last executing test programs: 3.964823078s ago: executing program 2 (id=1211): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff94020000020000004000"/50], 0x178) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) write$selinux_validatetrans(r3, 0x0, 0x6a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095", @ANYBLOB="5c4534ab351ec3c344a94589ac9b044465c0090df59916479663d9bdcc762bad1458c020e6cc9b425963cdc89c29ff8ac19fa64ae1dface7745e57d424f5f389b02021931e86f2ac66e0b2ccf286556d994c81614dc1174df0071443e0eedcf7b29f1b511bc8f4e214ea9ac82d7354c2e38fc7b6bf139e24ca78d942be8be018c2ec363ca2a5a398b002e99b53587a7f65bf24e42c2dd938a58ae3efbf2f813d"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r6, &(0x7f0000000000)=@id, 0x10) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r7 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 3.778551701s ago: executing program 2 (id=1215): socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r5, 0x0, 0x4}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.621530893s ago: executing program 4 (id=1220): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 3.542692174s ago: executing program 1 (id=1221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2123, 0x0) alarm(0x7ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3fffffff]}}], 0xffc8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r10 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r10, 0x0, 0x0, 0x1001f0) copy_file_range(r10, 0x0, r10, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r11, 0x10, 0x6, 0x10001) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xd, 0x6, 0x100, &(0x7f00000000c0)="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"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 3.511119385s ago: executing program 4 (id=1222): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x20000, 0x0, @void, @value}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 3.105960711s ago: executing program 1 (id=1225): r0 = io_uring_setup(0x3b72, &(0x7f0000000800)={0x0, 0xddcb, 0x4000, 0x2, 0x260}) r1 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r8 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f00000000c0)) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r9, 0x5453, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="ffa88387", 0x4}, {0x0}], 0x2}, 0x40810) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x9, 0x5, 0x2900, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xe, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xa, 0x4, 0x34, 0x1002, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xe, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) splice(r9, 0x0, r10, 0x0, 0x2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x21, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x1, 0x7, 0x5, 0x50, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x9, 0xa, 0x8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x3f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='syzkaller\x00', 0x8, 0xe4, &(0x7f00000005c0)=""/228, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x27, r0, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0xec71, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r8, r9], &(0x7f0000000a40)=[{0x2, 0x5, 0xa, 0x4eae4c2a6a1b94af}, {0x4, 0x2, 0xa, 0xe}, {0x2, 0x5, 0x6, 0x2}], 0x10, 0x2, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={r11, 0x3375}, 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000bc7000/0x1000)=nil, 0x1000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x9ea19000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlockall(0x7) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000af070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340000000c0a01030000000000000000070000000900020073797a11000000000900010073797a30000000000800038004000080140000001000010000000000000000000084000a825444a0d8e44ebf3fa4e35360d4b4b7432d43b1e8d52e071e5d82bf9c169cae0a1d3ed63f0357e013d790254492e9ec91e5fb9c7b0129282caf308173d47cbbde0671f34e2c"], 0xb8}, 0x1, 0x0, 0x0, 0x359b171663d45917}, 0x0) 2.633884029s ago: executing program 4 (id=1227): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0x1, [{0xa, 0x200, 0x7fffffff}, {0x5, 0x40, 0x9}], "a0"}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1d, 0x1}, @struct={0xc, 0x4, 0x0, 0x4, 0x1, 0x2, [{0xc, 0x1, 0xffffffff}, {0xa, 0x3, 0x9}, {0x7, 0x4}, {0xd, 0x5, 0x84}]}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x5, 0x4, 0x40}, {0x2, 0x2, 0x7c3}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x4}]}, {0x0, [0x10, 0x61, 0x47, 0x61, 0x30, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000005c0)=""/4096, 0xe2, 0x1000, 0x0, 0x80000001, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000950200"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x8b7c, 0x800, 0x200008, 0x17b}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000200)=0x32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = dup3(r4, r3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) write$UHID_CREATE2(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098000000080000000000000009000000faffffff50207a49f366c3d8c62dd72eae766f4956c47d3296b5531d34540f30992a783721237731249ad430c2412699e5f8195ce331ac159111061f6402c632a2a8e4cfd7bb02bed795107e41ed1fc6b76f865be5f4c70ad7be06d819f6fb99a507a6dcbae8bc6a2728384eb5796617f4321dd50591ebe28794c93bbca2701669d0f7df709637d99be6151f0cc54d81dfca81ee97cfa1b1ffaf43160aa98048b616fdda5da8e203749ec84d7f72d842014f54a53121e93d021dabafb7d8262ca9d9c5813b3ea9a477a53fd1abdbd11c854389122045239845"], 0x1b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(0x0) write(r9, 0x0, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={r2, r10}) close(r6) socket$nl_route(0x10, 0x3, 0x0) 2.53594254s ago: executing program 4 (id=1228): socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r5, 0x0, 0x4}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.364297463s ago: executing program 0 (id=1231): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x20000, 0x0, @void, @value}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000000320000000a0101000000000000000000000000000400040000000000070000000000000000000000000000000400000000004000ffffffffffffffff00000000000000007f00000000000000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000200010100000000000000004c001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000008001600040000000c0015005c0735000600000014d8aa983ec22cf5cdce5762c77f2abf3c57236dd5cbd5930ef3b9c287c2a48f8eb51eaeeac46b377809f253f9de38a27d46e6871dde1b5099eda2cdbf4d37e15ae57758614083aa59d3b8e69eb746e972927a27"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 2.357286863s ago: executing program 2 (id=1232): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 2.312163344s ago: executing program 2 (id=1233): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a61, 0x5, 0x7fffffff, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[], 0x56) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket(0x1e, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000500)=""/137, 0x89}], 0x2, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000000800), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000000940)=""/79, 0x4f}], 0x3, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x3, 0x80, &(0x7f0000000bc0)={r5, r6+10000000}) getsockname$packet(r4, 0x0, &(0x7f00000000c0)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) setresgid(0x0, 0x0, 0xee00) r10 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@rand_addr=0x64010101, @in=@private=0xa010101, 0xfffc, 0x1, 0x0, 0x200, 0x2}, {0x0, 0x6, 0x0, 0x8004, 0x6, 0xfffffffffffffffe, 0x0, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3501, 0x5, 0x8, 0x0, 0x9075, 0x0, 0x4}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000680)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r14, 0x0, 0x0, 0x810, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200017, {{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r12, 0x4}}]}, 0x144}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xb, 0x3}, {0x5}, {0x1, 0xffe0}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24010890) 2.208979475s ago: executing program 3 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000e8b000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="010000004c4f11362f00fe5a020000020000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="580e00000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000ca57100000005000000090000000000000a05000000002e000000"], &(0x7f0000000200)=""/224, 0x29, 0xe0, 0x1, 0x5, 0x10000, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x1) fsetxattr$system_posix_acl(r4, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x4d) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) 2.066526848s ago: executing program 1 (id=1235): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup(r1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000200)={0x6, 0x0, 0x100, 0x1, 0x9, "90897f0000030000000000f4ff1d277fffffeb"}) r4 = dup(r3) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x82fa, 0x1a, "e8540000808000"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7f) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0xb, 0x9, 0x4, 0xeffffe00}, {0x6, 0x3, 0x3, 0xc16d}, {0x5, 0x7, 0xa, 0x7f19}]}) tkill(r0, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x2008a0c4, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000540)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809aff2a54cd2837af1ea288038adc47e2429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1ea31904039f03abd3d9bc03a45f6ca202a62baa5451e94b1d5a46e6d619bbc6a86094fe7b801ad5fe1424dd1a", 0x108, 0x400c001, 0x0, 0x0) sendmsg$inet6(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x20000400) r8 = io_uring_setup(0x7de, &(0x7f00000000c0)={0x0, 0xb3cd, 0x0, 0x0, 0x384}) r9 = eventfd2(0x7, 0x6507fe7e1bbb5f2f) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000040)=r9, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 2.065941238s ago: executing program 3 (id=1236): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x30b100) fadvise64(r4, 0x8000000000000002, 0x9, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000e87a0d936800009500000000000000bf91000000000000b7020000000000000602af77f88500000085000000b700"/101], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x402) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000300)={0x23, 0x3, 0x104, 0xfff, 0x0, 0x1, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 1.665441884s ago: executing program 3 (id=1237): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x20000, 0x0, @void, @value}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 1.524237016s ago: executing program 4 (id=1238): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x5000000, &(0x7f00000009c0)=ANY=[], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r3}, 0x38) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x70, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRES16=r2, @ANYRESHEX=r6, @ANYRES16=r0], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") prlimit64(0xffffffffffffffff, 0x7c1a280e768f1140, &(0x7f0000000200)={0x8, 0xec00000000004}, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x1, 0x0) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) 1.491720876s ago: executing program 0 (id=1239): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0x1, [{0xa, 0x200, 0x7fffffff}, {0x5, 0x40, 0x9}], "a0"}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1d, 0x1}, @struct={0xc, 0x4, 0x0, 0x4, 0x1, 0x2, [{0xc, 0x1, 0xffffffff}, {0xa, 0x3, 0x9}, {0x7, 0x4}, {0xd, 0x5, 0x84}]}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x5, 0x4, 0x40}, {0x2, 0x2, 0x7c3}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x4}]}, {0x0, [0x10, 0x61, 0x47, 0x61, 0x30, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000005c0)=""/4096, 0xe2, 0x1000, 0x0, 0x80000001, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000950200"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x8b7c, 0x800, 0x200008, 0x17b}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000200)=0x32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = dup3(r4, r3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) write$UHID_CREATE2(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098000000080000000000000009000000faffffff50207a49f366c3d8c62dd72eae766f4956c47d3296b5531d34540f30992a783721237731249ad430c2412699e5f8195ce331ac159111061f6402c632a2a8e4cfd7bb02bed795107e41ed1fc6b76f865be5f4c70ad7be06d819f6fb99a507a6dcbae8bc6a2728384eb5796617f4321dd50591ebe28794c93bbca2701669d0f7df709637d99be6151f0cc54d81dfca81ee97cfa1b1ffaf43160aa98048b616fdda5da8e203749ec84d7f72d842014f54a53121e93d021dabafb7d8262ca9d9c5813b3ea9a477a53fd1abdbd11c854389122045239845"], 0x1b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(0x0) write(r9, 0x0, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={r2, r10}) close(r6) socket$nl_route(0x10, 0x3, 0x0) 1.413807928s ago: executing program 0 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000080)="c5d1baf6fa341df7579e51374c7b83ea8d7ba5c8d0a49d42580f1124966e92a06739fa0d3026a35df4c34d0139566dfc93145d2b3ce0c3a71a13b857117393c27178ac7b917d0b93a17b7530ef71ab5224c8a6bd170eb4abee8fc9a57c777cc70ef663846a0d907b32509005b737978798d06846f7be83d3c183e8428fa2132a173101766fd97763b7b76131962ac1c8c05661ae020deb14b7c823f16998596d48bb7d5d9f31504d4150e7ba3c4f42ed9320875d7bafb08cd320f817562caee8ade3f99a227803b82cd71f6deb53f71721026e1da8704d474238e6d0d119d5bf86b3ee374e40331bdc8d32507f9d", &(0x7f0000000240)=""/127, 0x0, &(0x7f0000000180)="86", 0x101, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r1], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x7, 0x5, 0x6685, 0x2, 0x9, 0x80000001, 0x2, 0x3800000}}}}]}, 0x58}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x2, 0xa}, {0xfff2, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$nl_route(r3, 0x0, 0xc010) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) 1.412934678s ago: executing program 2 (id=1241): socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r5, 0x0, 0x4}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$eJzs3c1uG+fVAOBDWY4VfYARfC2CwHWciZOFDTgySSUyhCwKlhrJk1AkMUMFNroogtgujMhJETdArS7SbNJ20UvoItveRO6h6K7XkH1XVTHDH/1Yol1bEQP3eQhzXs6cmffMkODRS3OGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABErb1Wrzdq0cm6W7eS47XX8t7mlOXj7X13YDKl34ha+S8WFuK14azXfrq3+NXy7nJcHD66GAvlZCF2/u/VV97/yfzceP0pCZ2Kh492Pv14e/vuF7NOZEY20m5W9LLN1kaaZEUvWV1ZqV+/uV4k61knLW4Xg3Qzaedpa9DLkyvtq0ljdXU5SZdu97a6G2utTjqeeeOdZr2+knyw1E9bedHrXv9gqWjfzDqdrLtRxZSLy5gbya8/zz/MBskgbW0myb3723eXn5RkGdR4mqDmk4Ka9Waz0Wg2Gyvvrb53o16fb9YX4sCM+iFxYJWkXp8fv2jjleFr+6mP9T7/eJaV+MHMlXd//3L0hMYfpj+zJ/PGDSdgblT/oxNZdGMrbkVy5K0da5FHLzaPWT7yXcTvq8b1dGq/Zf1eGNX/cZV/bW/xhfLu8sLo0aXj6v8xuZze7WE8ip34ND6O7diOu/HFzDM63dtGpNGNLIroRRab0armJKM5SazGSqxEPX4VN2M9ikhiPbLoRBpF3I4iBpFWr6h25JFGKwbRizySuBLtuBpJNGI1VmM5kkhjKW5HL7aiGxuxFq1qK/fifnXcl6fkOAlqPE1Qc0rQqJiXL7zK/GN/ENTr86NlR9X/G5P6/9eqPjx8+zSrFDN1Ztw4uTdveE674/ofu7v/3i3NOiMAAADgpNWqT99rl16aPF7POukvZ5wVAAAAcJKqrzJdLCdny9brUSvH//W9gJdmlxsAAABwMmpxafQpwGK8MWyNz4SqG/sDAADAi6H6//9L5WSxbM2NZg/H/2NzM0oOAAAAOBF/2rvG/k4ceY3dol8O/+cjovZ1/9bbtQetMq714MxwvTOHtzhYv1A7P9pINVmZHz1qpxdro6tfTi6C+f1ocu9J1/qv5fnZ501g75OMN+8Mp3cmS6peFtezTrrU7nXeb0SrdX5ukN4afPnZ/d9FlL3/ubt5vhb37m/fXfrk8+07VS5fl1v5+sHoirC1/yKX38brw5jXz8Vje7wTtbPViRijfheH/db37/9oX8a79PJT9PnNOOby4nC6eHD/F8o+G0vH7f1i7dxo/efa82/GwW9deWs4OSKL5pQsqmPR3H/8Dx2Lp8oi3joui/OTLJbHWezG+MqYB7NYfs4sAGbl3qQKHay7Zyf1/7G6+wzvcqdT3b+JK8OYKxeqN9b5C0fUlfqRdWX3zKEa++zV7W9xdRhzdRx8XI0t9/kvk34bVb/flit8e2y/RWd8QB78Jq7PPdp5534Ve/ezZnN5pf5uvf5eM85WuzGalJn+a+Fwpi+H2gPwP+1y9f3/ab+xc3TEmb3SXHs33iynP9s3qi5r0qTi/f/klIKl+CQ+j+24E9eqsw0i4o2j+13cdxrCtbg8SvboUevivl94uXb8qG5f7Phvl6eJHf68DAC8SC4/oQ5P6v/4t/jGEVUJHY7dr+0bdy/sjbtjNMI8VMunj47313IA4IeR5t/XFgd/rOXlg8bqaqM1uJkmea/9YZJnaxtpknUHad6+2epupEk/7w167V6nbHyUraVFUmz1+718kKz38qTfK7JbP4+skyajn34v0s1Wd5C1i34nbRVp0u51B632IFnLinbS3/pFJyu+2t3dLVcu+mk7W8/arUHW6yZFbytvp0tJUqTpKPBmmifZWtodZOtZ2ewm/Tw7F/nt5KNeZ2szTdbSop1n/UEvr7IZ95V118/lm9Vml2Z9sAHgR+Lho51PP97evvvF0Y2FOHZR1fjn9NWHjVnvIwBw0LQq/di3zwAAAAAAAAAAAAAAgJl4wvl/z96oHZozFxE/VF8vXGP3q1Ppa3yCx+yenTM/kgP+eOPbfXOSE9zyyxHxo9jBA41zjy+a8RsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzhPwEAAP//ONRIwg==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.380388618s ago: executing program 0 (id=1242): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x400002c8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f00000003c0)='./control\x00', 0x21000510) rmdir(&(0x7f0000000100)='./control\x00') r2 = msgget(0x2, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000200)=""/215) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_vif\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r5 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x2fd, 0x7}, 0x18) r6 = syz_clone(0x4c200, &(0x7f0000000300)="e9a24658d774f346e6b709e59026b9785f76aeb94cfe3150f57a15d952353988d36941b135ce0973b85da3edc03f68bfd2fd7f8f4662844078a480e01a907788a4c468bddf3be5d0aca08ae56e3ba9c9d9c2c4f8506e1c7b127b9fb025c44d6639bb88fd7cd0a2f1c63988ca", 0x6c, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0)="589d2e0e2682aedc4979660cd79ccab3b9a789ed739b1bf4eb571da87df7") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x5, 0x6, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0x7, 0x6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000005c0)) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sched_getattr(r6, &(0x7f0000000500)={0x38}, 0x38, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./control\x00', 0x0, 0x0, r9}, 0x18) pread64(r10, &(0x7f0000000640)=""/176, 0xb0, 0x4) faccessat2(r3, &(0x7f00000001c0)='./control\x00', 0x84, 0x1300) listxattr(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)=""/46, 0x2e) 1.075097303s ago: executing program 1 (id=1243): socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 782.821658ms ago: executing program 3 (id=1244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r4, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001500000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r8 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r10 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x3516, 0x300, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x14, &(0x7f0000e86000)="112204", 0x3) 521.229542ms ago: executing program 3 (id=1245): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003ac0)=""/4123, 0x101b}, {&(0x7f00000008c0)=""/108, 0x6c}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) pwrite64(r0, &(0x7f00000006c0)="fe3447755ec1d191c1a8d0fad7267f6a6a6618338b4214e590551b63f8178ff670822a111adbc831e5d48b48fe75c538750ec7f505452e9152c3efccfe426ec5ac4aa356462f1ad6fb2d288c21b0154358704eb5a7b6e0aab33015b8aaa260e795a2bd7c5fed95167a7c2856f9ee290e4833d9d9e0ada32d808812d8d53c3f19c4cc959f67c7aec85d305d825ccbfeb5ce18f5fe62816f32aaddb5acaa5f459e461d403c4d872ce8cb6bb130fb42a95ae00340a743e142dd2faddb54e1b6ad3a85b6c57bcd190a4825a551e639b582f465c8c53ed40ca6b29dec54bfe4fa", 0xde, 0xd) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00'}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 487.891372ms ago: executing program 0 (id=1246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xe, 0x0, &(0x7f0000000040)) setitimer(0x1, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000085000000560000009500000000000000"], &(0x7f0000002f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) 401.508483ms ago: executing program 4 (id=1247): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1a3}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x800000000008, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018412b01f5f90121207d3f8cd5b8a3f29a0f355e87d80b05103d075390928b0c7c435b7cf23e9569479c249699539d783b57a5bb14669d72e05631753025d7734e0c0b637fbc858282a422c0a1fd4b1e3ffbdb45029310b959bae7c32f3df06c1067554bf916f152dc3f1f7095525b5da408fa34acb68460d9706fd9f51f6f5e018938f7e00000000000000931aade2e128d7"], 0x7c}, 0x1, 0x0, 0x0, 0x24000812}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYRES8=r2], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x40850) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x50) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200626f6e643000000000000000000000000900030073797a3200000000"], 0x40}}, 0xc800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) r7 = getpgid(0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x2, 0x1, 0x8, 0xee, r7}) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000880)={0x60, 0x3, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9, 0x0, 0x0, 0x2, 0x40, 0x20, 0x22, 0x63}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 377.403234ms ago: executing program 0 (id=1248): socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r5, 0x0, 0x4}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$eJzs3c1uG+fVAOBDWY4VfYARfC2CwHWciZOFDTgySSUyhCwKlhrJk1AkMUMFNroogtgujMhJETdArS7SbNJ20UvoItveRO6h6K7XkH1XVTHDH/1Yol1bEQP3eQhzXs6cmffMkODRS3OGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABErb1Wrzdq0cm6W7eS47XX8t7mlOXj7X13YDKl34ha+S8WFuK14azXfrq3+NXy7nJcHD66GAvlZCF2/u/VV97/yfzceP0pCZ2Kh492Pv14e/vuF7NOZEY20m5W9LLN1kaaZEUvWV1ZqV+/uV4k61knLW4Xg3Qzaedpa9DLkyvtq0ljdXU5SZdu97a6G2utTjqeeeOdZr2+knyw1E9bedHrXv9gqWjfzDqdrLtRxZSLy5gbya8/zz/MBskgbW0myb3723eXn5RkGdR4mqDmk4Ka9Waz0Wg2Gyvvrb53o16fb9YX4sCM+iFxYJWkXp8fv2jjleFr+6mP9T7/eJaV+MHMlXd//3L0hMYfpj+zJ/PGDSdgblT/oxNZdGMrbkVy5K0da5FHLzaPWT7yXcTvq8b1dGq/Zf1eGNX/cZV/bW/xhfLu8sLo0aXj6v8xuZze7WE8ip34ND6O7diOu/HFzDM63dtGpNGNLIroRRab0armJKM5SazGSqxEPX4VN2M9ikhiPbLoRBpF3I4iBpFWr6h25JFGKwbRizySuBLtuBpJNGI1VmM5kkhjKW5HL7aiGxuxFq1qK/fifnXcl6fkOAlqPE1Qc0rQqJiXL7zK/GN/ENTr86NlR9X/G5P6/9eqPjx8+zSrFDN1Ztw4uTdveE674/ofu7v/3i3NOiMAAADgpNWqT99rl16aPF7POukvZ5wVAAAAcJKqrzJdLCdny9brUSvH//W9gJdmlxsAAABwMmpxafQpwGK8MWyNz4SqG/sDAADAi6H6//9L5WSxbM2NZg/H/2NzM0oOAAAAOBF/2rvG/k4ceY3dol8O/+cjovZ1/9bbtQetMq714MxwvTOHtzhYv1A7P9pINVmZHz1qpxdro6tfTi6C+f1ocu9J1/qv5fnZ501g75OMN+8Mp3cmS6peFtezTrrU7nXeb0SrdX5ukN4afPnZ/d9FlL3/ubt5vhb37m/fXfrk8+07VS5fl1v5+sHoirC1/yKX38brw5jXz8Vje7wTtbPViRijfheH/db37/9oX8a79PJT9PnNOOby4nC6eHD/F8o+G0vH7f1i7dxo/efa82/GwW9deWs4OSKL5pQsqmPR3H/8Dx2Lp8oi3joui/OTLJbHWezG+MqYB7NYfs4sAGbl3qQKHay7Zyf1/7G6+wzvcqdT3b+JK8OYKxeqN9b5C0fUlfqRdWX3zKEa++zV7W9xdRhzdRx8XI0t9/kvk34bVb/flit8e2y/RWd8QB78Jq7PPdp5534Ve/ezZnN5pf5uvf5eM85WuzGalJn+a+Fwpi+H2gPwP+1y9f3/ab+xc3TEmb3SXHs33iynP9s3qi5r0qTi/f/klIKl+CQ+j+24E9eqsw0i4o2j+13cdxrCtbg8SvboUevivl94uXb8qG5f7Phvl6eJHf68DAC8SC4/oQ5P6v/4t/jGEVUJHY7dr+0bdy/sjbtjNMI8VMunj47313IA4IeR5t/XFgd/rOXlg8bqaqM1uJkmea/9YZJnaxtpknUHad6+2epupEk/7w167V6nbHyUraVFUmz1+718kKz38qTfK7JbP4+skyajn34v0s1Wd5C1i34nbRVp0u51B632IFnLinbS3/pFJyu+2t3dLVcu+mk7W8/arUHW6yZFbytvp0tJUqTpKPBmmifZWtodZOtZ2ewm/Tw7F/nt5KNeZ2szTdbSop1n/UEvr7IZ95V118/lm9Vml2Z9sAHgR+Lho51PP97evvvF0Y2FOHZR1fjn9NWHjVnvIwBw0LQq/di3zwAAAAAAAAAAAAAAgJl4wvl/z96oHZozFxE/VF8vXGP3q1Ppa3yCx+yenTM/kgP+eOPbfXOSE9zyyxHxo9jBA41zjy+a8RsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzhPwEAAP//ONRIwg==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 231.930626ms ago: executing program 2 (id=1249): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x20000, 0x0, @void, @value}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 52.009689ms ago: executing program 3 (id=1250): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0x1, [{0xa, 0x200, 0x7fffffff}, {0x5, 0x40, 0x9}], "a0"}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1d, 0x1}, @struct={0xc, 0x4, 0x0, 0x4, 0x1, 0x2, [{0xc, 0x1, 0xffffffff}, {0xa, 0x3, 0x9}, {0x7, 0x4}, {0xd, 0x5, 0x84}]}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x5, 0x4, 0x40}, {0x2, 0x2, 0x7c3}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x4}]}, {0x0, [0x10, 0x61, 0x47, 0x61, 0x30, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000005c0)=""/4096, 0xe2, 0x1000, 0x0, 0x80000001, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000950200"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x8b7c, 0x800, 0x200008, 0x17b}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000200)=0x32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = dup3(r4, r3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) write$UHID_CREATE2(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098000000080000000000000009000000faffffff50207a49f366c3d8c62dd72eae766f4956c47d3296b5531d34540f30992a783721237731249ad430c2412699e5f8195ce331ac159111061f6402c632a2a8e4cfd7bb02bed795107e41ed1fc6b76f865be5f4c70ad7be06d819f6fb99a507a6dcbae8bc6a2728384eb5796617f4321dd50591ebe28794c93bbca2701669d0f7df709637d99be6151f0cc54d81dfca81ee97cfa1b1ffaf43160aa98048b616fdda5da8e203749ec84d7f72d842014f54a53121e93d021dabafb7d8262ca9d9c5813b3ea9a477a53fd1abdbd11c854389122045239845"], 0x1b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, 0x0, 0x0) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000240)={r2, r11}) close(r6) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=1251): open$dir(&(0x7f0000000080)='./file0\x00', 0x204180, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r2 = socket(0x10, 0x803, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xb0, 0x1403, 0x8, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r4}, 0x18) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x0, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x7, 0x8, 0x5, 0x5, 0x5, 0x3}, &(0x7f0000000180)={0x0, 0x80000002, 0x7, 0x5, 0xffffffff, 0x3bf, 0x7, 0xcf07}, &(0x7f0000000200), &(0x7f00000002c0)={&(0x7f0000000280)={[0x7fffffff]}, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x300, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, 0x0, 0x0) uname(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1d3b}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}}, 0x4000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) kernel console output (not intermixed with test programs): 8 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.147317][ T8990] RSP: 002b:00007f6265907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.147336][ T8990] RAX: ffffffffffffffda RBX: 00007f62674c5fa0 RCX: 00007f626729e929 [ 124.147379][ T8990] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 124.147391][ T8990] RBP: 00007f6267320b39 R08: 0000000000000004 R09: 0000000000000000 [ 124.147402][ T8990] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.147414][ T8990] R13: 0000000000000000 R14: 00007f62674c5fa0 R15: 00007ffd97cb0db8 [ 124.147434][ T8990] [ 124.147507][ T8990] Mem-Info: [ 124.263058][ T8994] loop2: detected capacity change from 0 to 512 [ 124.267918][ T8990] active_anon:10752 inactive_anon:20 isolated_anon:0 [ 124.267918][ T8990] active_file:8416 inactive_file:5008 isolated_file:0 [ 124.267918][ T8990] unevictable:0 dirty:353 writeback:0 [ 124.267918][ T8990] slab_reclaimable:3295 slab_unreclaimable:19125 [ 124.267918][ T8990] mapped:33279 shmem:3114 pagetables:1249 [ 124.267918][ T8990] sec_pagetables:0 bounce:0 [ 124.267918][ T8990] kernel_misc_reclaimable:0 [ 124.267918][ T8990] free:1867273 free_pcp:8902 free_cma:0 [ 124.350222][ T8994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.355210][ T8990] Node 0 active_anon:43208kB inactive_anon:80kB active_file:33664kB inactive_file:20036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134648kB dirty:1416kB writeback:0kB shmem:12476kB writeback_tmp:0kB kernel_stack:3584kB pagetables:5268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.364983][ T8994] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.371227][ T8990] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.399633][ T9005] netlink: 9 bytes leftover after parsing attributes in process `syz.4.655'. [ 124.428761][ T8990] lowmem_reserve[]: 0 2882 7861 7861 [ 124.479052][ T9006] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.480777][ T8990] Node 0 [ 124.517500][ T9006] tmpfs: Bad value for 'mpol' [ 124.518082][ T8990] DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951464kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 124.569181][ T8990] lowmem_reserve[]: 0 0 4978 4978 [ 124.574354][ T8990] Node 0 Normal free:4503648kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43324kB inactive_anon:80kB active_file:33664kB inactive_file:20036kB unevictable:0kB writepending:1416kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:31472kB local_pcp:28224kB free_cma:0kB [ 124.576806][ T9008] netlink: 5 bytes leftover after parsing attributes in process `syz.4.655'. [ 124.606603][ T8990] lowmem_reserve[]: 0 0 0 0 [ 124.620119][ T8990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.632946][ T8990] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 124.649227][ T8990] Node 0 Normal: 2019*4kB (UME) 1292*8kB (UM) 988*16kB (UME) 799*32kB (UM) 547*64kB (UME) 266*128kB (UM) 167*256kB (UME) 127*512kB (UM) 83*1024kB (UM) 50*2048kB (UME) 996*4096kB (UM) = 4503628kB [ 124.668780][ T8990] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.678222][ T8990] 17460 total pagecache pages [ 124.682958][ T8990] 2 pages in swap cache [ 124.687160][ T8990] Free swap = 118464kB [ 124.691341][ T8990] Total swap = 124996kB [ 124.695534][ T8990] 2097051 pages RAM [ 124.699353][ T8990] 0 pages HighMem/MovableOnly [ 124.704291][ T8990] 80787 pages reserved [ 124.799854][ T8983] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.808334][ T8983] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.816746][ T8983] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.825224][ T8983] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.836418][ T3416] lo speed is unknown, defaulting to 1000 [ 124.836445][ T8957] lo speed is unknown, defaulting to 1000 [ 124.842217][ T3416] syz0: Port: 1 Link DOWN [ 124.864149][ T9005] gretap0: entered promiscuous mode [ 124.876917][ T9008] 0XD: renamed from gretap0 [ 124.895879][ T9008] 0XD: left promiscuous mode [ 124.900922][ T9008] 0XD: entered allmulticast mode [ 124.908739][ T9008] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 124.925409][ T23] syz1: Port: 1 Link DOWN [ 124.941853][ T9013] loop3: detected capacity change from 0 to 2048 [ 124.957335][ T8995] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 124.971827][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.001385][ T9013] EXT4-fs (loop3): failed to initialize system zone (-117) [ 125.009773][ T9013] EXT4-fs (loop3): mount failed [ 125.045898][ T9042] netlink: 14 bytes leftover after parsing attributes in process `syz.2.658'. [ 125.062866][ T9042] hsr_slave_0: left promiscuous mode [ 125.074726][ T9013] program syz.3.657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.086996][ T9042] hsr_slave_1: left promiscuous mode [ 125.212235][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 125.326415][ T9067] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.430891][ T9073] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9073 comm=syz.3.672 [ 125.502063][ T9072] netlink: 96 bytes leftover after parsing attributes in process `syz.4.662'. [ 125.587975][ T9067] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.645591][ T9067] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.747968][ T9067] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.865740][ T9067] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.893254][ T9067] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.926408][ T9067] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.940860][ T9067] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.260888][ T9090] lo speed is unknown, defaulting to 1000 [ 126.291367][ T9090] lo speed is unknown, defaulting to 1000 [ 126.335361][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 126.335379][ T29] audit: type=1326 audit(2000000046.490:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.406818][ T9094] lo speed is unknown, defaulting to 1000 [ 126.417451][ T9090] lo speed is unknown, defaulting to 1000 [ 126.423403][ T29] audit: type=1326 audit(2000000046.490:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.446911][ T29] audit: type=1326 audit(2000000046.490:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.470239][ T29] audit: type=1326 audit(2000000046.490:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.493757][ T29] audit: type=1326 audit(2000000046.490:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.504552][ T9094] lo speed is unknown, defaulting to 1000 [ 126.517342][ T29] audit: type=1326 audit(2000000046.490:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.546564][ T29] audit: type=1326 audit(2000000046.490:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.569909][ T29] audit: type=1326 audit(2000000046.490:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.593409][ T29] audit: type=1326 audit(2000000046.490:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.616755][ T29] audit: type=1326 audit(2000000046.490:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 126.655894][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'. [ 126.707531][ T9100] futex_wake_op: syz.1.666 tries to shift op by -1; fix this program [ 126.990557][ T9094] lo speed is unknown, defaulting to 1000 [ 127.527583][ T9158] x_tables: duplicate underflow at hook 1 [ 127.649256][ T2960] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 127.656841][ T2960] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 127.664350][ T2960] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 127.688248][ T9170] netlink: 9 bytes leftover after parsing attributes in process `syz.3.671'. [ 127.707999][ T2960] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 127.719269][ T9109] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 127.724036][ T9170] 0XD: entered promiscuous mode [ 127.771253][ T9174] netlink: 5 bytes leftover after parsing attributes in process `syz.3.671'. [ 127.793361][ T9174] 1XD: renamed from 30XD [ 127.810268][ T9174] 1XD: left promiscuous mode [ 127.815309][ T9174] 1XD: entered allmulticast mode [ 127.863392][ T9174] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 128.616666][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 128.898896][ T9214] loop0: detected capacity change from 0 to 512 [ 128.908381][ T9214] EXT4-fs (loop0): Invalid default hash set in the superblock [ 128.942608][ T9217] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 128.970867][ T9224] netlink: 332 bytes leftover after parsing attributes in process `syz.3.682'. [ 128.980033][ T9224] netlink: 'syz.3.682': attribute type 9 has an invalid length. [ 128.988071][ T9224] netlink: 108 bytes leftover after parsing attributes in process `syz.3.682'. [ 128.997219][ T9224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.682'. [ 129.009245][ T9224] netlink: 3 bytes leftover after parsing attributes in process `syz.3.682'. [ 129.068448][ T9221] sd 0:0:1:0: device reset [ 129.176900][ T9237] hub 1-0:1.0: USB hub found [ 129.189548][ T9237] hub 1-0:1.0: 8 ports detected [ 129.196576][ T9228] SELinux: failed to load policy [ 129.236443][ T9228] netlink: '+}[@': attribute type 12 has an invalid length. [ 130.381798][ T9280] netlink: 'syz.3.692': attribute type 298 has an invalid length. [ 130.535140][ T9280] __nla_validate_parse: 2 callbacks suppressed [ 130.535159][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 130.793966][ T9288] siw: device registration error -23 [ 130.899342][ T9291] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 131.004972][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.023547][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.059477][ T9297] loop0: detected capacity change from 0 to 8192 [ 131.066214][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.080511][ T9299] lo speed is unknown, defaulting to 1000 [ 131.087647][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.096939][ T9299] lo speed is unknown, defaulting to 1000 [ 131.114665][ T9297] loop0: p1 p2 p4 [ 131.118479][ T9297] loop0: p1 size 108920841 extends beyond EOD, truncated [ 131.148891][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.158676][ T9297] loop0: p2 start 861536256 is beyond EOD, truncated [ 131.165623][ T9297] loop0: p4 size 65536 extends beyond EOD, truncated [ 131.175052][ T9308] vhci_hcd: invalid port number 96 [ 131.175068][ T9308] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 131.176445][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.200741][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.201353][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 131.248358][ T9299] lo speed is unknown, defaulting to 1000 [ 131.337058][ T9341] netlink: 14 bytes leftover after parsing attributes in process `syz.0.701'. [ 131.368565][ T9295] loop4: detected capacity change from 0 to 1024 [ 131.376234][ T9341] hsr_slave_0: left promiscuous mode [ 131.385880][ T9341] hsr_slave_1: left promiscuous mode [ 131.418474][ T9295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.441593][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 131.441611][ T29] audit: type=1326 audit(2000000051.590:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f36a59ad3df code=0x7ffc0000 [ 131.489429][ T29] audit: type=1326 audit(2000000051.620:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f36a59ae9b7 code=0x7ffc0000 [ 131.512846][ T29] audit: type=1400 audit(2000000051.630:9530): avc: denied { mount } for pid=9294 comm="syz.4.696" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.534479][ T29] audit: type=1326 audit(2000000051.630:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.557923][ T29] audit: type=1326 audit(2000000051.630:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.581383][ T29] audit: type=1326 audit(2000000051.630:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.604940][ T29] audit: type=1326 audit(2000000051.630:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.628424][ T29] audit: type=1326 audit(2000000051.630:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.651936][ T29] audit: type=1326 audit(2000000051.630:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.652448][ T9305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 131.675452][ T29] audit: type=1326 audit(2000000051.630:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 131.681817][ T9305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.713358][ T9305] vhci_hcd vhci_hcd.0: Device attached [ 131.716446][ T9313] IPv6: Can't replace route, no match found [ 131.722268][ T9353] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 131.729051][ T9313] 9pnet_fd: Insufficient options for proto=fd [ 131.780593][ T9357] vhci_hcd: connection closed [ 131.780923][ T12] vhci_hcd: stop threads [ 131.790060][ T12] vhci_hcd: release socket [ 131.794758][ T12] vhci_hcd: disconnect device [ 131.878067][ T9365] loop2: detected capacity change from 0 to 164 [ 131.886870][ T9363] binfmt_misc: register: failed to install interpreter file ./file0 [ 132.046880][ T9375] loop2: detected capacity change from 0 to 164 [ 132.054823][ T9295] smc: net device bond0 applied user defined pnetid SYZ2 [ 132.064058][ T9295] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 132.613990][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.704727][ T9400] netlink: 'syz.4.711': attribute type 9 has an invalid length. [ 133.285357][ T9410] xt_hashlimit: max too large, truncated to 1048576 [ 133.411224][ T9419] binfmt_misc: register: failed to install interpreter file ./file0 [ 133.541601][ T9423] Set syz1 is full, maxelem 65536 reached [ 133.666147][ T9427] loop3: detected capacity change from 0 to 512 [ 133.809298][ T9431] pim6reg1: entered promiscuous mode [ 133.819089][ T9427] EXT4-fs (loop3): 1 orphan inode deleted [ 133.829548][ T9427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.843072][ T9427] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.091851][ T9441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9441 comm=syz.3.720 [ 134.574654][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.681056][ T9466] loop3: detected capacity change from 0 to 512 [ 134.693648][ T9468] loop2: detected capacity change from 0 to 512 [ 134.700632][ T9466] EXT4-fs: Ignoring removed oldalloc option [ 134.710865][ T9468] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 134.718862][ T9466] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.729220][ T9466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.749108][ T9466] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.757142][ T9466] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.725: Failed to acquire dquot type 1 [ 134.773951][ T9466] EXT4-fs (loop3): 1 truncate cleaned up [ 134.782431][ T9466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.799595][ T9484] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 134.819468][ T9487] __vm_enough_memory: pid: 9487, comm: syz.4.729, bytes: 21199984451584 not enough memory for the allocation [ 134.895964][ T9487] loop4: detected capacity change from 0 to 512 [ 134.925119][ T9489] 9pnet_fd: Insufficient options for proto=fd [ 134.931406][ T9488] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.725: iget: bad i_size value: 360287970189639690 [ 134.932971][ T9487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.959974][ T9487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 134.972004][ T9487] System zones: 1-12 [ 134.975171][ T9466] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.725: iget: bad i_size value: 360287970189639690 [ 135.002604][ T9487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.729: missing EA_INODE flag [ 135.019420][ T9487] EXT4-fs (loop4): Remounting filesystem read-only [ 135.028991][ T9487] EXT4-fs (loop4): 1 orphan inode deleted [ 135.062207][ T9487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.100531][ T9502] hub 1-0:1.0: USB hub found [ 135.109888][ T9487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.115471][ T9502] hub 1-0:1.0: 8 ports detected [ 135.126156][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.161184][ T9512] loop3: detected capacity change from 0 to 256 [ 135.212812][ T9512] set match dimension is over the limit! [ 135.528988][ T9527] Illegal XDP return value 4294967274 on prog (id 767) dev syz_tun, expect packet loss! [ 135.552055][ T9533] Set syz1 is full, maxelem 65536 reached [ 135.804443][ T9541] loop3: detected capacity change from 0 to 1024 [ 135.831558][ T9541] EXT4-fs: Ignoring removed orlov option [ 135.837622][ T9541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.865039][ T9546] __nla_validate_parse: 10 callbacks suppressed [ 135.865059][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 135.895821][ T9546] erspan0: entered promiscuous mode [ 135.901474][ T9546] macvtap1: entered promiscuous mode [ 135.906891][ T9546] macvtap1: entered allmulticast mode [ 135.912352][ T9546] erspan0: entered allmulticast mode [ 135.968661][ T9541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.033078][ T9550] erspan0: left allmulticast mode [ 136.038371][ T9550] erspan0: left promiscuous mode [ 136.084418][ T9546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9546 comm=syz.2.738 [ 136.402610][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.437431][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 136.522787][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 136.522826][ T29] audit: type=1326 audit(2000000056.670:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.593953][ T9572] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 136.596401][ T29] audit: type=1326 audit(2000000056.670:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.624365][ T29] audit: type=1326 audit(2000000056.670:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.647991][ T29] audit: type=1326 audit(2000000056.670:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.671563][ T29] audit: type=1326 audit(2000000056.690:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.695077][ T29] audit: type=1326 audit(2000000056.690:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.718655][ T29] audit: type=1326 audit(2000000056.690:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.719873][ T9578] loop3: detected capacity change from 0 to 512 [ 136.742260][ T29] audit: type=1326 audit(2000000056.690:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.772033][ T29] audit: type=1326 audit(2000000056.690:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.795611][ T29] audit: type=1326 audit(2000000056.690:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 136.796471][ T9578] EXT4-fs: Ignoring removed orlov option [ 136.826399][ T9579] futex_wake_op: syz.2.745 tries to shift op by -1; fix this program [ 136.841423][ T9578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.851781][ T9578] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.859067][ T9578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.740: bg 0: block 248: padding at end of block bitmap is not set [ 136.874732][ T9578] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.740: Failed to acquire dquot type 1 [ 136.888017][ T9578] EXT4-fs (loop3): 1 truncate cleaned up [ 136.889007][ T9584] __vm_enough_memory: pid: 9584, comm: syz.2.746, bytes: 21199653158912 not enough memory for the allocation [ 136.906783][ T9578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.955277][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.984884][ T9589] netlink: 'syz.4.747': attribute type 21 has an invalid length. [ 136.992764][ T9589] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.995866][ T9591] loop3: detected capacity change from 0 to 2048 [ 137.033038][ T9591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.084688][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 137.117371][ T9591] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.748: iget: bogus i_mode (4355) [ 137.149911][ T9591] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.748: iget: bogus i_mode (4355) [ 137.223577][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.272461][ T9603] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.314825][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 137.323840][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 137.357052][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.366090][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.489656][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.753'. [ 137.506895][ T9627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.753'. [ 137.534655][ T9628] hub 1-0:1.0: USB hub found [ 137.543673][ T9628] hub 1-0:1.0: 8 ports detected [ 138.375185][ T9710] xt_hashlimit: max too large, truncated to 1048576 [ 138.466920][ T9710] loop3: detected capacity change from 0 to 164 [ 138.495737][ T9710] iso9660: Unknown parameter '' [ 138.625653][ T9737] loop3: detected capacity change from 0 to 164 [ 138.676539][ T9723] blktrace: Concurrent blktraces are not allowed on sg0 [ 138.785834][ T9755] siw: device registration error -23 [ 138.789901][ T9760] loop4: detected capacity change from 0 to 512 [ 138.815808][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 139.013345][ T9737] Unsupported NM flag settings (8) [ 139.736622][ T9807] hub 1-0:1.0: USB hub found [ 139.741333][ T9807] hub 1-0:1.0: 8 ports detected [ 140.004300][ T9820] set match dimension is over the limit! [ 140.811143][ T9841] netlink: 332 bytes leftover after parsing attributes in process `syz.1.778'. [ 140.820401][ T9841] netlink: 'syz.1.778': attribute type 9 has an invalid length. [ 140.828156][ T9841] netlink: 108 bytes leftover after parsing attributes in process `syz.1.778'. [ 140.880891][ T9841] __nla_validate_parse: 1 callbacks suppressed [ 140.880971][ T9841] netlink: 3 bytes leftover after parsing attributes in process `syz.1.778'. [ 140.892172][ T9849] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 140.904250][ T9849] netlink: 224 bytes leftover after parsing attributes in process `syz.0.781'. [ 140.918016][ T9847] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 140.934880][ T9847] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.136412][ T9857] loop3: detected capacity change from 0 to 8192 [ 141.179616][ T9857] loop3: detected capacity change from 0 to 2048 [ 141.197072][ T9863] pim6reg: entered allmulticast mode [ 141.197907][ T9857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.204947][ T9863] pim6reg: left allmulticast mode [ 141.303948][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 141.526070][ T29] kauditd_printk_skb: 947 callbacks suppressed [ 141.526088][ T29] audit: type=1326 audit(2000000061.680:11239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 141.611119][ T9887] kernel profiling enabled (shift: 17) [ 141.629150][ T9888] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 141.700854][ T29] audit: type=1400 audit(2000000061.720:11240): avc: denied { write } for pid=9882 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.720675][ T29] audit: type=1326 audit(2000000061.760:11241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 141.744264][ T29] audit: type=1326 audit(2000000061.760:11242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 141.767762][ T29] audit: type=1326 audit(2000000061.780:11243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 141.791291][ T29] audit: type=1326 audit(2000000061.780:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 141.814808][ T29] audit: type=1326 audit(2000000061.780:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 141.838336][ T29] audit: type=1326 audit(2000000061.780:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 141.861808][ T29] audit: type=1326 audit(2000000061.780:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 141.885466][ T29] audit: type=1326 audit(2000000061.780:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 142.199688][ T9894] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 142.370646][ T9900] netlink: 'syz.4.794': attribute type 10 has an invalid length. [ 142.370663][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.794'. [ 142.370903][ T9900] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.370942][ T9900] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.370979][ T9900] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.371086][ T9900] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.378290][ T9900] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.423017][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 142.430224][ T9900] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.447463][ T9900] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.447509][ T9900] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.449605][ T9900] team0: Port device geneve1 added [ 142.472322][ T9904] hub 1-0:1.0: USB hub found [ 142.485243][ T9900] netlink: 'syz.4.794': attribute type 27 has an invalid length. [ 142.488436][ T9904] hub 1-0:1.0: 8 ports detected [ 142.513584][ T9900] 0XD: left allmulticast mode [ 142.654038][ T9900] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.662540][ T9900] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.671037][ T9900] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.679443][ T9900] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.692177][ T9900] veth0_macvtap: left allmulticast mode [ 142.700006][ T9900] macvtap2: left allmulticast mode [ 142.716598][ T2960] lo speed is unknown, defaulting to 1000 [ 142.722388][ T2960] sxz0: Port: 1 Link DOWN [ 142.794195][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 142.811375][ T9921] Cannot find del_set index 3 as target [ 142.869166][ T9926] random: crng reseeded on system resumption [ 142.881851][ T9926] team0: Port device geneve1 removed [ 143.326520][ T9947] xt_hashlimit: max too large, truncated to 1048576 [ 143.472180][ T9959] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 143.516510][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 143.525402][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 143.562035][ T9961] hub 1-0:1.0: USB hub found [ 143.576695][ T9968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.584654][ T9961] hub 1-0:1.0: 8 ports detected [ 143.603078][ T9968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.143935][ T9977] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 144.280903][ T9982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.355254][ T9982] wireguard0: entered promiscuous mode [ 144.394924][ T9990] siw: device registration error -23 [ 144.551698][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 144.656930][T10008] hub 1-0:1.0: USB hub found [ 144.661739][T10008] hub 1-0:1.0: 8 ports detected [ 145.109772][T10027] netlink: 'syz.1.815': attribute type 13 has an invalid length. [ 145.156696][T10025] $H: left promiscuous mode [ 145.172626][T10029] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 145.184875][T10025] dummy0: left promiscuous mode [ 145.319508][T10032] vhci_hcd: invalid port number 96 [ 145.324866][T10032] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 145.367276][T10025] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.375862][T10025] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.384287][T10025] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.392678][T10025] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.428058][T10025] ipvlan2: left promiscuous mode [ 145.485841][T10029] dummy0: entered promiscuous mode [ 145.508227][T10029] bridge0: port 1(dummy0) entered blocking state [ 145.510414][T10035] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=235 sclass=netlink_xfrm_socket pid=10035 comm=syz.0.818 [ 145.515095][T10029] bridge0: port 1(dummy0) entered disabled state [ 145.549284][T10029] dummy0: entered allmulticast mode [ 145.589358][T10037] lo speed is unknown, defaulting to 1000 [ 145.601138][T10037] lo speed is unknown, defaulting to 1000 [ 145.611519][T10044] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 145.673374][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.680850][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.688475][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.699143][T10052] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.719179][T10049] lo speed is unknown, defaulting to 1000 [ 145.725053][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725079][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725159][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725227][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725323][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725349][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725371][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725438][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725461][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725486][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725507][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725529][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725601][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725622][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725643][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725665][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725700][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725749][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725776][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725804][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725830][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725851][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725939][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725968][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.725997][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.726024][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.726996][ T2960] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.758770][T10037] lo speed is unknown, defaulting to 1000 [ 145.763981][T10049] lo speed is unknown, defaulting to 1000 [ 145.936296][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.965960][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.188926][T10094] __nla_validate_parse: 5 callbacks suppressed [ 146.188944][T10094] netlink: 9 bytes leftover after parsing attributes in process `syz.3.827'. [ 146.240076][T10094] 1XD: entered promiscuous mode [ 146.245337][T10094] 1XD: left allmulticast mode [ 146.251496][T10095] netlink: 5 bytes leftover after parsing attributes in process `syz.3.827'. [ 146.283433][T10049] lo speed is unknown, defaulting to 1000 [ 146.289493][T10095] 0XD: renamed from 31XD [ 146.305644][T10095] 0XD: left promiscuous mode [ 146.310612][T10095] 0XD: entered allmulticast mode [ 146.373974][T10095] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 146.492973][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 146.541288][ T29] kauditd_printk_skb: 964 callbacks suppressed [ 146.541303][ T29] audit: type=1326 audit(2000000066.690:12213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe1c50306f4 code=0x7ffc0000 [ 146.571060][ T29] audit: type=1326 audit(2000000066.690:12214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.594630][ T29] audit: type=1326 audit(2000000066.690:12215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.684256][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 146.708821][ T29] audit: type=1400 audit(2000000066.720:12216): avc: denied { read } for pid=10119 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 146.728414][ T29] audit: type=1326 audit(2000000066.790:12217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.752010][ T29] audit: type=1326 audit(2000000066.790:12218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.775625][ T29] audit: type=1326 audit(2000000066.790:12219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.799253][ T29] audit: type=1326 audit(2000000066.790:12220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.822960][ T29] audit: type=1326 audit(2000000066.790:12221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.846724][ T29] audit: type=1326 audit(2000000066.790:12222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 146.922568][T10145] block device autoloading is deprecated and will be removed. [ 146.959342][T10145] syz.0.830: attempt to access beyond end of device [ 146.959342][T10145] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 147.004439][T10150] xt_connbytes: Forcing CT accounting to be enabled [ 147.111804][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 147.143839][T10157] netlink: 44 bytes leftover after parsing attributes in process `syz.3.832'. [ 147.157245][T10149] dummy0 (unregistering): left allmulticast mode [ 147.175336][T10149] bridge0: port 1(dummy0) entered disabled state [ 147.478591][T10150] set match dimension is over the limit! [ 147.607401][T10203] hub 1-0:1.0: USB hub found [ 147.617387][T10203] hub 1-0:1.0: 8 ports detected [ 147.660605][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 147.669659][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 147.680881][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 147.880160][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 148.012385][T10237] lo speed is unknown, defaulting to 1000 [ 148.019057][T10243] blktrace: Concurrent blktraces are not allowed on sg0 [ 148.075143][T10222] vhci_hcd: invalid port number 96 [ 148.080353][T10222] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 148.117309][T10237] lo speed is unknown, defaulting to 1000 [ 148.245474][T10237] lo speed is unknown, defaulting to 1000 [ 149.176071][T10284] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 149.566531][T10313] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 149.621831][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.640637][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.316615][T10324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.418917][T10324] wireguard0: entered promiscuous mode [ 150.450223][T10317] Set syz1 is full, maxelem 65536 reached [ 150.460318][T10335] siw: device registration error -23 [ 150.610999][T10353] program syz.3.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.824630][T10358] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.832081][ T23] IPVS: starting estimator thread 0... [ 150.924345][T10371] IPVS: using max 2016 ests per chain, 100800 per kthread [ 151.091972][T10383] futex_wake_op: syz.0.880 tries to shift op by -1; fix this program [ 151.236003][T10386] program syz.0.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.555823][ T29] kauditd_printk_skb: 1126 callbacks suppressed [ 151.555842][ T29] audit: type=1404 audit(2000000071.710:13349): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 151.614993][ T29] audit: type=1400 audit(2000000071.740:13350): avc: denied { write } for pid=10394 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 151.634725][ T29] audit: type=1404 audit(2000000071.740:13351): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 151.649821][ T29] audit: type=1400 audit(2000000071.740:13352): avc: denied { create } for pid=10396 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.670430][ T29] audit: type=1400 audit(2000000071.750:13353): avc: denied { write } for pid=10396 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.690950][ T29] audit: type=1400 audit(2000000071.750:13354): avc: denied { read } for pid=10396 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.833290][ T29] audit: type=1400 audit(2000000071.770:13355): avc: denied { create } for pid=10390 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.853010][ T29] audit: type=1400 audit(2000000071.770:13356): avc: denied { map_create } for pid=10394 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.872392][ T29] audit: type=1400 audit(2000000071.770:13357): avc: denied { prog_load } for pid=10390 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.891776][ T29] audit: type=1400 audit(2000000071.770:13358): avc: denied { bpf } for pid=10390 comm="syz.0.883" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.938821][T10397] lo speed is unknown, defaulting to 1000 [ 151.958032][T10369] syz.3.874 (10369) used greatest stack depth: 6744 bytes left [ 151.993974][T10397] lo speed is unknown, defaulting to 1000 [ 152.088405][T10417] futex_wake_op: syz.0.892 tries to shift op by -1; fix this program [ 152.139427][T10421] program syz.0.893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.395523][T10411] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.464963][T10425] program syz.0.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.651411][T10397] lo speed is unknown, defaulting to 1000 [ 154.825320][T10476] hub 1-0:1.0: USB hub found [ 154.830163][T10476] hub 1-0:1.0: 8 ports detected [ 155.673406][T10528] program syz.4.908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.692437][T10525] 9pnet_fd: p9_fd_create_unix (10525): problem connecting socket: ./file1: -2 [ 155.806090][T10539] lo speed is unknown, defaulting to 1000 [ 155.910109][T10545] SELinux: policydb magic number 0x6e7cff8c does not match expected magic number 0xf97cff8c [ 156.029103][T10544] program syz.2.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.051253][T10545] SELinux: failed to load policy [ 156.765070][T10539] lo speed is unknown, defaulting to 1000 [ 156.853889][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 156.853903][ T29] audit: type=1326 audit(2000000077.010:13701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 156.884079][ T29] audit: type=1326 audit(2000000077.010:13702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 156.956506][T10557] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 156.964270][T10557] __nla_validate_parse: 11 callbacks suppressed [ 156.964287][T10557] netlink: 224 bytes leftover after parsing attributes in process `syz.3.915'. [ 157.087866][T10539] lo speed is unknown, defaulting to 1000 [ 157.170125][ T29] audit: type=1326 audit(2000000077.090:13703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 157.193813][ T29] audit: type=1326 audit(2000000077.090:13704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 157.217856][ T29] audit: type=1326 audit(2000000077.090:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 157.241486][ T29] audit: type=1326 audit(2000000077.100:13706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23e2d7d290 code=0x7ffc0000 [ 157.265091][ T29] audit: type=1326 audit(2000000077.100:13707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f23e2d80157 code=0x7ffc0000 [ 157.288745][ T29] audit: type=1326 audit(2000000077.100:13708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23e2d7e929 code=0x7ffc0000 [ 157.312659][ T29] audit: type=1326 audit(2000000077.100:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f23e2d80157 code=0x7ffc0000 [ 157.336273][ T29] audit: type=1326 audit(2000000077.100:13710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f23e2d7d58a code=0x7ffc0000 [ 157.671412][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 157.839687][T10582] siw: device registration error -23 [ 157.853340][T10586] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 157.999238][T10596] netlink: 9 bytes leftover after parsing attributes in process `syz.4.920'. [ 158.025846][T10596] 0XD: entered promiscuous mode [ 158.037561][T10596] netlink: 5 bytes leftover after parsing attributes in process `syz.4.920'. [ 158.051791][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 158.061304][T10596] 1XD: renamed from 30XD [ 158.074549][T10596] 1XD: left promiscuous mode [ 158.079548][T10596] 1XD: entered allmulticast mode [ 158.094312][T10596] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 158.760693][T10535] syz.1.911 (10535) used greatest stack depth: 6648 bytes left [ 158.839409][T10615] set match dimension is over the limit! [ 158.865295][T10616] program syz.0.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.973555][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 159.229996][T10629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.360808][T10634] wireguard0: entered promiscuous mode [ 160.326706][T10661] netlink: 9 bytes leftover after parsing attributes in process `syz.2.933'. [ 160.352186][T10661] 0XD: entered promiscuous mode [ 160.357441][T10661] 0XD: left allmulticast mode [ 160.378850][T10662] netlink: 5 bytes leftover after parsing attributes in process `syz.2.933'. [ 160.423753][T10662] 1XD: renamed from 30XD [ 160.435198][T10662] 1XD: left promiscuous mode [ 160.440115][T10662] 1XD: entered allmulticast mode [ 160.482744][T10662] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 162.028479][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 162.028498][ T29] audit: type=1400 audit(2000000082.090:14283): avc: denied { create } for pid=10685 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.054762][ T29] audit: type=1400 audit(2000000082.090:14284): avc: denied { write } for pid=10685 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.837591][ T29] audit: type=1400 audit(2000000083.000:14285): avc: denied { bind } for pid=10686 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.891857][ T29] audit: type=1400 audit(2000000083.040:14286): avc: denied { setopt } for pid=10701 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.962271][ T29] audit: type=1326 audit(2000000083.120:14287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.1.942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36a59ae929 code=0x0 [ 163.142476][T10702] SELinux: failed to load policy [ 163.150682][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 163.182939][ T29] audit: type=1326 audit(2000000083.330:14288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.4.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 163.215814][ T29] audit: type=1326 audit(2000000083.370:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.4.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 163.239476][ T29] audit: type=1326 audit(2000000083.370:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.4.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 163.263116][ T29] audit: type=1326 audit(2000000083.370:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.4.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 163.286772][ T29] audit: type=1326 audit(2000000083.370:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.4.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 163.339405][T10710] netlink: 128 bytes leftover after parsing attributes in process `syz.4.944'. [ 163.348774][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 163.629786][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.946'. [ 163.679119][T10721] program syz.2.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.095916][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 165.110756][T10740] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 165.511052][T10749] netlink: '+}[@': attribute type 9 has an invalid length. [ 165.518427][T10749] netlink: '+}[@': attribute type 7 has an invalid length. [ 165.525672][T10749] netlink: '+}[@': attribute type 8 has an invalid length. [ 165.707645][T10751] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.715113][T10751] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.186846][T10761] batadv_slave_1: entered promiscuous mode [ 166.264379][T10759] netlink: 52 bytes leftover after parsing attributes in process `syz.3.958'. [ 166.297980][T10759] xt_hashlimit: max too large, truncated to 1048576 [ 167.002648][T10760] batadv_slave_1: left promiscuous mode [ 167.132278][T10769] program syz.3.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.147789][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 167.147803][ T29] audit: type=1400 audit(2000000087.300:14657): avc: denied { setopt } for pid=10770 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.192512][T10771] netlink: 2564 bytes leftover after parsing attributes in process `syz.1.961'. [ 167.272941][ T29] audit: type=1400 audit(2000000087.420:14658): avc: denied { read } for pid=10770 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.475737][T10782] program syz.1.963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.524101][T10778] syzkaller1: entered promiscuous mode [ 167.529643][T10778] syzkaller1: entered allmulticast mode [ 167.541951][ T29] audit: type=1400 audit(2000000087.700:14659): avc: denied { mounton } for pid=10777 comm="syz.3.962" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 167.572963][ T29] audit: type=1326 audit(2000000087.730:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.596651][ T29] audit: type=1326 audit(2000000087.730:14661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.620470][ T29] audit: type=1326 audit(2000000087.780:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.644021][ T29] audit: type=1326 audit(2000000087.780:14663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.667705][ T29] audit: type=1326 audit(2000000087.780:14664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.691790][ T29] audit: type=1326 audit(2000000087.850:14665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.715620][ T29] audit: type=1326 audit(2000000087.850:14666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 167.771913][T10787] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 167.900081][T10799] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5122 sclass=netlink_xfrm_socket pid=10799 comm=syz.2.967 [ 168.175260][T10712] Set syz1 is full, maxelem 65536 reached [ 168.205655][T10808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.270257][T10683] Set syz1 is full, maxelem 65536 reached [ 168.296972][T10811] futex_wake_op: syz.0.971 tries to shift op by -1; fix this program [ 168.334878][T10814] wireguard0: entered promiscuous mode [ 168.382550][T10808] siw: device registration error -23 [ 168.474575][T10826] siw: device registration error -23 [ 168.691155][T10830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.974'. [ 168.751751][T10829] batadv_slave_0: entered promiscuous mode [ 168.781522][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 168.937060][T10829] batadv_slave_0 (unregistering): left promiscuous mode [ 169.032361][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 169.358931][T10850] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 169.546514][T10861] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.977'. [ 169.874411][T10879] lo speed is unknown, defaulting to 1000 [ 169.880632][T10879] lo speed is unknown, defaulting to 1000 [ 169.915493][T10883] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 169.923281][T10883] netlink: 224 bytes leftover after parsing attributes in process `syz.2.984'. [ 169.959880][T10879] lo speed is unknown, defaulting to 1000 [ 169.967351][T10885] futex_wake_op: syz.3.985 tries to shift op by -1; fix this program [ 170.152013][T10913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.989'. [ 170.371728][T10926] hub 4-0:1.0: USB hub found [ 170.391931][T10926] hub 4-0:1.0: 8 ports detected [ 170.612195][T10924] lo speed is unknown, defaulting to 1000 [ 170.633579][T10924] lo speed is unknown, defaulting to 1000 [ 171.264859][T10949] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.994'. [ 171.350173][T10951] netlink: 96 bytes leftover after parsing attributes in process `syz.2.996'. [ 171.487361][T10954] program syz.2.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.686736][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 171.697950][T10958] netlink: 256 bytes leftover after parsing attributes in process `syz.2.999'. [ 171.760373][T10963] netlink: 'syz.2.1000': attribute type 39 has an invalid length. [ 171.933967][T10924] lo speed is unknown, defaulting to 1000 [ 171.946939][T10936] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 172.263458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.401359][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 172.401465][ T29] audit: type=1400 audit(2000000092.550:15454): avc: denied { create } for pid=10977 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.471084][ T29] audit: type=1400 audit(2000000092.620:15455): avc: denied { read write } for pid=10976 comm="syz.3.1002" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 172.471053][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.471162][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.494759][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.517112][ T29] audit: type=1400 audit(2000000092.620:15456): avc: denied { open } for pid=10976 comm="syz.3.1002" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 172.524694][T10983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.540701][ T29] audit: type=1400 audit(2000000092.620:15457): avc: denied { setopt } for pid=10977 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.561043][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.567528][ T29] audit: type=1400 audit(2000000092.660:15458): avc: denied { bind } for pid=10977 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.574489][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.574513][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.594019][ T29] audit: type=1400 audit(2000000092.660:15459): avc: denied { name_bind } for pid=10977 comm="syz.4.1003" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 172.601354][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.608726][ T29] audit: type=1400 audit(2000000092.660:15460): avc: denied { node_bind } for pid=10977 comm="syz.4.1003" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 172.630641][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.662246][ T29] audit: type=1400 audit(2000000092.810:15461): avc: denied { write } for pid=10982 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 172.668133][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.690000][ T29] audit: type=1400 audit(2000000092.850:15462): avc: denied { read } for pid=10982 comm="syz.0.1001" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.694644][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.719015][ T29] audit: type=1400 audit(2000000092.850:15463): avc: denied { open } for pid=10982 comm="syz.0.1001" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.726402][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.758833][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.766281][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.900873][T10983] siw: device registration error -23 [ 172.911868][T10987] wireguard0: entered promiscuous mode [ 172.994194][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.001643][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.009230][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.016822][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.024609][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.032061][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.039674][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.047243][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.054696][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.062168][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.069607][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.077059][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.084500][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.091927][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.099383][ T2960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.107715][ T2960] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 173.120410][T11011] xt_hashlimit: max too large, truncated to 1048576 [ 173.197382][T11027] batadv_slave_1: entered promiscuous mode [ 173.210050][T11026] batadv_slave_1: left promiscuous mode [ 173.386330][T11033] deleting an unspecified loop device is not supported. [ 174.029612][T11031] syz.0.1009 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 174.040739][T11031] CPU: 1 UID: 0 PID: 11031 Comm: syz.0.1009 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 174.040775][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.040792][T11031] Call Trace: [ 174.040800][T11031] [ 174.040811][T11031] __dump_stack+0x1d/0x30 [ 174.040835][T11031] dump_stack_lvl+0xe8/0x140 [ 174.040884][T11031] dump_stack+0x15/0x1b [ 174.040952][T11031] dump_header+0x81/0x220 [ 174.040995][T11031] oom_kill_process+0x334/0x3f0 [ 174.041035][T11031] out_of_memory+0x979/0xb80 [ 174.041075][T11031] try_charge_memcg+0x5e6/0x9e0 [ 174.041111][T11031] charge_memcg+0x51/0xc0 [ 174.041152][T11031] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 174.041224][T11031] __read_swap_cache_async+0x1df/0x350 [ 174.041258][T11031] swap_cluster_readahead+0x376/0x3e0 [ 174.041298][T11031] swapin_readahead+0xde/0x6f0 [ 174.041335][T11031] ? __filemap_get_folio+0x49f/0x650 [ 174.041375][T11031] ? __rcu_read_unlock+0x34/0x70 [ 174.041403][T11031] ? swap_cache_get_folio+0x77/0x200 [ 174.041434][T11031] do_swap_page+0x301/0x2430 [ 174.041495][T11031] ? css_rstat_updated+0xcd/0x5b0 [ 174.041607][T11031] ? __pfx_default_wake_function+0x10/0x10 [ 174.041633][T11031] handle_mm_fault+0x9a5/0x2be0 [ 174.041655][T11031] ? mas_walk+0xf2/0x120 [ 174.041681][T11031] do_user_addr_fault+0x636/0x1090 [ 174.041793][T11031] exc_page_fault+0x62/0xa0 [ 174.041824][T11031] asm_exc_page_fault+0x26/0x30 [ 174.041844][T11031] RIP: 0033:0x7fe1c4f0538c [ 174.041862][T11031] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 174.041885][T11031] RSP: 002b:00007ffff915fc90 EFLAGS: 00010287 [ 174.041947][T11031] RAX: 0000000000000000 RBX: 00007fe1c5257040 RCX: 0000000000000000 [ 174.041963][T11031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555565c0e808 [ 174.041975][T11031] RBP: 00007fe1c5257ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 174.041987][T11031] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002a942 [ 174.042050][T11031] R13: 00007fe1c5256240 R14: ffffffffffffffff R15: 00007ffff915fda0 [ 174.042074][T11031] [ 174.042081][T11031] memory: usage 307200kB, limit 307200kB, failcnt 223 [ 174.264063][T11031] memory+swap: usage 307780kB, limit 9007199254740988kB, failcnt 0 [ 174.271998][T11031] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 174.279319][T11031] Memory cgroup stats for /syz0: [ 174.279633][T11031] cache 0 [ 174.287603][T11031] rss 0 [ 174.290380][T11031] shmem 0 [ 174.293350][T11031] mapped_file 0 [ 174.296822][T11031] dirty 0 [ 174.299761][T11031] writeback 0 [ 174.303047][T11031] workingset_refault_anon 636 [ 174.307759][T11031] workingset_refault_file 64 [ 174.312377][T11031] swap 593920 [ 174.315686][T11031] swapcached 0 [ 174.319140][T11031] pgpgin 157437 [ 174.322629][T11031] pgpgout 157435 [ 174.326210][T11031] pgfault 174971 [ 174.329777][T11031] pgmajfault 114 [ 174.333357][T11031] inactive_anon 0 [ 174.337015][T11031] active_anon 0 [ 174.337026][T11031] inactive_file 8192 [ 174.337041][T11031] active_file 0 [ 174.337050][T11031] unevictable 0 [ 174.337059][T11031] hierarchical_memory_limit 314572800 [ 174.337069][T11031] hierarchical_memsw_limit 9223372036854771712 [ 174.337078][T11031] total_cache 0 [ 174.337084][T11031] total_rss 0 [ 174.337090][T11031] total_shmem 0 [ 174.337096][T11031] total_mapped_file 0 [ 174.337103][T11031] total_dirty 0 [ 174.337109][T11031] total_writeback 0 [ 174.337115][T11031] total_workingset_refault_anon 636 [ 174.337166][T11031] total_workingset_refault_file 64 [ 174.337175][T11031] total_swap 593920 [ 174.337183][T11031] total_swapcached 0 [ 174.337192][T11031] total_pgpgin 157437 [ 174.337201][T11031] total_pgpgout 157435 [ 174.337209][T11031] total_pgfault 174971 [ 174.337218][T11031] total_pgmajfault 114 [ 174.337227][T11031] total_inactive_anon 0 [ 174.337237][T11031] total_active_anon 0 [ 174.337245][T11031] total_inactive_file 8192 [ 174.337255][T11031] total_active_file 0 [ 174.337262][T11031] total_unevictable 0 [ 174.337287][T11031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1009,pid=11031,uid=0 [ 174.337428][T11031] Memory cgroup out of memory: Killed process 11031 (syz.0.1009) total-vm:100168kB, anon-rss:976kB, file-rss:26408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 174.530069][T11049] sd 0:0:1:0: device reset [ 174.534424][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.541977][T11049] __nla_validate_parse: 2 callbacks suppressed [ 174.541983][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.541994][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 174.544623][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 174.548260][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.555574][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 174.599873][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.607698][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.612939][T11047] lo speed is unknown, defaulting to 1000 [ 174.615410][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.615435][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.615465][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.615563][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.623848][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.629012][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.636710][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.644315][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.651945][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.659303][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.666941][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.674365][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.674427][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.682017][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.689400][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.697060][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.704479][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.712051][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.719708][ T2960] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 174.727251][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.735662][ T2960] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.742250][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.751725][T11047] lo speed is unknown, defaulting to 1000 [ 174.757391][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.757414][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.811078][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.818612][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.826101][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.833554][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.841083][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.848523][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.856033][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.863097][T11063] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 174.863503][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.871274][T11063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1012'. [ 174.887793][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.895325][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.902758][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.910250][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.917719][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.925250][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.932676][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.971105][T11047] lo speed is unknown, defaulting to 1000 [ 175.009258][ T3396] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 175.064699][T11034] syz.0.1009 (11034) used greatest stack depth: 6040 bytes left [ 175.103696][T11058] IPVS: Error connecting to the multicast addr [ 175.139206][T11103] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 175.139251][T11103] netlink: 'syz.0.1016': attribute type 2 has an invalid length. [ 175.139267][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 175.185181][T11103] lo speed is unknown, defaulting to 1000 [ 175.185621][T11103] lo speed is unknown, defaulting to 1000 [ 175.345931][T11103] lo speed is unknown, defaulting to 1000 [ 175.437276][T11150] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 175.910840][T11181] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.972282][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 176.001916][T11181] wireguard0: entered promiscuous mode [ 176.058774][T11199] siw: device registration error -23 [ 176.093678][T11201] lo speed is unknown, defaulting to 1000 [ 176.100002][T11201] lo speed is unknown, defaulting to 1000 [ 176.216132][T11201] lo speed is unknown, defaulting to 1000 [ 176.377880][T11234] futex_wake_op: syz.2.1028 tries to shift op by -1; fix this program [ 176.446644][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.454168][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.461690][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496203][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496236][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496264][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496289][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496310][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496330][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496370][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496397][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496422][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496444][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496485][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496515][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496542][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496569][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496595][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496622][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496707][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496727][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496819][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496846][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496896][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496938][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496966][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.496992][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.646836][ T3307] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 176.653070][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.653108][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 176.660541][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 176.660609][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.660628][ T3307] Call Trace: [ 176.660664][ T3307] [ 176.660677][ T3307] __dump_stack+0x1d/0x30 [ 176.660745][ T3307] dump_stack_lvl+0xe8/0x140 [ 176.660825][ T3307] dump_stack+0x15/0x1b [ 176.660881][ T3307] dump_header+0x81/0x220 [ 176.660978][ T3307] oom_kill_process+0x334/0x3f0 [ 176.661052][ T3307] out_of_memory+0x979/0xb80 [ 176.661097][ T3307] try_charge_memcg+0x5e6/0x9e0 [ 176.661139][ T3307] charge_memcg+0x51/0xc0 [ 176.661242][ T3307] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 176.661367][ T3307] __read_swap_cache_async+0x1df/0x350 [ 176.661455][ T3307] swap_cluster_readahead+0x376/0x3e0 [ 176.661546][ T3307] swapin_readahead+0xde/0x6f0 [ 176.661642][ T3307] ? __filemap_get_folio+0x49f/0x650 [ 176.661688][ T3307] ? swap_cache_get_folio+0x77/0x200 [ 176.661733][ T3307] do_swap_page+0x301/0x2430 [ 176.661761][ T3307] ? finish_task_switch+0xad/0x2b0 [ 176.661795][ T3307] ? __pfx_default_wake_function+0x10/0x10 [ 176.661831][ T3307] handle_mm_fault+0x9a5/0x2be0 [ 176.661927][ T3307] ? mas_walk+0xf2/0x120 [ 176.661961][ T3307] do_user_addr_fault+0x636/0x1090 [ 176.662008][ T3307] ? fpregs_restore_userregs+0xe2/0x1d0 [ 176.662052][ T3307] ? switch_fpu_return+0xe/0x20 [ 176.662152][ T3307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.662191][ T3307] exc_page_fault+0x62/0xa0 [ 176.662247][ T3307] asm_exc_page_fault+0x26/0x30 [ 176.662275][ T3307] RIP: 0033:0x7f92255b11a5 [ 176.662298][ T3307] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 176.662334][ T3307] RSP: 002b:00007ffca55781d8 EFLAGS: 00010246 [ 176.662355][ T3307] RAX: 0000000000000000 RBX: 00000000000002a5 RCX: 00007f92255b11a3 [ 176.662373][ T3307] RDX: 00007ffca55781f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.662390][ T3307] RBP: 00007ffca557825c R08: 0000000036be41a0 R09: 0000000000000000 [ 176.662407][ T3307] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 176.662424][ T3307] R13: 00000000000927c0 R14: 000000000002b289 R15: 00007ffca55782b0 [ 176.662452][ T3307] [ 176.662460][ T3307] memory: usage 307200kB, limit 307200kB, failcnt 1745 [ 176.668788][T11236] lo speed is unknown, defaulting to 1000 [ 176.675316][ T3307] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 176.686752][T11236] lo speed is unknown, defaulting to 1000 [ 176.693616][ T3307] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 176.693640][ T3307] Memory cgroup stats for /syz4: [ 176.775004][T11236] lo speed is unknown, defaulting to 1000 [ 176.788950][ T3307] cache 0 [ 176.838340][ T3396] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 176.839751][ T3307] rss 0 [ 176.839767][ T3307] shmem 0 [ 176.839773][ T3307] mapped_file 0 [ 176.839781][ T3307] dirty 0 [ 176.999495][ T3307] writeback 0 [ 176.999506][ T3307] workingset_refault_anon 253 [ 176.999517][ T3307] workingset_refault_file 888 [ 176.999526][ T3307] swap 749568 [ 176.999533][ T3307] swapcached 0 [ 176.999541][ T3307] pgpgin 162372 [ 176.999550][ T3307] pgpgout 162371 [ 176.999558][ T3307] pgfault 164002 [ 176.999567][ T3307] pgmajfault 162 [ 176.999574][ T3307] inactive_anon 0 [ 176.999582][ T3307] active_anon 0 [ 176.999589][ T3307] inactive_file 0 [ 176.999670][ T3307] active_file 4096 [ 176.999679][ T3307] unevictable 0 [ 176.999687][ T3307] hierarchical_memory_limit 314572800 [ 176.999695][ T3307] hierarchical_memsw_limit 9223372036854771712 [ 176.999703][ T3307] total_cache 0 [ 176.999772][ T3307] total_rss 0 [ 176.999781][ T3307] total_shmem 0 [ 176.999789][ T3307] total_mapped_file 0 [ 176.999798][ T3307] total_dirty 0 [ 176.999807][ T3307] total_writeback 0 [ 176.999815][ T3307] total_workingset_refault_anon 261 [ 176.999822][ T3307] total_workingset_refault_file 888 [ 176.999849][ T3307] total_swap 749568 [ 176.999856][ T3307] total_swapcached 0 [ 176.999863][ T3307] total_pgpgin 176663 [ 176.999869][ T3307] total_pgpgout 176662 [ 176.999876][ T3307] total_pgfault 173855 [ 176.999957][ T3307] total_pgmajfault 165 [ 176.999965][ T3307] total_inactive_anon 0 [ 176.999972][ T3307] total_active_anon 0 [ 176.999979][ T3307] total_inactive_file 0 [ 176.999987][ T3307] total_active_file 4096 [ 176.999994][ T3307] total_unevictable 0 [ 177.000002][ T3307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1019,pid=11172,uid=0 [ 177.000114][ T3307] Memory cgroup out of memory: Killed process 11172 (syz.4.1019) total-vm:93752kB, anon-rss:936kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 177.364020][T11287] futex_wake_op: syz.1.1034 tries to shift op by -1; fix this program [ 177.416442][ T29] kauditd_printk_skb: 825 callbacks suppressed [ 177.416458][ T29] audit: type=1400 audit(2000000097.570:16289): avc: denied { ioctl } for pid=11284 comm="syz.2.1035" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.512623][T11293] xt_hashlimit: max too large, truncated to 1048576 [ 177.747324][ T29] audit: type=1400 audit(2000000097.900:16290): avc: denied { read } for pid=11306 comm="syz.4.1040" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 177.770335][ T29] audit: type=1400 audit(2000000097.900:16291): avc: denied { open } for pid=11306 comm="syz.4.1040" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 177.807784][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 177.816733][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 177.828551][T11307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.835173][T11307] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 177.842854][T11307] audit: backlog limit exceeded [ 177.847877][ T29] audit: type=1326 audit(2000000097.950:16292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 177.849246][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 177.871624][ T29] audit: type=1326 audit(2000000097.950:16293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 177.871669][ T29] audit: type=1326 audit(2000000097.950:16294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 177.871756][ T29] audit: type=1326 audit(2000000097.950:16295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922557e929 code=0x7ffc0000 [ 177.900275][T11314] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1038'. [ 177.994211][T11323] futex_wake_op: syz.3.1041 tries to shift op by -1; fix this program [ 178.200105][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 178.215672][T11305] vhci_hcd: invalid port number 255 [ 178.221808][T11305] vhci_hcd: invalid port number 255 [ 178.430177][ T23] IPVS: starting estimator thread 0... [ 178.543589][T11347] IPVS: using max 2352 ests per chain, 117600 per kthread [ 178.585833][T11351] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 178.777157][T11353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.786688][T11353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.797534][T11353] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 178.808379][T11353] SELinux: failed to load policy [ 178.978714][T11359] syzkaller0: entered promiscuous mode [ 178.984581][T11359] syzkaller0: entered allmulticast mode [ 179.109613][T11367] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 179.152397][T11370] tipc: Enabling of bearer rejected, already enabled [ 179.162834][T11370] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.199790][T11375] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 179.482919][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.490552][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.498211][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.504321][T11386] lo speed is unknown, defaulting to 1000 [ 179.506308][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.512593][T11386] lo speed is unknown, defaulting to 1000 [ 179.518826][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.518854][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.518878][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.518902][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.518930][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.561978][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.569513][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.576953][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.584402][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.591891][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.599377][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.606882][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.611748][T11386] lo speed is unknown, defaulting to 1000 [ 179.614291][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.614320][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.614385][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.642430][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.649918][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.657362][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.664806][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.672320][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.679842][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.687321][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.695337][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.702770][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.710219][ T3396] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.718204][ T3396] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 179.915867][T11425] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 179.923785][T11425] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1060'. [ 180.009813][T11427] lo speed is unknown, defaulting to 1000 [ 180.016461][T11427] lo speed is unknown, defaulting to 1000 [ 180.133083][T11427] lo speed is unknown, defaulting to 1000 [ 180.484523][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 180.598491][T11460] loop0: detected capacity change from 0 to 512 [ 180.620115][T11460] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.728116][T11460] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 180.736213][T11460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 180.773507][T11460] System zones: 0-1, 15-15, 18-18, 34-34 [ 180.779523][T11460] EXT4-fs (loop0): orphan cleanup on readonly fs [ 180.793683][T11460] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 180.808341][T11460] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 180.816412][T11460] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1063: bg 0: block 40: padding at end of block bitmap is not set [ 180.832049][T11460] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 180.841958][T11460] EXT4-fs (loop0): 1 truncate cleaned up [ 180.848269][T11460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.874241][T11460] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 180.882281][T11460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 180.927312][T11473] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.963680][T11473] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 181.053189][T11483] random: crng reseeded on system resumption [ 181.102496][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.128437][T11491] loop0: detected capacity change from 0 to 128 [ 181.244077][T11503] syz.0.1071: attempt to access beyond end of device [ 181.244077][T11503] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 181.258250][T11498] tipc: Enabling of bearer rejected, failed to enable media [ 181.273003][T11503] syz.0.1071: attempt to access beyond end of device [ 181.273003][T11503] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 181.287912][T11503] syz.0.1071: attempt to access beyond end of device [ 181.287912][T11503] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 181.341726][T11503] syz.0.1071: attempt to access beyond end of device [ 181.341726][T11503] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 181.363682][T11503] syz.0.1071: attempt to access beyond end of device [ 181.363682][T11503] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 181.391399][T11503] syz.0.1071: attempt to access beyond end of device [ 181.391399][T11503] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 181.411604][T11503] syz.0.1071: attempt to access beyond end of device [ 181.411604][T11503] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 181.416650][T11507] futex_wake_op: syz.4.1074 tries to shift op by -1; fix this program [ 181.425236][T11503] syz.0.1071: attempt to access beyond end of device [ 181.425236][T11503] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 181.447179][T11503] syz.0.1071: attempt to access beyond end of device [ 181.447179][T11503] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 181.460897][T11503] syz.0.1071: attempt to access beyond end of device [ 181.460897][T11503] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 182.097697][T11523] loop0: detected capacity change from 0 to 1024 [ 182.115422][T11527] IPv6: sit2: Disabled Multicast RS [ 182.115643][T11523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.130702][T11527] sit2: entered allmulticast mode [ 182.188290][T11534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 182.212503][ T3308] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 182.239334][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.276434][T11536] lo speed is unknown, defaulting to 1000 [ 182.282640][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 182.294311][T11536] lo speed is unknown, defaulting to 1000 [ 182.310758][T11564] loop0: detected capacity change from 0 to 1024 [ 182.317990][T11564] EXT4-fs: Ignoring removed nobh option [ 182.323676][T11564] EXT4-fs: Ignoring removed bh option [ 182.357049][T11564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.415143][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 182.424144][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 182.440396][T11536] lo speed is unknown, defaulting to 1000 [ 182.447781][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 182.471770][T11564] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1082'. [ 182.558199][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.657386][T11603] IPVS: Error connecting to the multicast addr [ 182.733975][ T29] kauditd_printk_skb: 840 callbacks suppressed [ 182.733991][ T29] audit: type=1400 audit(2000000102.890:17135): avc: denied { write } for pid=11602 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.809213][T11605] lo speed is unknown, defaulting to 1000 [ 182.827373][T11612] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 182.835198][T11612] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1087'. [ 182.838680][ T29] audit: type=1326 audit(2000000102.950:17136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 182.844799][T11605] lo speed is unknown, defaulting to 1000 [ 182.868261][ T29] audit: type=1326 audit(2000000102.950:17137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 182.897994][ T29] audit: type=1326 audit(2000000102.950:17138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 182.921734][ T29] audit: type=1326 audit(2000000102.950:17139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 182.945495][ T29] audit: type=1326 audit(2000000102.950:17140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 182.969228][ T29] audit: type=1326 audit(2000000102.950:17141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 182.993026][ T29] audit: type=1326 audit(2000000102.950:17142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 183.016834][ T29] audit: type=1326 audit(2000000102.950:17143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 183.040557][ T29] audit: type=1326 audit(2000000102.950:17144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c502e929 code=0x7ffc0000 [ 183.148407][T11616] loop0: detected capacity change from 0 to 256 [ 183.171920][T11616] msdos: Unknown parameter '?H(B a"!5' [ 183.287455][T11605] lo speed is unknown, defaulting to 1000 [ 183.880378][T11659] smc: net device bond0 erased user defined pnetid SYZ2 [ 183.913997][T11659] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 184.000187][T11650] vhci_hcd: invalid port number 255 [ 184.006392][T11650] vhci_hcd: invalid port number 255 [ 184.126407][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 184.134249][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 184.152147][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.159905][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.167730][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.175448][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183131][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183158][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183186][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183273][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183296][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183321][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183346][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183420][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183442][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.183463][ T1035] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.261548][ T1035] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.269521][T11672] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 184.375607][T11672] dummy0: entered promiscuous mode [ 184.381710][T11672] bridge0: port 1(dummy0) entered blocking state [ 184.388366][T11672] bridge0: port 1(dummy0) entered disabled state [ 184.398197][T11681] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 184.416214][T11672] dummy0: entered allmulticast mode [ 184.605736][T11693] tipc: Enabling of bearer rejected, failed to enable media [ 185.198428][T11716] __nla_validate_parse: 4 callbacks suppressed [ 185.198443][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 185.245809][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1106'. [ 185.254895][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1106'. [ 185.436441][T11725] futex_wake_op: syz.3.1110 tries to shift op by -1; fix this program [ 185.580978][T11732] loop0: detected capacity change from 0 to 512 [ 185.675151][T11732] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1113: invalid block [ 185.719675][T11732] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1113: invalid indirect mapped block 4294967295 (level 1) [ 185.781128][T11732] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1113: invalid indirect mapped block 4294967295 (level 1) [ 185.814021][T11732] EXT4-fs (loop0): 2 truncates cleaned up [ 185.826075][T11732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.930053][T11732] netlink: '+}[@': attribute type 10 has an invalid length. [ 185.947963][T11732] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.960291][T11732] $H: (slave team0): Enslaving as an active interface with an up link [ 186.046884][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.072104][T11753] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1115'. [ 186.600030][T11765] lo speed is unknown, defaulting to 1000 [ 186.609559][T11765] lo speed is unknown, defaulting to 1000 [ 186.737694][T11765] lo speed is unknown, defaulting to 1000 [ 187.278060][T11805] IPVS: Error connecting to the multicast addr [ 187.744458][ T29] kauditd_printk_skb: 1204 callbacks suppressed [ 187.744473][ T29] audit: type=1326 audit(2000000107.900:18349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.774574][ T29] audit: type=1326 audit(2000000107.900:18350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.798381][ T29] audit: type=1326 audit(2000000107.900:18351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.863274][ T29] audit: type=1326 audit(2000000107.900:18352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.887076][ T29] audit: type=1326 audit(2000000107.900:18353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.887125][ T29] audit: type=1326 audit(2000000107.900:18354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.887193][ T29] audit: type=1326 audit(2000000107.940:18355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.887230][ T29] audit: type=1326 audit(2000000107.940:18356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.887268][ T29] audit: type=1326 audit(2000000107.940:18357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 187.887351][ T29] audit: type=1326 audit(2000000107.940:18358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 188.974941][T11854] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.017994][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 189.062555][T11869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.105257][T11869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1138'. [ 189.217844][T11884] hub 4-0:1.0: USB hub found [ 189.222577][T11884] hub 4-0:1.0: 8 ports detected [ 189.354590][T11886] smc: net device bond0 applied user defined pnetid SYZ2 [ 189.361715][T11886] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 189.370141][T11886] smc: net device bond0 erased user defined pnetid SYZ2 [ 189.377163][T11886] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 189.830133][T11901] loop0: detected capacity change from 0 to 256 [ 189.848120][T11901] msdos: Unknown parameter '?H(B a"!5' [ 189.850975][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1144'. [ 189.882740][T11903] rdma_op ffff888101641580 conn xmit_rdma 0000000000000000 [ 189.953953][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 189.983921][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 190.121576][T11923] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.1149'. [ 190.280906][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'. [ 190.297320][T11936] netlink: 'syz.3.1152': attribute type 13 has an invalid length. [ 190.978315][T11960] loop0: detected capacity change from 0 to 512 [ 190.985264][T11960] ext4: Unknown parameter 'permit_directio' [ 190.997882][T11960] loop0: detected capacity change from 0 to 512 [ 191.005906][T11960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.024191][T11960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 191.032383][T11960] System zones: 0-2, 18-18, 34-34 [ 191.039428][T11960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.052558][T11960] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.179234][T11949] smc: net device bond0 applied user defined pnetid SYZ2 [ 191.213363][T11949] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 191.236390][T11973] smc: net device bond0 erased user defined pnetid SYZ2 [ 191.259224][T11973] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 191.370502][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.975276][T12051] netlink: '+}[@': attribute type 10 has an invalid length. [ 191.987571][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.996823][T12051] bond0: (slave team0): Enslaving as an active interface with an up link [ 192.062670][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 192.388795][T12076] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 192.448144][T12062] IPVS: stopping master sync thread 12076 ... [ 192.588847][T12087] $H: entered promiscuous mode [ 192.593994][T12087] team0: entered promiscuous mode [ 192.637081][T12087] loop0: detected capacity change from 0 to 512 [ 192.662200][T12087] EXT4-fs (loop0): 1 orphan inode deleted [ 192.668655][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.681538][T11986] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 192.695606][T12087] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.991069][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.069044][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 193.069061][ T29] audit: type=1400 audit(2000000113.220:19051): avc: denied { read } for pid=12102 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 193.134823][ T29] audit: type=1400 audit(2000000113.260:19052): avc: denied { ioctl } for pid=12102 comm="syz.0.1169" path="socket:[21691]" dev="sockfs" ino=21691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.178798][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 193.220897][T12106] loop0: detected capacity change from 0 to 128 [ 193.256534][T12106] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.277094][T12106] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.484019][ T29] audit: type=1400 audit(2000000113.640:19053): avc: denied { create } for pid=12116 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.768105][ T29] audit: type=1326 audit(2000000113.920:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.792478][ T29] audit: type=1326 audit(2000000113.920:19055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.816131][ T29] audit: type=1326 audit(2000000113.920:19056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.817240][T12120] xt_hashlimit: size too large, truncated to 1048576 [ 193.839946][ T29] audit: type=1326 audit(2000000113.920:19057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.846733][T12120] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 193.877671][ T29] audit: type=1326 audit(2000000113.920:19058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.901559][ T29] audit: type=1326 audit(2000000113.920:19059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.925181][ T29] audit: type=1326 audit(2000000113.920:19060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626729e929 code=0x7ffc0000 [ 193.964222][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.990636][T12130] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 194.018640][T12123] tipc: Enabling of bearer rejected, failed to enable media [ 194.436695][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 194.445892][T12142] vcan0: entered promiscuous mode [ 194.450958][T12142] vcan0: entered allmulticast mode [ 194.473991][T12145] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 194.536005][T12147] hub 1-0:1.0: USB hub found [ 194.540824][T12147] hub 1-0:1.0: 8 ports detected [ 194.849277][T12159] netlink: 'syz.0.1183': attribute type 39 has an invalid length. [ 195.047782][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.055285][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.062702][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.070749][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.078387][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.086036][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.093662][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.101072][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.108603][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.116049][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.123477][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.130877][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.138306][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.145782][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.213759][T12166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.221058][T12166] IPv6: NLM_F_CREATE should be set when creating new route [ 195.228387][T12166] IPv6: NLM_F_CREATE should be set when creating new route [ 195.235679][T12166] IPv6: NLM_F_CREATE should be set when creating new route [ 195.258560][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.266145][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.273664][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.281143][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.288629][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.296057][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.303501][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.310902][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.318423][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.325857][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.333276][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.340762][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.348200][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.355800][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.552293][T12177] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1189'. [ 195.563140][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 195.584699][T12177] bond0 (unregistering): Released all slaves [ 195.609368][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 195.666217][T12220] random: crng reseeded on system resumption [ 195.800325][T12220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1190'. [ 195.955531][T12240] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 195.963446][T12240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1187'. [ 196.067794][T12234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1194'. [ 196.095644][T12234] random: crng reseeded on system resumption [ 196.180548][T12249] lo speed is unknown, defaulting to 1000 [ 196.193919][T12249] lo speed is unknown, defaulting to 1000 [ 196.312907][T12249] lo speed is unknown, defaulting to 1000 [ 196.474096][T12283] uprobe: syz.1.1198:12283 failed to unregister, leaking uprobe [ 196.644700][T12294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=12294 comm=syz.4.1201 [ 197.687846][T12344] loop0: detected capacity change from 0 to 1024 [ 197.696271][T12344] EXT4-fs: Ignoring removed i_version option [ 197.702477][T12344] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.710074][T12344] EXT4-fs: Ignoring removed nobh option [ 197.715843][T12344] EXT4-fs: Ignoring removed bh option [ 197.735119][T12344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.765413][T12344] tmpfs: Unknown parameter 'grpquota' [ 197.788539][T12344] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1209: Allocating blocks 385-513 which overlap fs metadata [ 197.811583][T12344] EXT4-fs (loop0): pa ffff888106a4a1c0: logic 16, phys. 129, len 24 [ 197.819736][T12344] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 197.831126][T12344] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 197.843501][T12344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 197.843501][T12344] [ 197.853443][T12344] EXT4-fs (loop0): Total free blocks count 0 [ 197.859526][T12344] EXT4-fs (loop0): Free/Dirty block details [ 197.865657][T12344] EXT4-fs (loop0): free_blocks=128 [ 197.870829][T12344] EXT4-fs (loop0): dirty_blocks=0 [ 197.876056][T12344] EXT4-fs (loop0): Block reservation details [ 197.882063][T12344] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 197.902302][T12368] futex_wake_op: syz.4.1214 tries to shift op by -1; fix this program [ 197.931094][T12369] IPv6: sit2: Disabled Multicast RS [ 197.947555][T12369] sit2: entered allmulticast mode [ 197.973703][T12375] ALSA: seq fatal error: cannot create timer (-19) [ 197.980980][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 198.073232][ T29] kauditd_printk_skb: 900 callbacks suppressed [ 198.073284][ T29] audit: type=1326 audit(2000000118.220:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.164012][ T29] audit: type=1326 audit(2000000118.260:19962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.187926][ T29] audit: type=1326 audit(2000000118.260:19963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.211953][ T29] audit: type=1326 audit(2000000118.260:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.211996][ T29] audit: type=1326 audit(2000000118.270:19965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.212107][ T29] audit: type=1326 audit(2000000118.270:19966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.212147][ T29] audit: type=1326 audit(2000000118.270:19967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.212244][ T29] audit: type=1326 audit(2000000118.270:19968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.212361][ T29] audit: type=1326 audit(2000000118.270:19969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 198.212400][ T29] audit: type=1326 audit(2000000118.270:19970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a59ae929 code=0x7ffc0000 [ 199.071002][T12446] futex_wake_op: syz.4.1227 tries to shift op by -1; fix this program [ 199.178542][T12452] pimreg: entered allmulticast mode [ 199.188002][T12452] pimreg: left allmulticast mode [ 199.348445][T12460] IPv6: sit2: Disabled Multicast RS [ 199.360012][T12460] sit2: entered allmulticast mode [ 199.392128][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1230'. [ 199.878266][T12502] vhci_hcd: invalid port number 255 [ 199.883568][T12502] vhci_hcd: invalid port number 255 [ 200.211109][T12509] futex_wake_op: syz.0.1239 tries to shift op by -1; fix this program [ 201.207340][T12547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=12547 comm=syz.3.1245 [ 201.330894][T12559] loop0: detected capacity change from 0 to 256 [ 201.339268][T12559] msdos: Unknown parameter '?H(B a"!5' [ 201.675087][T12583] futex_wake_op: syz.3.1250 tries to shift op by -1; fix this program [ 201.901926][T12559] ================================================================== [ 201.910057][T12559] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 201.917886][T12559] [ 201.920207][T12559] write to 0xffffea0004afa598 of 8 bytes by task 12523 on cpu 0: [ 201.927923][T12559] __filemap_remove_folio+0x1a5/0x2a0 [ 201.933304][T12559] filemap_remove_folio+0x6d/0x1d0 [ 201.938425][T12559] truncate_inode_folio+0x42/0x50 [ 201.943449][T12559] shmem_undo_range+0x244/0xa80 [ 201.948308][T12559] shmem_evict_inode+0x134/0x520 [ 201.953246][T12559] evict+0x2e3/0x550 [ 201.957149][T12559] iput+0x447/0x5b0 [ 201.960959][T12559] dentry_unlink_inode+0x24f/0x260 [ 201.966082][T12559] __dentry_kill+0x18d/0x4b0 [ 201.970676][T12559] dput+0x5e/0xd0 [ 201.974318][T12559] __fput+0x444/0x650 [ 201.978307][T12559] ____fput+0x1c/0x30 [ 201.982295][T12559] task_work_run+0x12e/0x1a0 [ 201.986890][T12559] do_exit+0x47f/0x1590 [ 201.991059][T12559] do_group_exit+0xff/0x140 [ 201.995571][T12559] get_signal+0xe59/0xf70 [ 201.999915][T12559] arch_do_signal_or_restart+0x96/0x480 [ 202.005480][T12559] irqentry_exit_to_user_mode+0x5e/0xa0 [ 202.011043][T12559] irqentry_exit+0x12/0x50 [ 202.015477][T12559] exc_general_protection+0x15b/0x1f0 [ 202.020856][T12559] asm_exc_general_protection+0x26/0x30 [ 202.026402][T12559] [ 202.028727][T12559] read to 0xffffea0004afa598 of 8 bytes by task 12559 on cpu 1: [ 202.036360][T12559] folio_mapping+0xa1/0x120 [ 202.040871][T12559] evict_folios+0xdb9/0x33d0 [ 202.045465][T12559] try_to_shrink_lruvec+0x45a/0x7e0 [ 202.050673][T12559] shrink_lruvec+0x22e/0x1b40 [ 202.055354][T12559] shrink_node+0x686/0x2120 [ 202.059865][T12559] do_try_to_free_pages+0x3f6/0xcd0 [ 202.065070][T12559] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 202.070969][T12559] try_charge_memcg+0x358/0x9e0 [ 202.075824][T12559] obj_cgroup_charge_pages+0xa6/0x150 [ 202.081212][T12559] __memcg_kmem_charge_page+0x9f/0x170 [ 202.086692][T12559] __alloc_frozen_pages_noprof+0x188/0x360 [ 202.092521][T12559] alloc_pages_mpol+0xb3/0x250 [ 202.097297][T12559] alloc_pages_noprof+0x90/0x130 [ 202.102246][T12559] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 202.108068][T12559] __kvmalloc_node_noprof+0x30f/0x4e0 [ 202.113450][T12559] ip_set_alloc+0x1f/0x30 [ 202.117824][T12559] hash_netiface_create+0x282/0x740 [ 202.123040][T12559] ip_set_create+0x3cc/0x960 [ 202.127634][T12559] nfnetlink_rcv_msg+0x4c6/0x590 [ 202.132583][T12559] netlink_rcv_skb+0x123/0x220 [ 202.137355][T12559] nfnetlink_rcv+0x16b/0x1690 [ 202.142061][T12559] netlink_unicast+0x5a1/0x670 [ 202.146842][T12559] netlink_sendmsg+0x58b/0x6b0 [ 202.151609][T12559] __sock_sendmsg+0x145/0x180 [ 202.156296][T12559] ____sys_sendmsg+0x31e/0x4e0 [ 202.161237][T12559] ___sys_sendmsg+0x17b/0x1d0 [ 202.165918][T12559] __x64_sys_sendmsg+0xd4/0x160 [ 202.170772][T12559] x64_sys_call+0x2999/0x2fb0 [ 202.175453][T12559] do_syscall_64+0xd2/0x200 [ 202.179961][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.185859][T12559] [ 202.188187][T12559] value changed: 0xffff888117bdf640 -> 0x0000000000000000 [ 202.195290][T12559] [ 202.197610][T12559] Reported by Kernel Concurrency Sanitizer on: [ 202.203774][T12559] CPU: 1 UID: 0 PID: 12559 Comm: syz.0.1248 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 202.216275][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.226332][T12559] ================================================================== [ 202.419771][T12559] syz.0.1248 (12559) used greatest stack depth: 5824 bytes left