1fd714f0138485c14050fe770244ab91991bcb960232d6e2bc135adea7084c91e652e9474faa20c2370a91be37ec48c6969dc7102fb12323699096fea49c1c40fae50a92d2bfb79ff07c5b9e0db116ea4aaa0de18abb101a10c476c47c72e0bd380c411dd2cc6b916d5b00764be9a3a041a1d0bd67a4ab6070870498ed3f57e39b1ed921efa8192437c9d480377c11021de424ff993b036658182d065a3728e3726dbbbf2dedc34d9aea35a3853b7186e9b679b5789537660d6cf81351fa497f77a527fce94040ca6d29d444f4b009b6b5422a0fc864381e443071ef18e5a0f91eac0c31f992cc5dbf5f6d2bf2f2e65cd570103df899ed10fa14690233f195eb188d0bcf6fe5ed01d5cae8dcdf7eed32cc16b00bf8e9a4c5facac4c32e603886783a9f1595fb95725ad7784a8ccb13658edcc653672fdc7500b2a875ae88d957f4ec9506369e80adc86cd0a9df28bd656620bc21db75671ec1cc4c22debd389172ff45768dfb2a514a819e17724414cdda015c1f1a4abe88cb3bbdbac", 0x3db}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 217.310579ms ago: executing program 2 (id=676): socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x7, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00080001010000007f0000cc000000005cde00", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r11, 0x2004, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) 216.879639ms ago: executing program 4 (id=677): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="273734eac92bfa691f9a170000000000000000000000000020e0b51c5da94c65e1f8fa779dc31372594127a5", @ANYRES16=r1, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40004030}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r6 = dup(r5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7, 0x868f, 0x5, 0x1421, 0xffffffffffffffff, 0x800, '\x00', 0x0, r6, 0x4, 0x3, 0x5, 0x7}, 0x50) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000300)={0x3, r0, 0x8, {0xffff, 0x2}, 0x3c}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="150ee89500000000b7080000070000007b8af8ff0000000800bfa200000000e1ac070200f3f8ffffffb703000008000000b70400060014000085feffff8100000095000000000000aebb2b0045dd9e98262aa7337992323a883646fab7b1c2fd2298eb262b0147bf80e54c46aa1a05ebfc5a1e42351fa0892c43734591f5f9e94bf2c0300ec9efb17944de9352eb993ac5fab72198267cb29819910dc273223860d87bf6dc13dbcbd1dac0c6487f83a39243c9cb8769aa71"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r9, 0xee72) sendfile(r6, r9, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x19) 0s ago: executing program 0 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="c54ff8bbfbff3ae734bf204724b1ef294a1163106dbbdf33ee805a6e8434e511c4f5627b67f91efb8e58b86c7c0280d0c5f07cf9e6f20ab639181495be982dd9dfc9f268f2e65bb86c8d4f1c3a5cc30e1bff467cec731387c436b6105be400baa83b56e98970038bd921a5f83532bb88e824c6606810255f175fd3698c81b0e51e0ce44d1647d71ddf563932b1c2e0adba5c7d7a74", 0x95}, {&(0x7f00000007c0)="669eb6aea36803c0cccdc3340d084ffe4259625463678e42fc72c6d9c9587e52489bab2869763bbb22b852e5ce303d6e202fd1d967f07dafe65191aa49eb903c99f6a606a667b2dfbd0d5c274971a356a9aa82e2ea022273e7dbe24287e41225bc5389bca98c8bcbc66be5acdbde0a11c8077e3463043a4d8e4f05f602abcf4f7d88e9856297a908b9795efdb9e63b947d9c3b12000917ff3f3ed1f1f18f0bccad4e208d78163d0c5673991777f42e151c", 0xb1}, {&(0x7f0000000880)="18ccf1e3567b2b280d85c0c0edad6ff1089ddb2b2d85808e6f348694c933986e9750d0de29951f11c254003de806210699545b6e49b5572f85864f71c0c3af83aa8d5ae08cecdb3541c10ae84f01275568db59b9a7ca44f502e98a1597d73890", 0x60}], 0x3}, 0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r4}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmmsg$sock(r2, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="978207465f6143bd49dc3befdb498e45437f88c33155f98b799bd9c9b45766b71766d9fb935eb96fe71fa680f8f487", 0x2f}, {&(0x7f00000002c0)="ca9993447a14af3750d2b34d876d997b2098c895545a5aeb06410f03c5caa943a6ec73ecebdcff18ff217d5e1dd718f38e833e4530fe1e5c3f7ca0deb09b3dbb2cb389e599faccb3e96ee9ecd906994b992394670da97b1df969408de484264d6c04fb8b11f108d09fc00a262533ddaacc8e40f8008a", 0x76}, {&(0x7f0000000140)="85bcce9a917d46210a7558c9ccf0fc73b48d1fbf09037f589ea3bb5efb", 0x1d}, {&(0x7f0000000340)="8a8fbbdb94e29254888d4a00b76905ffbbb385329df59f3aaada888d3509546fb236721d3aa0fb59d121d5102b99044665da6435daa83195df43201952039352b2feb27f6de67c2eb8ee3294a6684794164e737bbbcfff189161d75836a053fc637db789fc40b0ae330def50dbd1f4eb4343bdcaa42496af", 0x78}, {&(0x7f00000004c0)="4e3fb6c497b2a03b7cf989b6fe46b0d015955329641b72f719902f4c9aa8787fb54aadbbb79285e31a2d7adb8f762712aeb1bfc8d50b9a3a8c86ada89b7d0e3c0a6560924c830e58b57c9b6236a593d9643441e2a1ec637f681f698048f3471280426e62b787f4ecdd6fece4bad9cb8f395c2c0061a11f29b2c1cd3268241d3f4b61ab4faf4000d92fa7cecf51f4aac2113222d01c352a97d9f910e8788875d32de5709ad9da94755eac1cfb300a8b4f290edaaf75eded56a77f3f5e9bcc954b6ed7f6d8f39126140964f478a41bbee32c17b9273324d22579ea25", 0xdb}], 0x5, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x4008000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) poll(&(0x7f0000000380)=[{r10, 0x201}, {r10, 0x8200}], 0x2, 0x80000001) ioctl$TIOCPKT(r10, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000140)={0x7, 0x9, 0x80000000, 0x26, 0x7, "7010df3ad1fb196e9ed71248a7f2315e148c42"}) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000d40000. [ 73.220075][ T4824] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.273: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.254223][ T4824] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.273: Invalid inode bitmap blk 0 in block_group 0 [ 73.268531][ T4824] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 73.279831][ T3627] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.308888][ T4833] loop3: detected capacity change from 0 to 2048 [ 73.316771][ T3627] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:39: Failed to release dquot type 0 [ 73.328791][ T4824] EXT4-fs (loop4): 1 orphan inode deleted [ 73.335182][ T4824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.381683][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.424494][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.536220][ T4844] lo speed is unknown, defaulting to 1000 [ 73.640284][ T4844] lo speed is unknown, defaulting to 1000 [ 73.695006][ T4844] lo speed is unknown, defaulting to 1000 [ 73.810683][ T4846] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.847704][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.857138][ T4846] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1086 with error 28 [ 73.869611][ T4846] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.869611][ T4846] [ 73.879308][ T4846] EXT4-fs (loop3): Total free blocks count 0 [ 73.885292][ T4846] EXT4-fs (loop3): Free/Dirty block details [ 73.891180][ T4846] EXT4-fs (loop3): free_blocks=2415919104 [ 73.896894][ T4846] EXT4-fs (loop3): dirty_blocks=1088 [ 73.902208][ T4846] EXT4-fs (loop3): Block reservation details [ 73.908171][ T4846] EXT4-fs (loop3): i_reserved_data_blocks=68 [ 73.933022][ T3550] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.981457][ T3550] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 74.252886][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.426972][ T4868] lo speed is unknown, defaulting to 1000 [ 74.585110][ T4868] lo speed is unknown, defaulting to 1000 [ 74.626178][ T4868] lo speed is unknown, defaulting to 1000 [ 74.677071][ T4870] lo speed is unknown, defaulting to 1000 [ 74.818088][ T4870] lo speed is unknown, defaulting to 1000 [ 74.858681][ T4870] lo speed is unknown, defaulting to 1000 [ 75.360439][ T4877] siw: device registration error -23 [ 75.580118][ T4882] geneve2: entered promiscuous mode [ 75.610304][ T3548] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.621078][ T3548] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.636697][ T3548] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.655768][ T3548] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677233][ T4880] loop1: detected capacity change from 0 to 2048 [ 75.711262][ T4880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.751192][ T4874] loop2: detected capacity change from 0 to 512 [ 75.775525][ T4874] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.281: bad orphan inode 11862016 [ 75.788852][ T4874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.802384][ T4874] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.930522][ T4889] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.960274][ T4889] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 688 with error 28 [ 75.972756][ T4889] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.972756][ T4889] [ 75.982552][ T4889] EXT4-fs (loop1): Total free blocks count 0 [ 75.988541][ T4889] EXT4-fs (loop1): Free/Dirty block details [ 75.994521][ T4889] EXT4-fs (loop1): free_blocks=2415919104 [ 76.000367][ T4889] EXT4-fs (loop1): dirty_blocks=704 [ 76.005630][ T4889] EXT4-fs (loop1): Block reservation details [ 76.011715][ T4889] EXT4-fs (loop1): i_reserved_data_blocks=44 [ 76.145690][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.209026][ T4900] loop2: detected capacity change from 0 to 512 [ 76.234513][ T4900] ext4: Unknown parameter 'oldalloc"data' [ 76.243506][ T3550] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 76.256228][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.290'. [ 76.308715][ T4892] loop4: detected capacity change from 0 to 512 [ 76.347028][ T4892] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.289: bad orphan inode 11862016 [ 76.358370][ T4892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.371506][ T4918] loop3: detected capacity change from 0 to 164 [ 76.373230][ T4892] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.438453][ T4918] syz.3.291: attempt to access beyond end of device [ 76.438453][ T4918] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 76.456691][ T4918] syz.3.291: attempt to access beyond end of device [ 76.456691][ T4918] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 76.526874][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.599269][ T4924] loop4: detected capacity change from 0 to 2048 [ 76.623448][ T4909] loop1: detected capacity change from 0 to 512 [ 76.697877][ T4924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 76.711750][ T4909] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.292: bad orphan inode 11862016 [ 76.730583][ T4909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.743521][ T4909] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.838634][ T4934] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.849825][ T4938] lo speed is unknown, defaulting to 1000 [ 76.860894][ T4934] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1328 with error 28 [ 76.873431][ T4934] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.873431][ T4934] [ 76.883090][ T4934] EXT4-fs (loop4): Total free blocks count 0 [ 76.889087][ T4934] EXT4-fs (loop4): Free/Dirty block details [ 76.895063][ T4934] EXT4-fs (loop4): free_blocks=2415919104 [ 76.900867][ T4934] EXT4-fs (loop4): dirty_blocks=1344 [ 76.906149][ T4934] EXT4-fs (loop4): Block reservation details [ 76.912149][ T4934] EXT4-fs (loop4): i_reserved_data_blocks=84 [ 76.944151][ T4939] lo speed is unknown, defaulting to 1000 [ 77.054719][ T4939] lo speed is unknown, defaulting to 1000 [ 77.115555][ T4939] lo speed is unknown, defaulting to 1000 [ 77.249674][ T4940] netlink: 'syz.0.298': attribute type 21 has an invalid length. [ 77.333942][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.568647][ T4938] lo speed is unknown, defaulting to 1000 [ 77.584672][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 77.584685][ T29] audit: type=1326 audit(1761980535.369:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac1aefc9 code=0x50000 [ 77.613957][ T29] audit: type=1326 audit(1761980535.369:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f70ac1aefc9 code=0x50000 [ 77.632175][ T4938] lo speed is unknown, defaulting to 1000 [ 77.637002][ T29] audit: type=1326 audit(1761980535.369:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70ac1e1885 code=0x50000 [ 77.665836][ T29] audit: type=1326 audit(1761980535.369:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f70ac1aefc9 code=0x50000 [ 77.689594][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 77.711808][ T4950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.797874][ T4954] loop2: detected capacity change from 0 to 1024 [ 77.799625][ T29] audit: type=1400 audit(1761980535.499:5333): avc: denied { write } for pid=4943 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.823658][ T29] audit: type=1326 audit(1761980535.509:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x50000 [ 77.847027][ T29] audit: type=1326 audit(1761980535.509:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f70ac1aefc9 code=0x50000 [ 77.870181][ T29] audit: type=1326 audit(1761980535.589:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 77.893513][ T29] audit: type=1326 audit(1761980535.589:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 77.916878][ T29] audit: type=1326 audit(1761980535.589:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 77.950466][ T4954] EXT4-fs: Ignoring removed orlov option [ 78.073501][ T4954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.144966][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 78.262057][ T4963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.312455][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 78.711946][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.874240][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 78.947627][ T4976] loop2: detected capacity change from 0 to 1024 [ 78.977075][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 78.990440][ T4976] EXT4-fs: Ignoring removed nobh option [ 78.996026][ T4976] EXT4-fs: Ignoring removed bh option [ 79.008955][ T4978] macvtap2: entered allmulticast mode [ 79.044360][ T4978] batman_adv: batadv0: Adding interface: macvtap2 [ 79.050840][ T4978] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.082624][ T4975] loop1: detected capacity change from 0 to 512 [ 79.089107][ T4976] ext4: Unknown parameter 'mask' [ 79.092678][ T4978] batman_adv: batadv0: Interface activated: macvtap2 [ 79.129289][ T4975] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.306: corrupted in-inode xattr: e_name out of bounds [ 79.146089][ T4975] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.306: couldn't read orphan inode 15 (err -117) [ 79.150255][ T4976] loop2: detected capacity change from 0 to 512 [ 79.165048][ T4975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.196100][ T4980] hub 1-0:1.0: USB hub found [ 79.202781][ T4980] hub 1-0:1.0: 8 ports detected [ 79.216908][ T4976] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.232898][ T4976] EXT4-fs (loop2): mount failed [ 79.238459][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.264498][ T4985] netlink: 'syz.1.308': attribute type 21 has an invalid length. [ 79.275767][ T4985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.308'. [ 79.284901][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 80.297982][ T4996] lo speed is unknown, defaulting to 1000 [ 80.396252][ T4996] lo speed is unknown, defaulting to 1000 [ 80.464142][ T4996] lo speed is unknown, defaulting to 1000 [ 80.719127][ T5000] lo speed is unknown, defaulting to 1000 [ 80.785721][ T5000] lo speed is unknown, defaulting to 1000 [ 80.827120][ T5000] lo speed is unknown, defaulting to 1000 [ 81.098950][ T5012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.314'. [ 81.194477][ T5014] xt_CT: No such helper "pptp" [ 81.205165][ T5014] xt_nat: multiple ranges no longer supported [ 81.206833][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 81.358772][ T5021] loop3: detected capacity change from 0 to 1024 [ 81.373525][ T5021] EXT4-fs: Ignoring removed orlov option [ 81.420734][ T5021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.470443][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 81.479744][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 81.614303][ T5017] loop1: detected capacity change from 0 to 512 [ 81.659233][ T5022] xt_connbytes: Forcing CT accounting to be enabled [ 81.680093][ T5037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.688508][ T5022] set match dimension is over the limit! [ 81.700489][ T5017] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.317: bad orphan inode 11862016 [ 81.726782][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 81.770592][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 81.878028][ T5017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.936560][ T5017] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.043762][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.063807][ T5044] sch_fq: defrate 4294967295 ignored. [ 82.069662][ T5044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5044 comm=syz.2.322 [ 82.088067][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 82.115640][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 82.124778][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 82.226603][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.468537][ T5060] lo speed is unknown, defaulting to 1000 [ 82.613174][ T5060] lo speed is unknown, defaulting to 1000 [ 82.683057][ T5060] lo speed is unknown, defaulting to 1000 [ 82.973483][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 82.973498][ T29] audit: type=1400 audit(1761980540.769:5660): avc: denied { bind } for pid=5046 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.998816][ T29] audit: type=1400 audit(1761980540.769:5661): avc: denied { setopt } for pid=5046 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.222015][ T5068] bridge_slave_0: left allmulticast mode [ 83.227724][ T5068] bridge_slave_0: left promiscuous mode [ 83.233448][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.254122][ T5071] SELinux: security_context_str_to_sid (,Gn/t)/+޵U 6m|<^glJ+d[g [ 83.254122][ T5071] L S;jQM[WtoF}YGO&kH8`kc 5¯ 0IZ^L.ތUA/͗DO2acP }#3E=DK{_Ue8΋oc`9|#|rK(FoCZ) failed with errno=-22 [ 83.293519][ T29] audit: type=1400 audit(1761980540.969:5662): avc: denied { append } for pid=5067 comm="syz.2.327" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.317312][ T29] audit: type=1400 audit(1761980540.969:5663): avc: denied { open } for pid=5067 comm="syz.2.327" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.341386][ T29] audit: type=1326 audit(1761980541.039:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 83.364696][ T29] audit: type=1326 audit(1761980541.049:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 83.388170][ T29] audit: type=1326 audit(1761980541.049:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 83.411511][ T29] audit: type=1326 audit(1761980541.049:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 83.434833][ T29] audit: type=1326 audit(1761980541.049:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 83.458144][ T29] audit: type=1326 audit(1761980541.049:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 83.590647][ T5068] bridge_slave_1: left allmulticast mode [ 83.596321][ T5068] bridge_slave_1: left promiscuous mode [ 83.602053][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.672290][ T5068] bond0: (slave bond_slave_0): Releasing backup interface [ 83.695103][ T5068] bond0: (slave bond_slave_1): Releasing backup interface [ 83.788066][ T5068] team0: Port device team_slave_0 removed [ 83.805574][ T5068] team0: Port device team_slave_1 removed [ 83.825927][ T5068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.833361][ T5068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.857444][ T5068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.864900][ T5068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.891127][ T5068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.975658][ T1036] syz!: Port: 1 Link DOWN [ 84.155638][ T5087] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 84.261085][ T5094] loop3: detected capacity change from 0 to 512 [ 84.272678][ T5094] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.332: inode has both inline data and extents flags [ 84.292104][ T5094] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.332: couldn't read orphan inode 15 (err -117) [ 84.317333][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.458136][ T5099] program syz.1.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.483887][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.680385][ T5112] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.707779][ T5114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.338'. [ 84.723819][ T5114] SELinux: policydb version 0 does not match my version range 15-35 [ 84.733017][ T5115] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.743611][ T5114] SELinux: failed to load policy [ 84.772272][ T5111] loop3: detected capacity change from 0 to 2048 [ 84.778841][ T5101] loop2: detected capacity change from 0 to 512 [ 84.791369][ T5101] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.334: bad orphan inode 11862016 [ 84.803862][ T5101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.821393][ T5111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 84.839636][ T5101] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.956154][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.988875][ T5122] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.005842][ T5122] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1494 with error 28 [ 85.018460][ T5122] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.018460][ T5122] [ 85.028128][ T5122] EXT4-fs (loop3): Total free blocks count 0 [ 85.034138][ T5122] EXT4-fs (loop3): Free/Dirty block details [ 85.040069][ T5122] EXT4-fs (loop3): free_blocks=2415919104 [ 85.045791][ T5122] EXT4-fs (loop3): dirty_blocks=1504 [ 85.051105][ T5122] EXT4-fs (loop3): Block reservation details [ 85.057081][ T5122] EXT4-fs (loop3): i_reserved_data_blocks=94 [ 85.100607][ T5125] pim6reg1: entered promiscuous mode [ 85.105956][ T5125] pim6reg1: entered allmulticast mode [ 85.204865][ T2770] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 85.233095][ T5130] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 85.233095][ T5130] The task syz.2.339 (5130) triggered the difference, watch for misbehavior. [ 85.491440][ T5137] 9pnet_fd: p9_fd_create_unix (5137): problem connecting socket: ./file0: -2 [ 85.507274][ T5137] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 85.535068][ T5137] bridge1: entered promiscuous mode [ 85.546114][ T5137] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 85.555903][ T36] lo speed is unknown, defaulting to 1000 [ 85.561726][ T36] syz0: Port: 1 Link ACTIVE [ 85.586194][ T5139] pim6reg: entered allmulticast mode [ 85.599938][ T5139] pim6reg: left allmulticast mode [ 85.759290][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 85.768724][ T5145] bridge_slave_1: left allmulticast mode [ 85.774404][ T5145] bridge_slave_1: left promiscuous mode [ 85.780100][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.787855][ T5145] bridge_slave_0: left allmulticast mode [ 85.793558][ T5145] bridge_slave_0: left promiscuous mode [ 85.799184][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.866947][ T5155] loop4: detected capacity change from 0 to 1024 [ 85.880186][ T5155] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.346: Failed to acquire dquot type 0 [ 85.891962][ T5155] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.906597][ T5155] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.346: corrupted inode contents [ 85.919301][ T5155] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.346: mark_inode_dirty error [ 85.930972][ T5155] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.346: corrupted inode contents [ 85.943264][ T5155] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.346: mark_inode_dirty error [ 85.954957][ T5155] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.346: corrupted inode contents [ 85.966929][ T5155] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 85.975657][ T5155] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.346: corrupted inode contents [ 85.987897][ T5155] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.346: mark_inode_dirty error [ 85.999300][ T5155] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 86.014518][ T5155] EXT4-fs (loop4): 1 truncate cleaned up [ 86.020999][ T5155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.045643][ T5145] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.080839][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.257114][ T5162] lo speed is unknown, defaulting to 1000 [ 86.263011][ T5162] lo speed is unknown, defaulting to 1000 [ 86.268986][ T5162] lo speed is unknown, defaulting to 1000 [ 86.276764][ T5162] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.288176][ T5162] lo speed is unknown, defaulting to 1000 [ 86.294963][ T5162] lo speed is unknown, defaulting to 1000 [ 86.301338][ T5169] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.344'. [ 86.302906][ T5162] lo speed is unknown, defaulting to 1000 [ 86.310746][ T5169] netlink: zone id is out of range [ 86.317004][ T5162] lo speed is unknown, defaulting to 1000 [ 86.321423][ T5169] netlink: zone id is out of range [ 86.327802][ T5162] lo speed is unknown, defaulting to 1000 [ 86.356820][ T5169] netlink: zone id is out of range [ 86.393624][ T5168] loop3: detected capacity change from 0 to 512 [ 86.419166][ T5169] netlink: zone id is out of range [ 86.424546][ T5169] netlink: zone id is out of range [ 86.429713][ T5169] netlink: zone id is out of range [ 86.435987][ T5168] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.350: bad orphan inode 11862016 [ 86.447097][ T5168] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.460568][ T5169] netlink: set zone limit has 8 unknown bytes [ 86.528949][ T5178] tmpfs: Unknown parameter 'mLave' [ 86.570349][ T5182] netlink: 'syz.3.352': attribute type 21 has an invalid length. [ 86.589770][ T5182] __nla_validate_parse: 1 callbacks suppressed [ 86.596034][ T5182] netlink: 156 bytes leftover after parsing attributes in process `syz.3.352'. [ 86.605034][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 86.703163][ T5180] loop2: detected capacity change from 0 to 128 [ 86.709939][ T5180] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.729333][ T5180] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.754801][ T5189] loop3: detected capacity change from 0 to 1024 [ 86.775201][ T5189] EXT4-fs: Ignoring removed bh option [ 86.792923][ T5189] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.818141][ T5192] pim6reg: entered allmulticast mode [ 86.827083][ T5192] pim6reg: left allmulticast mode [ 86.889426][ T3318] EXT4-fs error (device loop3): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 86.912238][ T3318] EXT4-fs (loop3): Remounting filesystem read-only [ 86.952215][ T5203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 86.959824][ T5200] xt_CT: No such helper "pptp" [ 86.969530][ T5200] xt_nat: multiple ranges no longer supported [ 87.336112][ T5215] lo speed is unknown, defaulting to 1000 [ 87.386032][ T5215] lo speed is unknown, defaulting to 1000 [ 87.392427][ T5215] lo speed is unknown, defaulting to 1000 [ 87.694384][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 87.704489][ T5218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.363'. [ 87.729150][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 87.744116][ T5220] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.900708][ T5225] syzkaller0: entered allmulticast mode [ 87.909835][ T5225] syzkaller0: entered promiscuous mode [ 87.972369][ T5229] netlink: 'syz.4.366': attribute type 21 has an invalid length. [ 87.980290][ T29] kauditd_printk_skb: 832 callbacks suppressed [ 87.980304][ T29] audit: type=1326 audit(1761980545.769:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.3.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70ac1aefc9 code=0x0 [ 88.010197][ T5229] netlink: 156 bytes leftover after parsing attributes in process `syz.4.366'. [ 88.019435][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 88.046702][ T29] audit: type=1400 audit(1761980545.839:6501): avc: denied { create } for pid=5228 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.090756][ T5225] syzkaller0 (unregistering): left allmulticast mode [ 88.097542][ T5225] syzkaller0 (unregistering): left promiscuous mode [ 88.104337][ T29] audit: type=1400 audit(1761980545.869:6502): avc: denied { getopt } for pid=5228 comm="syz.4.366" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.124715][ T29] audit: type=1400 audit(1761980545.869:6503): avc: denied { open } for pid=5228 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.143934][ T29] audit: type=1400 audit(1761980545.869:6504): avc: denied { kernel } for pid=5228 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.163281][ T29] audit: type=1400 audit(1761980545.869:6505): avc: denied { tracepoint } for pid=5228 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.183168][ T29] audit: type=1400 audit(1761980545.869:6506): avc: denied { ioctl } for pid=5222 comm="syz.0.365" path="socket:[11078]" dev="sockfs" ino=11078 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.389800][ T5238] loop1: detected capacity change from 0 to 256 [ 88.409822][ T29] audit: type=1400 audit(1761980546.199:6507): avc: denied { create } for pid=5239 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.429515][ T29] audit: type=1400 audit(1761980546.199:6508): avc: denied { create } for pid=5239 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.449630][ T29] audit: type=1326 audit(1761980546.199:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 88.466129][ T5238] vfat: Unknown parameter 'shortnamg' [ 88.496717][ T5240] xt_CT: No such helper "pptp" [ 88.502110][ T5240] xt_nat: multiple ranges no longer supported [ 88.587953][ T5244] loop1: detected capacity change from 0 to 512 [ 88.620134][ T5245] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.367'. [ 88.629328][ T5245] netlink: zone id is out of range [ 88.634494][ T5245] netlink: zone id is out of range [ 88.657820][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 88.676699][ T5235] loop4: detected capacity change from 0 to 128 [ 88.700730][ T5235] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.836695][ T5249] lo speed is unknown, defaulting to 1000 [ 88.891676][ T5249] lo speed is unknown, defaulting to 1000 [ 88.898034][ T5249] lo speed is unknown, defaulting to 1000 [ 88.958665][ T5244] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.020503][ T5235] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.230836][ T5255] tipc: Enabling of bearer rejected, failed to enable media [ 89.410623][ T5268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=5268 comm=syz.3.374 [ 89.523670][ T5263] netlink: 'syz.4.375': attribute type 21 has an invalid length. [ 89.872029][ T5276] lo speed is unknown, defaulting to 1000 [ 89.921616][ T5276] lo speed is unknown, defaulting to 1000 [ 89.927905][ T5276] lo speed is unknown, defaulting to 1000 [ 90.130167][ T5267] loop1: detected capacity change from 0 to 512 [ 90.162615][ T5267] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.384: bad orphan inode 11862016 [ 90.180385][ T5267] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.346463][ T5286] macvtap2: entered allmulticast mode [ 90.351943][ T5286] bridge0: entered allmulticast mode [ 90.364444][ T5286] batman_adv: batadv0: Adding interface: macvtap2 [ 90.371001][ T5286] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.396819][ T5286] batman_adv: batadv0: Interface activated: macvtap2 [ 90.565072][ T5289] hub 1-0:1.0: USB hub found [ 90.566992][ T5294] bridge0: port 3(batadv1) entered blocking state [ 90.575294][ T5289] hub 1-0:1.0: 8 ports detected [ 90.576186][ T5294] bridge0: port 3(batadv1) entered disabled state [ 90.587912][ T5294] batadv1: entered allmulticast mode [ 90.604929][ T5294] batadv1: entered promiscuous mode [ 90.729974][ T5301] veth0_to_team: entered promiscuous mode [ 91.135199][ T3548] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 91.144509][ T3548] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 91.370236][ T5340] lo speed is unknown, defaulting to 1000 [ 91.424777][ T5340] lo speed is unknown, defaulting to 1000 [ 91.431174][ T5340] lo speed is unknown, defaulting to 1000 [ 91.590796][ T5346] 9pnet_fd: p9_fd_create_unix (5346): problem connecting socket: ./file0: -2 [ 91.658331][ T5346] netlink: 'syz.1.387': attribute type 4 has an invalid length. [ 91.704576][ T5349] __nla_validate_parse: 1 callbacks suppressed [ 91.704591][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.397'. [ 91.749455][ T5346] bridge1: entered promiscuous mode [ 91.763508][ T5351] loop3: detected capacity change from 0 to 2048 [ 91.764464][ T5346] netlink: 'syz.1.387': attribute type 4 has an invalid length. [ 91.779918][ T36] lo speed is unknown, defaulting to 1000 [ 91.785667][ T36] syz2: Port: 1 Link ACTIVE [ 91.797494][ T5351] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.811160][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 91.826073][ T5351] EXT4-fs (loop3): shut down requested (2) [ 91.834692][ T5351] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 91.841357][ T5351] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.849141][ T5351] vhci_hcd vhci_hcd.0: Device attached [ 91.856010][ T5356] vhci_hcd: connection closed [ 91.856208][ T2770] vhci_hcd: stop threads [ 91.865441][ T2770] vhci_hcd: release socket [ 91.869889][ T2770] vhci_hcd: disconnect device [ 92.116280][ T5366] loop4: detected capacity change from 0 to 1024 [ 92.126393][ T5366] EXT4-fs: Ignoring removed orlov option [ 92.225192][ T5372] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.386'. [ 92.245006][ T5372] net_ratelimit: 6 callbacks suppressed [ 92.245019][ T5372] netlink: zone id is out of range [ 92.249311][ T5362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.392'. [ 92.250608][ T5372] netlink: zone id is out of range [ 92.270018][ T5372] netlink: zone id is out of range [ 92.275223][ T5372] netlink: zone id is out of range [ 92.280355][ T5372] netlink: zone id is out of range [ 92.281943][ T5374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.285529][ T5372] netlink: zone id is out of range [ 92.299395][ T5372] netlink: zone id is out of range [ 92.311425][ T5372] netlink: set zone limit has 8 unknown bytes [ 92.375119][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 92.404380][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 92.682773][ T5368] Set syz1 is full, maxelem 65536 reached [ 93.704740][ T5393] lo speed is unknown, defaulting to 1000 [ 93.742421][ T5393] lo speed is unknown, defaulting to 1000 [ 93.748592][ T5393] lo speed is unknown, defaulting to 1000 [ 93.777938][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 93.777952][ T29] audit: type=1400 audit(1761980551.569:6675): avc: denied { ioctl } for pid=5384 comm="syz.2.399" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.787585][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.818974][ T29] audit: type=1400 audit(1761980551.619:6676): avc: denied { create } for pid=5396 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.820888][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.840526][ T5397] siw: device registration error -23 [ 93.855383][ T29] audit: type=1400 audit(1761980551.619:6677): avc: denied { write } for pid=5396 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.906243][ T29] audit: type=1400 audit(1761980551.699:6678): avc: denied { map_create } for pid=5384 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.925474][ T29] audit: type=1400 audit(1761980551.699:6679): avc: denied { perfmon } for pid=5384 comm="syz.2.399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.946261][ T29] audit: type=1400 audit(1761980551.699:6680): avc: denied { map_read map_write } for pid=5384 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.967888][ T29] audit: type=1400 audit(1761980551.699:6681): avc: denied { create } for pid=5384 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.987643][ T29] audit: type=1400 audit(1761980551.699:6682): avc: denied { write } for pid=5384 comm="syz.2.399" lport=259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.008109][ T29] audit: type=1400 audit(1761980551.699:6683): avc: denied { prog_load } for pid=5384 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.011608][ T5399] 9pnet_fd: p9_fd_create_unix (5399): problem connecting socket: ./file0: -2 [ 94.027106][ T29] audit: type=1400 audit(1761980551.699:6684): avc: denied { bpf } for pid=5384 comm="syz.2.399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.067339][ T5404] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 94.083547][ T5404] bridge1: entered promiscuous mode [ 94.094358][ T5404] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 94.181361][ T5406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 94.430817][ T5409] lo speed is unknown, defaulting to 1000 [ 94.482295][ T5409] lo speed is unknown, defaulting to 1000 [ 94.488810][ T5409] lo speed is unknown, defaulting to 1000 [ 94.548033][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 94.807074][ T5416] siw: device registration error -23 [ 94.846972][ T5418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.406'. [ 94.856985][ T5418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.406'. [ 94.941954][ T5424] xt_TCPMSS: Only works on TCP SYN packets [ 94.977498][ T5426] loop1: detected capacity change from 0 to 1024 [ 94.986401][ T5426] EXT4-fs: Ignoring removed orlov option [ 95.002152][ T5428] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 95.015195][ T5433] loop4: detected capacity change from 0 to 128 [ 95.032568][ T5428] bond1 (unregistering): Released all slaves [ 95.393385][ T5442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.997385][ T3599] kworker/u8:11: attempt to access beyond end of device [ 95.997385][ T3599] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 96.079883][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.079883][ T3599] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 96.113669][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.113669][ T3599] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 96.146675][ T5456] loop3: detected capacity change from 0 to 512 [ 96.149858][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.149858][ T3599] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 96.153439][ T5456] EXT4-fs: Ignoring removed nobh option [ 96.203306][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.203306][ T3599] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 96.221128][ T5456] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.419: corrupted inode contents [ 96.240065][ T5456] EXT4-fs (loop3): Remounting filesystem read-only [ 96.249926][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.249926][ T3599] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 96.270418][ T5456] EXT4-fs (loop3): 1 truncate cleaned up [ 96.286625][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.286625][ T3599] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 96.290563][ T5456] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.300587][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.300587][ T3599] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 96.324269][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.324269][ T3599] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 96.338277][ T3599] kworker/u8:11: attempt to access beyond end of device [ 96.338277][ T3599] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 96.393636][ T5462] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.464226][ T5462] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.490631][ T5452] loop1: detected capacity change from 0 to 512 [ 96.504902][ T5452] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.415: bad orphan inode 11862016 [ 96.517139][ T5462] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.527520][ T5452] EXT4-fs mount: 15 callbacks suppressed [ 96.527534][ T5452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.555337][ T5452] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.579830][ T5471] 9pnet_fd: Insufficient options for proto=fd [ 96.591299][ T5462] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.606650][ T5471] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 96.620170][ T5471] team0: Port device dummy0 added [ 96.628004][ T5469] bridge_slave_0: left allmulticast mode [ 96.633724][ T5469] bridge_slave_0: left promiscuous mode [ 96.639457][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.664664][ T5469] bridge_slave_1: left allmulticast mode [ 96.670388][ T5469] bridge_slave_1: left promiscuous mode [ 96.676185][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.685592][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.709926][ T5474] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 96.717716][ T5474] __nla_validate_parse: 1 callbacks suppressed [ 96.717729][ T5474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.421'. [ 96.735449][ T5469] bond0: (slave bond_slave_0): Releasing backup interface [ 96.744426][ T5469] bond0: (slave bond_slave_1): Releasing backup interface [ 96.753431][ T5469] team0: Port device team_slave_0 removed [ 96.760472][ T5469] team0: Port device team_slave_1 removed [ 96.776217][ T5469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.791037][ T5469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.800311][ T5469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.812674][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 96.920096][ T2770] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.016508][ T5478] hsr_slave_0: left promiscuous mode [ 97.047594][ T5478] hsr_slave_1: left promiscuous mode [ 97.069186][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.090586][ T5474] veth1_vlan: left promiscuous mode [ 97.097109][ T5474] batman_adv: batadv0: Adding interface: veth1_vlan [ 97.103834][ T5474] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.223905][ T5474] batman_adv: batadv0: Interface activated: veth1_vlan [ 97.329233][ T2770] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.378637][ T5488] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 97.394047][ T5486] loop4: detected capacity change from 0 to 8192 [ 97.395015][ T5481] lo speed is unknown, defaulting to 1000 [ 97.435133][ T5490] netlink: 156 bytes leftover after parsing attributes in process `syz.3.424'. [ 97.436099][ T5481] lo speed is unknown, defaulting to 1000 [ 97.450514][ T2770] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.458852][ T2770] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.463657][ T5490] netlink: 156 bytes leftover after parsing attributes in process `syz.3.424'. [ 97.486662][ T5481] lo speed is unknown, defaulting to 1000 [ 97.612056][ T5503] netlink: 156 bytes leftover after parsing attributes in process `syz.0.428'. [ 97.638119][ T5498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.647027][ T5503] netlink: 156 bytes leftover after parsing attributes in process `syz.0.428'. [ 97.660155][ T5502] macvtap0: refused to change device tx_queue_len [ 97.697100][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 98.013033][ T5514] lo speed is unknown, defaulting to 1000 [ 98.066637][ T5514] lo speed is unknown, defaulting to 1000 [ 98.072918][ T5514] lo speed is unknown, defaulting to 1000 [ 98.345800][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 98.466223][ T5522] loop4: detected capacity change from 0 to 512 [ 98.494710][ T5522] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.432: error while reading EA inode 32 err=-116 [ 98.528100][ T5522] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.432: error while reading EA inode 32 err=-116 [ 98.588811][ T5522] EXT4-fs (loop4): 1 orphan inode deleted [ 98.670478][ T5522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.780019][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 98.780273][ T29] audit: type=1326 audit(1761980556.579:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fa2e05e67 code=0x7ffc0000 [ 98.821954][ T29] audit: type=1326 audit(1761980556.579:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2fa2dab099 code=0x7ffc0000 [ 98.845283][ T29] audit: type=1326 audit(1761980556.579:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2fa2e0efc9 code=0x7ffc0000 [ 98.868498][ T29] audit: type=1326 audit(1761980556.579:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fa2e05e67 code=0x7ffc0000 [ 98.891741][ T29] audit: type=1326 audit(1761980556.579:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2fa2dab099 code=0x7ffc0000 [ 98.915007][ T29] audit: type=1326 audit(1761980556.579:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2fa2e0efc9 code=0x7ffc0000 [ 98.938234][ T29] audit: type=1326 audit(1761980556.579:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fa2e05e67 code=0x7ffc0000 [ 98.961845][ T29] audit: type=1326 audit(1761980556.579:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2fa2dab099 code=0x7ffc0000 [ 98.985069][ T29] audit: type=1326 audit(1761980556.579:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2fa2e0efc9 code=0x7ffc0000 [ 99.008842][ T29] audit: type=1326 audit(1761980556.609:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fa2e05e67 code=0x7ffc0000 [ 99.471476][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.618351][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 99.653631][ T5544] loop4: detected capacity change from 0 to 512 [ 99.674799][ T5545] SELinux: security_context_str_to_sid (t A@9WV)MB^؅ `UF.JR8r(# X-9)) failed with errno=-22 [ 99.729838][ T5544] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 99.737878][ T5544] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.908868][ T5544] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.436: corrupted inode contents [ 99.977300][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 100.147710][ T5552] lo speed is unknown, defaulting to 1000 [ 100.197108][ T5552] lo speed is unknown, defaulting to 1000 [ 100.203526][ T5552] lo speed is unknown, defaulting to 1000 [ 100.334937][ T5544] EXT4-fs (loop4): 1 truncate cleaned up [ 100.340763][ T3599] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.351309][ T3599] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.427351][ T3599] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 100.454638][ T5544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.490860][ T5544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.625496][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 100.650013][ T5557] bridge_slave_1: left allmulticast mode [ 100.655785][ T5557] bridge_slave_1: left promiscuous mode [ 100.661526][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.675784][ T5557] bridge_slave_0: left allmulticast mode [ 100.681546][ T5557] bridge_slave_0: left promiscuous mode [ 100.687317][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.702596][ T5557] batman_adv: batadv0: Interface deactivated: macvtap1 [ 100.721273][ T5557] batman_adv: batadv0: Interface deactivated: macvtap2 [ 100.758790][ T5557] bridge0 (unregistering): left allmulticast mode [ 100.775510][ T5557] batman_adv: batadv0: Removing interface: macvtap1 [ 100.800412][ T5557] batman_adv: batadv0: Removing interface: macvtap2 [ 100.962760][ T5566] loop4: detected capacity change from 0 to 512 [ 100.991689][ T5566] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.442: bad orphan inode 11862016 [ 101.003112][ T5566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.011418][ T5572] $H: renamed from bond0 [ 101.015860][ T5566] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.035445][ T5572] $H: entered promiscuous mode [ 101.040522][ T5572] bond_slave_0: entered promiscuous mode [ 101.046212][ T5572] bond_slave_1: entered promiscuous mode [ 101.161794][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.173520][ T5576] bridge0: entered promiscuous mode [ 101.178875][ T5576] macvtap1: entered allmulticast mode [ 101.184289][ T5576] bridge0: entered allmulticast mode [ 101.192691][ T5576] batman_adv: batadv0: Adding interface: macvtap1 [ 101.199225][ T5576] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.259741][ T5576] batman_adv: batadv0: Interface activated: macvtap1 [ 101.465769][ T5588] lo speed is unknown, defaulting to 1000 [ 101.523873][ T5588] lo speed is unknown, defaulting to 1000 [ 101.530381][ T5588] lo speed is unknown, defaulting to 1000 [ 101.617570][ T5576] hub 1-0:1.0: USB hub found [ 101.694669][ T5576] hub 1-0:1.0: 8 ports detected [ 101.832880][ T5592] SELinux: security_context_str_to_sid (q$'0<;PG*:alDmo|zcۖݠ۝mIHҪd.92Jvz NT  >sYҋnkOArG#.%j4aUw쾓H#|@D$ Tq4b0G%= ~m$fr= h!6:mYR!Ke [ 101.832880][ T5592] k8AqzM$ ^60j=xK{ru@}) failed with errno=-22 [ 101.956079][ T5595] xt_CT: No such helper "pptp" [ 101.965284][ T5599] xt_nat: multiple ranges no longer supported [ 102.131316][ T5605] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.299916][ T5607] xt_CT: No such helper "pptp" [ 102.439907][ T5609] lo speed is unknown, defaulting to 1000 [ 102.493232][ T5609] lo speed is unknown, defaulting to 1000 [ 102.499686][ T5609] lo speed is unknown, defaulting to 1000 [ 102.557329][ T5605] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.568548][ T5610] xt_nat: multiple ranges no longer supported [ 102.637978][ T5621] __nla_validate_parse: 1 callbacks suppressed [ 102.637994][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 102.644511][ T5618] loop1: detected capacity change from 0 to 2048 [ 102.660935][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 102.680475][ T4521] loop1: p2 < > p4 [ 102.685546][ T4521] loop1: p4 size 262144 extends beyond EOD, truncated [ 102.758846][ T5605] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.903406][ T5605] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.010065][ T3550] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.028891][ T3550] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.081034][ T3550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.106019][ T5631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.131737][ T5618] loop1: p2 < > p4 [ 103.135766][ T3550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.162932][ T5632] siw: device registration error -23 [ 103.173604][ T5618] loop1: p4 size 262144 extends beyond EOD, truncated [ 103.186043][ T5634] SELinux: Context is not valid (left unmapped). [ 103.243231][ T5636] netlink: 'syz.0.462': attribute type 21 has an invalid length. [ 103.252769][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 103.316320][ T4521] udevd[4521]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 103.375806][ T4521] udevd[4521]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 103.385642][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 103.401218][ T5639] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.516161][ T5639] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.558022][ T5625] loop4: detected capacity change from 0 to 512 [ 103.604921][ T5639] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.626266][ T5625] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.458: bad orphan inode 11862016 [ 103.693572][ T5639] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.699438][ T5625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.734386][ T5625] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.945861][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.996196][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 103.996270][ T29] audit: type=1400 audit(1761980561.789:7150): avc: denied { sys_module } for pid=5655 comm="syz.4.466" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.026384][ T5659] SELinux: security_context_str_to_sid (}o]+{!kǟ1!Gz64toX'7gkWGWDrmp&Q5(D q+٪O(`H+Psi?5 G&$h/) failed with errno=-22 [ 104.026448][ T29] audit: type=1326 audit(1761980561.819:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.066619][ T29] audit: type=1326 audit(1761980561.819:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.089880][ T29] audit: type=1326 audit(1761980561.819:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.113312][ T29] audit: type=1326 audit(1761980561.819:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.136830][ T29] audit: type=1326 audit(1761980561.819:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.160154][ T29] audit: type=1326 audit(1761980561.819:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.183768][ T29] audit: type=1326 audit(1761980561.819:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.207199][ T29] audit: type=1326 audit(1761980561.819:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.230569][ T29] audit: type=1326 audit(1761980561.819:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 104.304145][ T5663] binfmt_misc: register: failed to install interpreter file ./file2 [ 104.319032][ T5663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 104.328653][ T5663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 104.343674][ T5660] hub 1-0:1.0: USB hub found [ 104.348354][ T5660] hub 1-0:1.0: 8 ports detected [ 104.457916][ T5668] SELinux: security_context_str_to_sid (t@/+"_xˀ/\)28сÎ@t{+|ORa0mn/)SW"Yx /|ǭ1D2%T&wUwe[0I_ @M+#u@++g[tT`q22B%j9^7m7\ [ 104.457916][ T5668] yS&9]A'U̮4|DTXuߤMmv+L!F2Oz8DS|?bBׄbry2}(1s]jBz|ܷr%%A(P}뒄&mi!) failed with errno=-22 [ 107.981623][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.016429][ T5735] loop1: detected capacity change from 0 to 128 [ 108.027131][ T5737] loop4: detected capacity change from 0 to 256 [ 108.083600][ T5737] vfat: Unknown parameter 'shortnamg' [ 108.121671][ T5737] loop4: detected capacity change from 0 to 512 [ 108.161852][ T5737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.187007][ T5737] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.308470][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.423891][ T5746] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 108.433429][ T5746] siw: device registration error -23 [ 108.462027][ T5735] bio_check_eod: 101 callbacks suppressed [ 108.462044][ T5735] syz.1.486: attempt to access beyond end of device [ 108.462044][ T5735] loop1: rw=1, sector=937, nr_sectors = 104 limit=128 [ 108.465032][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 108.469123][ T5735] syz.1.486: attempt to access beyond end of device [ 108.469123][ T5735] loop1: rw=1, sector=145, nr_sectors = 792 limit=128 [ 108.525591][ T5712] syz.0.481 (5712) used greatest stack depth: 6376 bytes left [ 108.553149][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.486'. [ 108.605752][ T5750] blkio.reset_stats is deprecated [ 108.630850][ T5750] vlan2: entered allmulticast mode [ 108.635991][ T5750] bridge_slave_0: entered allmulticast mode [ 108.739922][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 108.748742][ T5760] batadv1: left allmulticast mode [ 108.748953][ T5756] loop4: detected capacity change from 0 to 2048 [ 108.753896][ T5760] batadv1: left promiscuous mode [ 108.765242][ T5760] bridge0: port 3(batadv1) entered disabled state [ 108.781819][ T5763] SELinux: security_context_str_to_sid ($ikX4=7TF?&oL2z@8sERPz=uUcA[@) [ 108.781819][ T5763] #T_/lL5ٛv6xU'k?] Q#:%-W|#JB;@7玵:) failed with errno=-22 [ 108.818571][ T5756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.832830][ T5756] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.846214][ T5756] EXT4-fs (loop4): shut down requested (2) [ 108.859860][ T5756] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 108.866596][ T5756] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.874458][ T5756] vhci_hcd vhci_hcd.0: Device attached [ 108.911161][ T5768] vhci_hcd: connection closed [ 108.911843][ T3599] vhci_hcd: stop threads [ 108.920869][ T3599] vhci_hcd: release socket [ 108.925298][ T3599] vhci_hcd: disconnect device [ 109.009619][ T5772] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 109.113263][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 109.113278][ T29] audit: type=1400 audit(1761980566.909:7386): avc: denied { create } for pid=5761 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.145705][ T29] audit: type=1400 audit(1761980566.939:7387): avc: denied { connect } for pid=5761 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.165531][ T29] audit: type=1400 audit(1761980566.939:7388): avc: denied { write } for pid=5761 comm="syz.1.494" path="socket:[12195]" dev="sockfs" ino=12195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.274369][ T5644] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.305492][ T29] audit: type=1400 audit(1761980567.099:7389): avc: denied { read append } for pid=5777 comm="syz.1.496" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.329244][ T29] audit: type=1400 audit(1761980567.099:7390): avc: denied { open } for pid=5777 comm="syz.1.496" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.354807][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 109.366204][ T29] audit: type=1400 audit(1761980567.159:7391): avc: denied { ioctl } for pid=5777 comm="syz.1.496" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.367171][ T5644] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.406711][ T29] audit: type=1400 audit(1761980567.199:7392): avc: denied { write } for pid=5775 comm="syz.2.497" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.409462][ T5776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5776 comm=syz.2.497 [ 109.439743][ T5776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5776 comm=syz.2.497 [ 109.470791][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 109.556853][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.583695][ T5644] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.603256][ T5778] sch_fq: defrate 4294967295 ignored. [ 109.609189][ T5778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5778 comm=syz.1.496 [ 109.622572][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 109.632825][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 109.653169][ T5782] netlink: 23 bytes leftover after parsing attributes in process `syz.2.499'. [ 109.660192][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 109.693258][ T29] audit: type=1400 audit(1761980567.469:7393): avc: denied { execmem } for pid=5783 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 109.712489][ T29] audit: type=1400 audit(1761980567.479:7394): avc: denied { read write } for pid=5781 comm="syz.2.499" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.736066][ T29] audit: type=1400 audit(1761980567.479:7395): avc: denied { ioctl open } for pid=5781 comm="syz.2.499" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.986560][ T5793] lo speed is unknown, defaulting to 1000 [ 110.041250][ T5793] lo speed is unknown, defaulting to 1000 [ 110.047915][ T5793] lo speed is unknown, defaulting to 1000 [ 110.132737][ T5795] xt_TCPMSS: Only works on TCP SYN packets [ 110.792246][ T5790] loop1: detected capacity change from 0 to 512 [ 110.849542][ T5790] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.511: bad orphan inode 11862016 [ 110.871069][ T5807] loop4: detected capacity change from 0 to 128 [ 110.880564][ T5790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.952536][ T5790] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.017325][ T5791] lo speed is unknown, defaulting to 1000 [ 111.089360][ T2770] kworker/u8:6: attempt to access beyond end of device [ 111.089360][ T2770] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 111.133577][ T2770] kworker/u8:6: attempt to access beyond end of device [ 111.133577][ T2770] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 111.151406][ T2770] kworker/u8:6: attempt to access beyond end of device [ 111.151406][ T2770] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 111.154790][ T5791] lo speed is unknown, defaulting to 1000 [ 111.188157][ T2770] kworker/u8:6: attempt to access beyond end of device [ 111.188157][ T2770] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 111.229047][ T5807] syz.4.503: attempt to access beyond end of device [ 111.229047][ T5807] loop4: rw=1, sector=937, nr_sectors = 104 limit=128 [ 111.243609][ T5807] syz.4.503: attempt to access beyond end of device [ 111.243609][ T5807] loop4: rw=1, sector=145, nr_sectors = 792 limit=128 [ 111.274444][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.274673][ T5791] lo speed is unknown, defaulting to 1000 [ 111.373124][ T5811] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 111.388363][ T5814] loop4: detected capacity change from 0 to 1024 [ 111.412208][ T5811] bond1 (unregistering): Released all slaves [ 111.418588][ T5814] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 111.659073][ T5820] hub 1-0:1.0: USB hub found [ 111.664007][ T5820] hub 1-0:1.0: 8 ports detected [ 111.986837][ T3599] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.998040][ T3599] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.009318][ T3599] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.020677][ T3599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.062831][ T5835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.073168][ T5830] batman_adv: batadv0: Interface deactivated: macvtap1 [ 112.087397][ T5830] bridge0 (unregistering): left allmulticast mode [ 112.095896][ T5833] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 112.106964][ T5830] batman_adv: batadv0: Removing interface: macvtap1 [ 112.150751][ T5837] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 112.165359][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.174228][ T5833] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.189659][ T5837] batadv0: entered promiscuous mode [ 112.194915][ T5837] batadv0: entered allmulticast mode [ 112.217340][ T5837] bond0: (slave batadv0): Releasing backup interface [ 112.240755][ T5837] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 112.350268][ T5832] loop4: detected capacity change from 0 to 512 [ 112.363247][ T5832] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.508: bad orphan inode 11862016 [ 112.378730][ T5832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.391419][ T5832] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.410731][ T5844] veth0_to_team: entered promiscuous mode [ 112.481946][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.511793][ T5841] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 113.394531][ T5870] loop1: detected capacity change from 0 to 512 [ 113.483869][ T5867] lo speed is unknown, defaulting to 1000 [ 113.579368][ T5870] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.518: inode #0: comm syz.1.518: iget: illegal inode # [ 113.614191][ T5867] lo speed is unknown, defaulting to 1000 [ 113.620826][ T5867] lo speed is unknown, defaulting to 1000 [ 113.699973][ T5870] EXT4-fs (loop1): get orphan inode failed [ 113.706031][ T5870] EXT4-fs (loop1): mount failed [ 114.049033][ T5867] __nla_validate_parse: 4 callbacks suppressed [ 114.049051][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 114.255976][ T5877] loop4: detected capacity change from 0 to 512 [ 114.295032][ T5877] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.521: bad orphan inode 11862016 [ 114.326795][ T5877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.361919][ T5886] lo speed is unknown, defaulting to 1000 [ 114.392507][ T5886] lo speed is unknown, defaulting to 1000 [ 114.398790][ T5886] lo speed is unknown, defaulting to 1000 [ 114.423353][ T5877] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.584067][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.026726][ T5902] lo speed is unknown, defaulting to 1000 [ 115.080427][ T5902] lo speed is unknown, defaulting to 1000 [ 115.086879][ T5902] lo speed is unknown, defaulting to 1000 [ 115.276449][ T5895] loop1: detected capacity change from 0 to 512 [ 115.352011][ T5895] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.524: bad orphan inode 11862016 [ 115.416869][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.491528][ T5895] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.829474][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.901093][ T5911] loop1: detected capacity change from 0 to 128 [ 115.908494][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 115.908507][ T29] audit: type=1326 audit(1761980573.699:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 115.988192][ T29] audit: type=1326 audit(1761980573.729:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 115.988702][ T5911] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 116.011650][ T29] audit: type=1326 audit(1761980573.729:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.011710][ T29] audit: type=1326 audit(1761980573.739:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.011747][ T29] audit: type=1326 audit(1761980573.739:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.089469][ T29] audit: type=1326 audit(1761980573.739:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.112799][ T29] audit: type=1326 audit(1761980573.739:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.120183][ T5917] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 116.136236][ T29] audit: type=1326 audit(1761980573.739:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.136389][ T29] audit: type=1326 audit(1761980573.739:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.144018][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.527'. [ 116.167309][ T29] audit: type=1326 audit(1761980573.739:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 116.237310][ T5917] batadv0: entered promiscuous mode [ 116.242600][ T5917] batadv0: entered allmulticast mode [ 116.248189][ T5917] bridge0: port 3(batadv0) entered blocking state [ 116.254678][ T5917] bridge0: port 3(batadv0) entered disabled state [ 116.264387][ T5917] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 116.280417][ T5911] batadv0: left promiscuous mode [ 116.285365][ T5911] batadv0: left allmulticast mode [ 116.297964][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.306508][ T5911] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.446446][ T5910] lo speed is unknown, defaulting to 1000 [ 116.517204][ T5913] loop4: detected capacity change from 0 to 512 [ 116.580384][ T5914] lo speed is unknown, defaulting to 1000 [ 116.590200][ T5910] lo speed is unknown, defaulting to 1000 [ 116.604114][ T5910] lo speed is unknown, defaulting to 1000 [ 116.643029][ T5913] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.529: bad orphan inode 11862016 [ 116.675778][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 116.700049][ T5914] lo speed is unknown, defaulting to 1000 [ 116.701516][ T5913] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.719668][ T5914] lo speed is unknown, defaulting to 1000 [ 116.913292][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.934051][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.944190][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 116.955513][ T5929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.055321][ T5935] macvtap0: refused to change device tx_queue_len [ 117.102844][ T5940] loop4: detected capacity change from 0 to 512 [ 117.109690][ T5940] EXT4-fs: Ignoring removed nobh option [ 117.127094][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 117.161400][ T5940] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.534: corrupted inode contents [ 117.186980][ T5940] EXT4-fs (loop4): Remounting filesystem read-only [ 117.361726][ T5940] EXT4-fs (loop4): 1 truncate cleaned up [ 117.494039][ T5940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.152078][ T5940] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.185285][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.157654][ T5956] sch_fq: defrate 4294967295 ignored. [ 120.795148][ T5951] lo speed is unknown, defaulting to 1000 [ 120.829228][ T5951] lo speed is unknown, defaulting to 1000 [ 120.835364][ T5951] lo speed is unknown, defaulting to 1000 [ 120.861666][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.889585][ T5956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5956 comm=syz.3.539 [ 120.916561][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.926230][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.936141][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.947632][ T5963] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.033794][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 121.033807][ T29] audit: type=1400 audit(1761980578.829:8027): avc: denied { create } for pid=5962 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.137068][ T29] audit: type=1400 audit(1761980578.859:8028): avc: denied { connect } for pid=5962 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.156901][ T29] audit: type=1400 audit(1761980578.879:8029): avc: denied { checkpoint_restore } for pid=5966 comm="syz.1.551" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.178701][ T29] audit: type=1326 audit(1761980578.879:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.202328][ T29] audit: type=1326 audit(1761980578.879:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.225848][ T29] audit: type=1326 audit(1761980578.879:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.249370][ T29] audit: type=1326 audit(1761980578.879:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.272920][ T29] audit: type=1326 audit(1761980578.879:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.296245][ T29] audit: type=1326 audit(1761980578.879:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.319681][ T29] audit: type=1326 audit(1761980578.879:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 121.369742][ T5965] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 121.525349][ T5979] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 121.533131][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.556'. [ 121.552473][ T5979] veth1_vlan: left promiscuous mode [ 121.575609][ T5979] batman_adv: batadv0: Adding interface: veth1_vlan [ 121.582276][ T5979] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.660109][ T5979] batman_adv: batadv0: Interface activated: veth1_vlan [ 121.667442][ T5969] loop4: detected capacity change from 0 to 512 [ 121.693228][ T5987] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 121.723859][ T5969] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.542: bad orphan inode 11862016 [ 121.734783][ T5992] $H: renamed from bond0 (while UP) [ 121.740455][ T5969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.753398][ T5969] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.765447][ T5992] $H: entered promiscuous mode [ 121.770532][ T5992] bond_slave_0: entered promiscuous mode [ 121.776291][ T5992] bond_slave_1: entered promiscuous mode [ 121.819980][ T5992] dummy0: entered promiscuous mode [ 121.825296][ T5992] batadv0: entered promiscuous mode [ 121.949934][ T5997] macvtap3: entered allmulticast mode [ 121.956404][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.958223][ T5997] batman_adv: batadv0: Adding interface: macvtap3 [ 121.972009][ T5997] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.999163][ T5997] batman_adv: batadv0: Interface activated: macvtap3 [ 122.021664][ T5987] lo speed is unknown, defaulting to 1000 [ 122.072401][ T5987] lo speed is unknown, defaulting to 1000 [ 122.079028][ T5987] lo speed is unknown, defaulting to 1000 [ 122.105719][ T5998] hub 1-0:1.0: USB hub found [ 122.113923][ T5998] hub 1-0:1.0: 8 ports detected [ 122.334679][ T6004] loop9: detected capacity change from 0 to 7 [ 122.342209][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.350787][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.358648][ T4521] loop9: unable to read partition table [ 122.394380][ T6004] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.410654][ T6004] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.418543][ T6004] loop9: unable to read partition table [ 122.529796][ T6004] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 122.529796][ T6004] ) failed (rc=-5) [ 122.556620][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.570147][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.578510][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.609906][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.759473][ T6009] lo speed is unknown, defaulting to 1000 [ 122.818129][ T6009] lo speed is unknown, defaulting to 1000 [ 122.824390][ T6009] lo speed is unknown, defaulting to 1000 [ 122.943121][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.887223][ T6017] lo speed is unknown, defaulting to 1000 [ 123.926708][ T6017] lo speed is unknown, defaulting to 1000 [ 123.932948][ T6017] lo speed is unknown, defaulting to 1000 [ 125.268267][ T6030] xt_CT: No such helper "pptp" [ 125.294823][ T6030] xt_nat: multiple ranges no longer supported [ 125.424373][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 125.492810][ T6037] loop4: detected capacity change from 0 to 512 [ 125.520143][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.557'. [ 125.569835][ T6037] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.612403][ T6037] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.560: orphan file block 0: bad magic [ 125.667032][ T6037] EXT4-fs (loop4): mount failed [ 126.002348][ T6048] loop4: detected capacity change from 0 to 128 [ 126.014013][ T6048] serio: Serial port ptm1 [ 126.020859][ T6046] lo speed is unknown, defaulting to 1000 [ 126.039822][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 126.039838][ T29] audit: type=1326 audit(1761980583.809:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f496fad64b7 code=0x7ffc0000 [ 126.054185][ T6046] lo speed is unknown, defaulting to 1000 [ 126.069290][ T29] audit: type=1326 audit(1761980583.809:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.075472][ T6046] lo speed is unknown, defaulting to 1000 [ 126.098336][ T29] audit: type=1326 audit(1761980583.809:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.127320][ T29] audit: type=1326 audit(1761980583.809:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.150653][ T29] audit: type=1326 audit(1761980583.809:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.219656][ T29] audit: type=1326 audit(1761980583.999:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f496fb1ebcb code=0x7ffc0000 [ 126.242980][ T29] audit: type=1326 audit(1761980583.999:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.266354][ T29] audit: type=1326 audit(1761980583.999:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.289680][ T29] audit: type=1326 audit(1761980583.999:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.313088][ T29] audit: type=1326 audit(1761980584.009:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 126.713637][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 126.716167][ T6053] netlink: 'syz.4.572': attribute type 10 has an invalid length. [ 126.750003][ T6053] netlink: 'syz.4.572': attribute type 10 has an invalid length. [ 126.757747][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.572'. [ 126.779882][ T6053] batadv0: entered promiscuous mode [ 126.785114][ T6053] batadv0: entered allmulticast mode [ 126.805209][ T6053] bond0: (slave batadv0): Releasing backup interface [ 126.812606][ T6053] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 126.831643][ T6052] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 126.850135][ T3401] lo speed is unknown, defaulting to 1000 [ 126.855879][ T3401] syz2: Port: 1 Link DOWN [ 126.932736][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 126.943257][ T6059] netlink: 76 bytes leftover after parsing attributes in process `syz.3.564'. [ 126.970677][ T6062] bridge_slave_1: left allmulticast mode [ 126.976361][ T6062] bridge_slave_1: left promiscuous mode [ 126.982513][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.018780][ T6062] bridge_slave_0: left allmulticast mode [ 127.024592][ T6062] bridge_slave_0: left promiscuous mode [ 127.030430][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.070383][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.079379][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.092312][ T6062] batman_adv: batadv0: Interface deactivated: macvtap2 [ 127.099406][ T6062] batman_adv: batadv0: Interface deactivated: macvtap3 [ 127.106519][ T6062] bridge0 (unregistering): left allmulticast mode [ 127.115849][ T6062] batman_adv: batadv0: Removing interface: macvtap1 [ 127.122756][ T6077] loop1: detected capacity change from 0 to 1024 [ 127.131693][ T6062] batman_adv: batadv0: Removing interface: macvtap2 [ 127.148545][ T6077] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.563: Failed to acquire dquot type 0 [ 127.163017][ T6077] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 127.178730][ T6062] batman_adv: batadv0: Removing interface: macvtap3 [ 127.186311][ T6077] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.563: corrupted inode contents [ 127.199682][ T6077] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.563: mark_inode_dirty error [ 127.211459][ T6077] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.563: corrupted inode contents [ 127.223705][ T6077] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.563: mark_inode_dirty error [ 127.235377][ T6077] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.563: corrupted inode contents [ 127.247837][ T6077] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 127.260938][ T6077] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.563: corrupted inode contents [ 127.273195][ T6077] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.563: mark_inode_dirty error [ 127.284826][ T6077] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 127.294206][ T6077] EXT4-fs (loop1): 1 truncate cleaned up [ 127.303061][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.330395][ T6077] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.376815][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 127.385759][ T6070] netlink: 196 bytes leftover after parsing attributes in process `syz.2.566'. [ 127.394906][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 127.403873][ T6070] netlink: 196 bytes leftover after parsing attributes in process `syz.2.566'. [ 127.413074][ T6082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6082 comm=syz.4.568 [ 127.428633][ T6081] sch_fq: defrate 4294967295 ignored. [ 127.569907][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.849693][ T6108] hub 1-0:1.0: USB hub found [ 127.877594][ T6108] hub 1-0:1.0: 8 ports detected [ 129.177454][ T6118] loop4: detected capacity change from 0 to 512 [ 129.237339][ T6118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.292237][ T6118] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.351941][ T6122] ip6t_srh: unknown srh match flags 4000 [ 129.544154][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.819971][ T6135] siw: device registration error -23 [ 130.014321][ T6124] loop1: detected capacity change from 0 to 512 [ 130.043693][ T6124] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.581: bad orphan inode 11862016 [ 130.057836][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 130.080146][ T6124] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.234420][ T6151] lo speed is unknown, defaulting to 1000 [ 130.290492][ T6151] lo speed is unknown, defaulting to 1000 [ 130.296736][ T6151] lo speed is unknown, defaulting to 1000 [ 131.171074][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 131.689008][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 131.689023][ T29] audit: type=1400 audit(1761980589.479:8406): avc: denied { write } for pid=6158 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.797443][ T29] audit: type=1400 audit(1761980589.519:8407): avc: denied { name_bind } for pid=6163 comm="syz.2.593" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 131.819340][ T29] audit: type=1400 audit(1761980589.519:8408): avc: denied { create } for pid=6163 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 131.840318][ T29] audit: type=1400 audit(1761980589.519:8409): avc: denied { write } for pid=6163 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 131.861883][ T29] audit: type=1400 audit(1761980589.519:8410): avc: denied { read } for pid=6163 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 131.882706][ T29] audit: type=1400 audit(1761980589.549:8411): avc: denied { getopt } for pid=6158 comm="syz.3.592" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.923537][ T6164] hub 1-0:1.0: USB hub found [ 131.953092][ T6164] hub 1-0:1.0: 8 ports detected [ 132.103375][ T29] audit: type=1326 audit(1761980589.779:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 132.126781][ T29] audit: type=1326 audit(1761980589.779:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 132.150169][ T29] audit: type=1326 audit(1761980589.789:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 132.173696][ T29] audit: type=1326 audit(1761980589.789:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 132.265570][ T6178] loop4: detected capacity change from 0 to 512 [ 132.334177][ T6184] __nla_validate_parse: 7 callbacks suppressed [ 132.334193][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 132.349325][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 132.370049][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 132.381483][ T6178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.400357][ T6178] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.473056][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.599070][ T6196] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.622301][ T6196] rdma_rxe: rxe_newlink: failed to add bond0 [ 132.879244][ T6193] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.060878][ T6210] lo speed is unknown, defaulting to 1000 [ 133.116141][ T6210] lo speed is unknown, defaulting to 1000 [ 133.122746][ T6210] lo speed is unknown, defaulting to 1000 [ 133.302014][ T6214] $H: (slave dummy0): Releasing backup interface [ 133.325448][ T6214] dummy0: left promiscuous mode [ 133.347059][ T6214] $H: (slave batadv0): Releasing backup interface [ 133.441133][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 133.475528][ T6214] batadv0: left promiscuous mode [ 133.496676][ T6221] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 133.504484][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'. [ 133.519469][ T6214] $H: (slave bond_slave_0): Releasing backup interface [ 133.547930][ T6214] bond_slave_0: left promiscuous mode [ 133.568792][ T6214] $H: (slave bond_slave_1): Releasing backup interface [ 133.627351][ T6214] bond_slave_1: left promiscuous mode [ 133.638152][ T6214] team0: Port device C removed [ 133.651498][ T6214] team0: Port device team_slave_1 removed [ 133.690107][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.703159][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.756077][ T6221] veth1_vlan: left promiscuous mode [ 133.768457][ T6221] batman_adv: batadv0: Adding interface: veth1_vlan [ 133.775101][ T6221] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.837088][ T6221] batman_adv: batadv0: Interface activated: veth1_vlan [ 133.998190][ T6236] pim6reg: entered allmulticast mode [ 134.029161][ T6236] pim6reg: left allmulticast mode [ 134.062715][ T6227] lo speed is unknown, defaulting to 1000 [ 134.266585][ T6260] hub 1-0:1.0: USB hub found [ 134.267531][ T6227] lo speed is unknown, defaulting to 1000 [ 134.327168][ T6260] hub 1-0:1.0: 8 ports detected [ 134.327575][ T6227] lo speed is unknown, defaulting to 1000 [ 134.435798][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 134.474591][ T6269] pim6reg: entered allmulticast mode [ 134.489919][ T6269] pim6reg: left allmulticast mode [ 134.547372][ T6270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 134.553917][ T6270] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.561561][ T6270] vhci_hcd vhci_hcd.0: Device attached [ 134.592737][ T6238] lo speed is unknown, defaulting to 1000 [ 134.665815][ T6271] vhci_hcd: connection closed [ 134.666526][ T3550] vhci_hcd: stop threads [ 134.672442][ T6238] lo speed is unknown, defaulting to 1000 [ 134.675484][ T3550] vhci_hcd: release socket [ 134.685628][ T3550] vhci_hcd: disconnect device [ 134.721956][ T6238] lo speed is unknown, defaulting to 1000 [ 134.817715][ T6232] lo speed is unknown, defaulting to 1000 [ 134.871418][ T6232] lo speed is unknown, defaulting to 1000 [ 134.910271][ T6232] lo speed is unknown, defaulting to 1000 [ 134.912389][ T6276] loop1: detected capacity change from 0 to 512 [ 134.940565][ T6276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.960489][ T6276] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.613: orphan file block 0: bad magic [ 134.990308][ T6276] EXT4-fs (loop1): mount failed [ 135.298406][ T6285] loop1: detected capacity change from 0 to 128 [ 135.310456][ T6285] serio: Serial port ptm1 [ 135.390349][ T6289] loop4: detected capacity change from 0 to 512 [ 135.398750][ T6293] SELinux: security_context_str_to_sid (sX&q*21uDVȥgNPI&lGNn|A*:9:A[v&P>y皤\SMK+W\Ɛ1p [ 135.398750][ T6293] AQmC;S8+WSV]N}6) failed with errno=-22 [ 135.430264][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 135.520626][ T6289] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.614: inode #0: comm syz.4.614: iget: illegal inode # [ 135.573711][ T6282] lo speed is unknown, defaulting to 1000 [ 135.606925][ T6282] lo speed is unknown, defaulting to 1000 [ 135.613023][ T6282] lo speed is unknown, defaulting to 1000 [ 135.662556][ T6289] EXT4-fs (loop4): get orphan inode failed [ 135.687199][ T6289] EXT4-fs (loop4): mount failed [ 135.892005][ T6284] lo speed is unknown, defaulting to 1000 [ 136.320032][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 136.332142][ T6284] lo speed is unknown, defaulting to 1000 [ 136.341956][ T6305] lo speed is unknown, defaulting to 1000 [ 136.470537][ T6305] lo speed is unknown, defaulting to 1000 [ 136.476754][ T6305] lo speed is unknown, defaulting to 1000 [ 136.567050][ T6284] lo speed is unknown, defaulting to 1000 [ 136.585198][ T6313] team0: Port device dummy0 removed [ 136.627053][ T6313] $H: (slave bond_slave_0): Releasing backup interface [ 136.657702][ T6313] bond_slave_0: left promiscuous mode [ 136.687364][ T6313] $H: (slave bond_slave_1): Releasing backup interface [ 136.727519][ T6315] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 136.735417][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.619'. [ 136.787310][ T6313] bond_slave_1: left promiscuous mode [ 136.800256][ T6313] team0: Port device C removed [ 136.810419][ T6313] team0: Port device team_slave_1 removed [ 136.816422][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.845248][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.875965][ T6313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.895763][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 136.895856][ T29] audit: type=1326 audit(1761980594.699:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 136.925401][ T29] audit: type=1326 audit(1761980594.699:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496fb1efc9 code=0x7ffc0000 [ 137.027700][ T29] audit: type=1326 audit(1761980594.819:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.051231][ T29] audit: type=1326 audit(1761980594.819:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.074555][ T29] audit: type=1326 audit(1761980594.819:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.097896][ T29] audit: type=1326 audit(1761980594.819:8584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.121230][ T29] audit: type=1326 audit(1761980594.819:8585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.144646][ T29] audit: type=1326 audit(1761980594.819:8586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71a06a0ee7 code=0x7ffc0000 [ 137.167956][ T29] audit: type=1326 audit(1761980594.819:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.191433][ T29] audit: type=1326 audit(1761980594.819:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f71a069efc9 code=0x7ffc0000 [ 137.343196][ T6319] siw: device registration error -23 [ 137.506422][ T6344] pim6reg: entered allmulticast mode [ 137.520337][ T6344] pim6reg: left allmulticast mode [ 137.587214][ T6344] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 137.593839][ T6344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.601426][ T6344] vhci_hcd vhci_hcd.0: Device attached [ 137.618476][ T6349] vhci_hcd: connection closed [ 137.619213][ T3625] vhci_hcd: stop threads [ 137.628469][ T3625] vhci_hcd: release socket [ 137.633059][ T3625] vhci_hcd: disconnect device [ 138.109979][ T6363] SELinux: security_context_str_to_sid (j:`Owf=}^l%tH"tM,V/(6` [ 138.109979][ T6363] ZZ 7i:݉)o)r9xF$uV`bV^='ӷq 4ZDqg֧я֮E)8d[MYEvՏgb Mr&wAb#JT {K(&#pLxpGV/$yni~іr}yȮV%ݒ [t) failed with errno=-22 [ 138.298421][ T6366] lo speed is unknown, defaulting to 1000 [ 138.355250][ T6366] lo speed is unknown, defaulting to 1000 [ 138.361505][ T6366] lo speed is unknown, defaulting to 1000 [ 139.135429][ T6376] tmpfs: Bad value for 'mpol' [ 139.315163][ T6376] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 140.039480][ T6383] C: renamed from team_slave_0 [ 140.082950][ T6383] netlink: 'syz.4.634': attribute type 8 has an invalid length. [ 140.091447][ T6383] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 140.162995][ T6355] lo speed is unknown, defaulting to 1000 [ 140.187228][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 140.230648][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 140.333203][ T6355] lo speed is unknown, defaulting to 1000 [ 140.338893][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.639'. [ 140.339579][ T6355] lo speed is unknown, defaulting to 1000 [ 140.412570][ T6401] loop1: detected capacity change from 0 to 1024 [ 140.429278][ T6395] team0: Port device dummy0 removed [ 140.437339][ T6401] EXT4-fs: Ignoring removed orlov option [ 140.451453][ T6395] bond0: (slave bond_slave_0): Releasing backup interface [ 140.460799][ T6401] ext4: Bad value for 'min_batch_time' [ 140.476076][ T6403] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 140.483956][ T6403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.639'. [ 140.495366][ T6401] program syz.1.637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.521803][ T6395] bond0: (slave bond_slave_1): Releasing backup interface [ 140.542400][ T6395] team0: Port device C removed [ 140.557810][ T6395] team0: Port device team_slave_1 removed [ 140.570237][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.588408][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.608059][ T6395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.629948][ T6403] veth1_vlan: left promiscuous mode [ 140.645575][ T6403] batman_adv: batadv0: Adding interface: veth1_vlan [ 140.652258][ T6403] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.709802][ T6403] batman_adv: batadv0: Interface activated: veth1_vlan [ 140.855857][ T6414] SELinux: security_context_str_to_sid ({Y;|1@.Hc) >3`d`ZuD^.L=(,)Ǝj!׶8]u|ޖ`5rQwZک' &^xtu[H^{e@ЪW [ 140.855857][ T6414] /@I`hM$n̷to~S{mdHdld<;]x#Ljc]_}&) failed with errno=-22 [ 140.929624][ T6420] loop4: detected capacity change from 0 to 512 [ 140.944993][ T6420] EXT4-fs: Mount option(s) incompatible with ext3 [ 141.123973][ T6416] lo speed is unknown, defaulting to 1000 [ 141.157554][ T6416] lo speed is unknown, defaulting to 1000 [ 141.164093][ T6416] lo speed is unknown, defaulting to 1000 [ 141.669321][ T6435] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.748834][ T6437] sd 0:0:1:0: device reset [ 141.787751][ T6437] program syz.1.648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.436973][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 142.436988][ T29] audit: type=1326 audit(1761980600.209:9042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.450764][ T6468] loop9: detected capacity change from 0 to 7 [ 142.466587][ T29] audit: type=1326 audit(1761980600.209:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.495886][ T29] audit: type=1326 audit(1761980600.209:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.519275][ T29] audit: type=1326 audit(1761980600.209:9045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.542787][ T29] audit: type=1326 audit(1761980600.209:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.566103][ T29] audit: type=1326 audit(1761980600.209:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.589552][ T29] audit: type=1326 audit(1761980600.209:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.612867][ T29] audit: type=1326 audit(1761980600.209:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.636190][ T29] audit: type=1326 audit(1761980600.209:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.659734][ T29] audit: type=1326 audit(1761980600.209:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a4e90efc9 code=0x7ffc0000 [ 142.684402][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.692356][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.700220][ T4521] loop9: unable to read partition table [ 142.706056][ T6468] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.714842][ T6468] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.722759][ T6468] loop9: unable to read partition table [ 142.728935][ T6468] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.728935][ T6468] ) failed (rc=-5) [ 142.742660][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.750563][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.758482][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.766392][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.774623][ T4521] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.314594][ T6478] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 143.326429][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 143.335809][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 143.797007][ T6448] Set syz1 is full, maxelem 65536 reached [ 143.908878][ T6451] lo speed is unknown, defaulting to 1000 [ 143.918759][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 143.949332][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 143.993427][ T6496] SELinux: security_context_str_to_sid (sG2heoݻbƲEbWex[G [ 143.993427][ T6496] '[7O$pcչa%f@Nz) failed with errno=-22 [ 144.047840][ T6451] lo speed is unknown, defaulting to 1000 [ 144.080397][ T6451] lo speed is unknown, defaulting to 1000 [ 144.106989][ T6477] siw: device registration error -23 [ 144.150241][ T6501] SELinux: failed to load policy [ 144.177742][ T6495] rdma_rxe: rxe_newlink: failed to add lo [ 144.192679][ T6497] sch_fq: defrate 4294967295 ignored. [ 144.198695][ T6497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6497 comm=syz.0.661 [ 144.252689][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 144.366094][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 144.599473][ T6516] pim6reg: entered allmulticast mode [ 144.635244][ T6516] pim6reg: left allmulticast mode [ 144.931355][ T6518] siw: device registration error -23 [ 144.961979][ T6518] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 145.043260][ T6518] batman_adv: batadv0: Removing interface: veth1_vlan [ 145.303049][ T6527] SELinux: security_context_str_to_sid (>.) failed with errno=-22 [ 145.456033][ T6532] loop9: detected capacity change from 0 to 7 [ 145.475752][ T6532] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.499812][ T6532] loop9: unable to read partition table [ 145.505541][ T6532] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 145.505541][ T6532] ) failed (rc=-5) [ 145.741122][ T6537] lo speed is unknown, defaulting to 1000 [ 145.770167][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.808054][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.835658][ T6537] lo speed is unknown, defaulting to 1000 [ 145.858740][ T6537] lo speed is unknown, defaulting to 1000 [ 146.367403][ T6549] __nla_validate_parse: 4 callbacks suppressed [ 146.367420][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.382623][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.405232][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.685907][ T6552] siw: device registration error -23 [ 146.739514][ T6565] ipvlan0: entered promiscuous mode [ 146.746362][ T6547] ================================================================== [ 146.754457][ T6547] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 146.762024][ T6547] [ 146.764358][ T6547] read-write to 0xffff888237d25ee8 of 1 bytes by task 6549 on cpu 1: [ 146.772610][ T6547] folio_add_lru+0xa5/0x1f0 [ 146.777229][ T6547] shmem_get_folio_gfp+0x7ab/0xd60 [ 146.782372][ T6547] shmem_fault+0xf6/0x250 [ 146.786709][ T6547] __do_fault+0xbc/0x200 [ 146.790968][ T6547] handle_mm_fault+0xf78/0x2be0 [ 146.795817][ T6547] __get_user_pages+0x102a/0x1ed0 [ 146.800837][ T6547] __mm_populate+0x243/0x3a0 [ 146.805420][ T6547] vm_mmap_pgoff+0x232/0x2e0 [ 146.810015][ T6547] ksys_mmap_pgoff+0xc2/0x310 [ 146.814693][ T6547] x64_sys_call+0x14a3/0x3000 [ 146.819368][ T6547] do_syscall_64+0xd2/0x200 [ 146.823866][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.829761][ T6547] [ 146.832094][ T6547] read to 0xffff888237d25ee8 of 1 bytes by task 6547 on cpu 0: [ 146.839626][ T6547] __lru_add_drain_all+0x17e/0x450 [ 146.844782][ T6547] lru_cache_disable+0x1f/0x30 [ 146.849545][ T6547] __se_sys_mbind+0x496/0xac0 [ 146.854228][ T6547] __x64_sys_mbind+0x78/0x90 [ 146.858818][ T6547] x64_sys_call+0x2936/0x3000 [ 146.863492][ T6547] do_syscall_64+0xd2/0x200 [ 146.867984][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.874127][ T6547] [ 146.876446][ T6547] value changed: 0x00 -> 0x01 [ 146.881108][ T6547] [ 146.883422][ T6547] Reported by Kernel Concurrency Sanitizer on: [ 146.889579][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.4.677 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.899233][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.909288][ T6547] ================================================================== [ 147.218893][ T6563] lo speed is unknown, defaulting to 1000 [ 147.255001][ T6563] lo speed is unknown, defaulting to 1000 [ 147.261012][ T6563] lo speed is unknown, defaulting to 1000