last executing test programs: 6m4.995834502s ago: executing program 0 (id=3740): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4040010) 6m4.952144134s ago: executing program 0 (id=3741): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740)=r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001ea300"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x1, 0xc, 0x80, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x66, 0x0, 0x10, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x44, 0x6d, 0x1, 0x1, [{@empty, 0x21}, {@rand_addr=0x64010102, 0x2}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x7f}, {@remote, 0x4}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x37}}, {@empty, 0x10000}]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000940), 0xa001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x98, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x54, @local, 0xf36e}}, 0xffff, 0xfffc}, 0x90) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f0000000780)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000007c0)="07bf8089aa5ab595534fbdad043d9804d6a5ae3a2e94a5818ba831ab9779f847434a80f635d69ec4892aa32294b5bddd40ff892957e69f35888c3fa94b669d86008f8d59f83b17c7c3c37b5927e6ed2cc89e7c858943fcace3b765bfae0abaade3c4321a11e184aff4a8fcf3fdcc3a2d317823f809066a40b04aab2affe7c054a3bffec969f9d31e2ab7", 0x8a}, {&(0x7f0000001300)="df8c60fab4506bc8705570a617a8862541a64f6f8de5b391722627f4ca65cc6710f746cdddb9a5b8eee4ee2952371c6a88682db01d8dd22c2a4399af3beb4ff77de6389a8fec568ee1d4bb0880428e6114e98156452b98ab3847d51325087a14e33e3e32c6e939928a644162908941cd31c29a015f2135b662d9a925343e8af20d702e96ad8acd0318a1bf57e6ac0172dbbe79e8fa1321e743b83fc29612112b91986d35b079ac3d30d69bd449cff9204346a5146e71e99f0a3a0e232219c297a578a734af1ed33715e9b45fe25ecc44fd8ce4190d5ae56c7cfdacde11164e21bf019816910c9c0c0fe7c0ff1f124265143c3101e3d4b1a72fd0c202524a39e2ba42b7baa2b3cec4e3750a39023d7323744a3b627adf084bab6c8b914d321b90a40370b1a1d5c841dd8cb2915f94b995abe465c204f576cc978e79923cac32bcec72e16bb2610bba74cf0d7509316ed74ea3d9ed97783801eda04a9981afe23b4a7f01651a9d0041fe111380e04f8c1ac3ca0fae23d93306ff0dd5793c7d33d9782af2abece704259da6c19adeade4edfafb031c072b0a8f357e3c03bfb095b18360f91dc2dabfe29ace67dd38eec3f5fb59fa5a8e198e30c0b28b9b6ba1083a97198f5eb4bd57c654a6f20c4d9f5be6b52f8067b538c92dedaa3c031d8f6209dd02638ac748897a12fd885510bdadc81a0644e397884172aad371eba241a6f823f27d318b0d2b984764594f41fc96a07f40424747fcac09dcab38ceb45b645911a013d9deff684c47585042f60de0264a52e635e3bce7aac58c805a8e529285cfd916dee5fdfe7d37d83ec33e67ab197d4115a1697ccb058d92f9c5cbb04c4e63af9e8e3d0241a9575d47624208d523e299ef8f4acd2e72672606dee5adb69d120997ec68c89121eaed3628b159e7bc42a5db0f39be142e683756fc852da561d3329693085ebaeb63f086bd464d12a99b04b73f495b86f7296fe18ce6b202a633398bc043c8ac199401141b24ac6f39fd321bee7fe973ba9ffdcc264bd7916956e4c62df2823ce1cfac0222af1e013dc856ea5d9de92fcd3252c01e6822e93f61873cf55c44c5724946a7bbba9c61ea3ec806eca374ad36d256887c6804943b182775f1651b34c1f3900b1b2c81a062e6f5b92134c46ce449f4376259452ea027e26977417fc8f692868c9f6cd1b8a6c201dafab396a42d4ef9db910d7749665c35fcb8543840ae7a98cbfc023ed4c1999f11196d464eed16e2ee94945e987a26534a9064130f0bff19b866729e42618177cc9be2df9429af638073d4e316d42e23118e70447888fd76ad602ef405f305ad202d0b415fa78cae8a086c28895c289d69d1dc499c84093df0c1dc72cdc67042e8ae9976ceab266a7b51995885e764efdd07d5830e10616098aad42fc48c655a01cd59fc1271600cafc1d345d0849ec274ad385dccc99b992ff90d2b18e4985ce1cb0feb748524d5e2125dc2d6f904cd26baa9fb3b02ddc462d51bc3ea496b988e2a2a2e48216c2f9429ab8e8b7d644a808169be3e7fe2d249471f060e48a76cc500ff82f273c904712ee113c9db983f336607df2fec92a7481c8ea317c9a79e7c44b401411c5ab36780576798e561ad79f019d59296456625e5a17585e3cd0d882e4c4bbed598807446b90424123b9856b298e05ccc02ee27beda80fd931544c57b0a3b49061bf73c78107a4369a2a43b5d304cebb604d311cd11424c6bf6172cb49f0abc04ab101bd56f920fdfd0082f50772b97b9995c922cab8114c78d40ff16c6e9b17748b75d1dd7799198bffbed092b13e87662e6c9f50ee6ee6b895501bd08be55f6397d2615ac10d14c1e241c2593bb04098739f006bfccfcd42b1fbca6a31db5db00a9ebadadad2d412e31c681ad661017ce6f524447accc53d44fa81e6b998c70d1a2f1b16a08466fd0e3622245c5f53cba71bf2cca42fd07a49e2bd6dbb51501421b24b02022de30f11c8fe15fe8c334ad66ce9301f7ca7fdb1bceaeb486badc8a7cc87e2ad015adc53684c9ae1541505b2420e11771abe613169209493d0eaac5dd80343624e659c912fc19b34aeac49fe7f33fb7e53bdc08b4bda8a37f390199f368a62ca9bc72be41a890c8ae16bb1d63768e74b1f491579ca3112f0c54471d19cf6610c15543eb9ece705b3f72afedf5188b12dd6d9645df29f84b8bbb7424edef361e97431608f227dd06a4435e332a3f028879d6418f07d3b69b62662b73038b8a5f44b360c408279129b22e163c9853bfdd7139929b2ffe1f7dbfd770237e30268917316a1648fce07b3762280a009cfedc82eddecbb1ae710eb94b19119c831cefa13b02d5cb58d5d116b7f3c5a5f140740b6c49c88047ba10a80a2f64418f79228c752fc95b9c386cf2059dafd3c4e8853819bd198b37844ca1890b54cd5301f4e04d4326477c9ae8782aa1520efa0ed74eee8df74556b01bf567457706674aa750cb9d8a81a4d77e36157f67bfd80a1bb18c89804670f4dc8683ae3b92a92f9298c42f2aad4e3cf28cd8563644d8aae60d556b87b01ad8aca5468ea62a6d29055546103a803c5a453641c04836ba00786a03392e35a7c6e8c2a9ef6f4effae959859a649bf574ae1331cff870530360b740c41a0c31fee7bdb2976ce99b62b396e09f98e88392a3365363a57ec733e0c7883bac01705049fd02e9ca53016480eadce0c03e8d7422c12c3d25302a343e8ec7666219171fcf287f2b79cb1539eeda24c9a7a8f01f52020bfd89eb786d726efe0497e717a08d1f863d640a0842ef0cba8e9a07bae7c4941de437c13fa1e44f2e8f2e2521d574ffe796dbc77bf1b30b57edfa98727b699de2a14ab469a694271cfa7b85930585d3913a0fc303e03da315e52c004101e0a1dd7dfd25c73c1a13e7ed845bcb6977a00369e34b6790fcecd661e7d84cacd23966ae6759a69250e41324ec4f829e0d97f37dbb3b0dce6aa35ddc17ad6c67074fe7dc652e5dc74608929b043edd08757367b3a19566c40f860b7f8e06f347b2dee8a176be724c808a7044fd8b78085b5efda5b27462292d64f8f8cade7f50ca9e32f61c6e4339ec2e5ef5e13d69f72a4933d36d6de8d02889c4c3a6f49239aae209d2e4ff070300f2735e7ca79af7eb4f890e356cfde0fef5859f6927a52f54034206dd7dc9f61b1deaa749b4fedbc36955bf0e00030eabf7ff4bdbd3b27ef6e06f13f12aeb734269cff475ff141385ea30d8e563ac0bdf6b8a1990355919c4a62d6c273c018c33bf3ee78ddf7895cc093292bad255d67a1ef82a51fc2579f10a4a289ac2ec4505ebc5a5e64d435e5c28bdbe2eddde51075dadebdd068cfa816effe9f9a8cbaf79836bf5d08ebcba2f7f8adb959fc156f0c24b9545e922ac313308db17ef201534d4dcc3fa8fa48e021747c3141d9102a1e4fb73fd01511c6bbf7af2291e2469bfcd989bdc155addece52d29eb0c692c8361b8c381d6b2180a6c193c53c0615987694deedfe8f379f76d8976cc7051caa9f1920c37004a3e2e4eb32e7d0ca0dea8772121a0e987ff2c66ed0c69eed24ad0e80ebad5c72911acef968aef3834419d636e6164f2f371a7660bd8ef0664ca5d672367ad661e661581e7cac46dc12e7acd7021f0b7d5d6295ad391663f8ef098fe4dd8ff48b74d29e9fd7a63fa743a2598ae164f73d1aa69d89125e006c49f406dd9c04e58c8acec3ec9f8728874727824581971600c12ce1298ffad0d88f9529f6897f621809d5c0ced78015ccbdb6ad8bfcff10152aa4c44acec167f702cf20b46c4ac373c86c778b5af2cbabfe1f6c509e7c38faf5eb45f3d263d26dc9f1d0da9a049387c622dc4c1925848d3af25260cccf26edf278b621fbad1ca8470df92e8cbf5d320a648d00ef0253ecce2551a369f87bf08959d2bf465a2ef35ce43a16ffc00104a429d6f6d097aad28ce693fddeff84fbe536ae0c303e8d8086ccb62370565f73cae63b148f0d7e61975ccc0c5a01f385e09b5ae901d37b24ec013f06cd949a5d729e96b61b10f20259a1e8395878dfe148ab68fa8fb7a7709203214e489fa01e2c88ad8fc9250cb8a070900524fcf527c4e972d17bf6c2e9453de023de84eda79d0c8fb8ec02bbe99ccb88176f6777eb75ca69e9fa84a573345fa530301bc168b43a4966d37bef2c48608c7a12d11ef8598bf7526d47cfb0bc74f94b0e6fe507a20cda43936df08d6561278f37a3ef5f2abd1a8a06722199fd46170cb42b6250b106a844d37aa01dfb945bc56e35b9a5132bd90a3231db6416ec7409e3390e8cb7445081e1d73c748e59bdc3d4c015afe2737ba895805d3d9bc3021f36fb6aa57c8bf841d16c45a219fd6094116fe5961240bed28157139b0b3676edd0ca059768c4868dd0d29e890f74745220dc2d1a50390c677cb9fe17b06821d3e7b5eb71fc17a5d0a8833beb896839086497ced839a3e96b1db98b595d77e3c77ffb5ddc891c07ef7ec2d3d4d0f114e243e9014b0933b9c8ce4ffbabf32cb065a763f3ecbe136941903a2ce9158ee986942759db0e52c35bc5d4e739204e3e297ff85da9c71d7897da96cf16d83eb97ae2246fa7348436693e634680228e57b10f99bbf935ea8cf20a1c3fdf4fabd2130bc5408cf5755077053b72a2ed1b49c70f31a982118ab733fcfedcda83823d12861b330378fc3822e5b44506665f3358c86848dcd2bfbf95ce190e972fed24cfee5ce95d1d33adf3efee148cb0122bed546ea2f0fba041aed4d543e1c05cdadfe54bbb8ef03a84cce7fec5fa6d498b731222e1d243262fdcfe278c8bfe4366ffd36bb1d0a7aa23d50e3603c2b7408caa5fc30a98be74b879789b1a22b529833ec873813d77e30608c2fae7c0d60ff7e277dd4774e9a0e9d5d9c151554cdb6608de86453b97260df9f937aabeed37dc322635468564bce18c81d28c88aab1546325752022933aeef48d9c7f1454b96297fecfcb0db3c33c226cfa4ce24baba6c718878431c39ed38777b08f733ef5db022fcd2df5c63edb24f2f567ba0379965c992e2a020d09dd247accaf984e7cce4b816b22d6105240cb8fd541aa678def6bfbb7c77299ed49c608efb20bde47f9d8fa50ac9a63c677806d8f0b10210bd79a230e14b51cd4ab73dfb0395ace3565bd18f3d872d340bc65a4247354542b0d603328d2c445bfcfc45d5b64274e00629cfa3d112d5c9fecf54253d91cbf18d59d1a45591dd87d4639d08b3725582c175308ce0be902fe70d6da6084f6344a6218bfa4f797aef507668fd7d801bd6daf4dbdc9f741523cf6b67c34223427274040caf40d7f294e27fe460c2be9ff8d79d45e8351a93f9a296db660715006699ba580001bd5406c8b0b7267a5400ffb104d2a0b7342452de063c1a399a501287c702a88a93c488a9aa1f8da2f880941a31555f7d8f21f85a0b7ba4ae388d707f6b06ff112575a46bb7e2ed5556439bf3fff04b7b0fd5c26df53e247cf02b6b05a059e3bdda210b43e7cbbdf32f82b6ad3e7cccc902640d307a772bb8bbcdd0b47ecd84cf7506e0b63a11ae92ad9b38783d6c87c04a48305549dde6bf3941472d051f8e39a2e610993dbe457e0892feb06290cbc3555bd1a2c1b0e136df782320bfc9fc45cfb2486ca58d5a05bf140c0bd743aa0763bbeded2058d1b63d644236c82b96f999fec761205ed80f6da75b3d29f03d48dccf3e1c8a09a612fe11383cb4148e0c0c98d45a3ec689d204760fd4b1283c77504752a4265ccc3bdf21c7504efd36f460a695227d99b6c6287dddd5aa2a570", 0x1000}, {&(0x7f0000000a80)="2a171b738463d9395ea5c88a75196b2c0e7a2e543a5e3741399ff5803bffc51a976928797bb8a10fdf86578689e8749c30ad560372bb0df791b389d3cc30a3e0ecd8317223993572c2c76c16f6cf9e2f1df782742153d939ab57c957fb2207a2aed6f3765c949167a3f37e8d90ee9e91cdcb5c8d9077d1db0e4bcaa2a57efef5d88a006aef6701940785293720725229688d0bcc486d3b2ce8f024f07737303ce0ec6f7c48f4af1d4e20f19d0c64bcfa8da23060f242b1d7a7c067c0ca9cf63fd86c5459c69db6f24a50ece45df2664a3a1b982cd186880d2ad7d40f53c9c3c7fe1b7e4dec945591c2150ab77b5f23fa7c91d13da5c57b5fcc", 0xf9}, {&(0x7f0000002300)="cbb198475f09a30ebea189af1d1e2496b3f0375d20295d289f6e6366b232044cdc1f5806567c308fc58a64a0ddde20f69b103f32a6a2db901fbbc79d202db062f9cc2da17c946ffa9d17bd367301dd127c08782e7b8dd00ca1aba37715d71c63efe9ef23d0d5b2cd57a92ae1305cc7bb6a527c4e5e2d05c8ccc0cd51a6a2f8353e8d4bc47121aea45c932d823514ea057f478eb2335545df9ce8936c67ee51f6c847b225311000c657044b4774d4c970e8c7a63b9f820758a722a837a024e96da1b1e8c14f2b819b54865724a7f8b94b5bf9feffd2b350ab394fcca1f9745ca91ab2b080765529ac99c909bb192776986c4eee4a9256f11ea8ded4164e3650ab2eb61e02cc811eeca07c0a9ecc4f7c31526a9d0e5964f6240598163c81bd21f92380e41925c1c3bf578082e732f47be40ca5ac9ea942e4ceb00cea62ecef62e86ca0856a740b6f9f4d11d83da10f0120a8043580c8552fdb5c25f49b9115a74e218a01a3459700556f7ae4011cde62927d5a15fd9dfe29ec2c8feb648125dc02bb306d14b786a681816dd0add7fd28811db2297b72c72420606a8bbf35bfe7b63623287a8a65c86879d25a5534d40548c66677d01db484211a303ef69e3e2cc492f06a551292f963ec398a4b2a1eb1795b3f42b58dabb9121226616670729b5ec959efd689d21e3f133be4d32723ab7d1b6cdc180d8121721ad4f5f1ab3d18eecf9c8bcf3701d23a1358fb22373fd45d10eab1aca5fde2112f5154b15f340f46ce48a9757badbdbdc2bb8b608d6ea27feb89ca1e34beed9545e08eacbe0604ceaed06caaba278fd162059dac78f7a7dd47909a01fb46481564c871a40064c8ccd2414b95896c63ed7de5d412b9b6ac5a3e59e822cca3c09fc4d3e19734202a3fb1d6616b79ce8dee769030c842a11c7812fb6313b69217c63d490bf0da8860214e4b54a50fe1c1c2381da1fec113d264bfaf51a4075b7169141c4a702d5038f431b58a47a5cf81dccb45126e5266f997170f3ec982185bc524ba8a30ed2254ef07a604b4d63b5016a540a8977a5a771aa6570c232ccfb2ba27a6a74cc2781973c4ce920e290e487976651c6ac574ae01b675d82a513e5a7a5cbb909b4720ad750ef8ac00d7269836978676fcaa187f6a40cc487c29cb59f60c8e5d84d4e918bc329c0a41745e6a865f4f9ba8d4359f711d9c1aff00ab4638af371cece3c8a3d593659267831a32e8916f673ef37c951a376f50a4f980916886932156cfdbafd0da23720de39062182046ba148baf0537e45e740aae5e9d3dfa60f31cb8a58989199865d81f263164d71586ac00dca8092584cb1dfb3fbd1de82cb832146862f3efc152973c08b1e0e4f81d664f8fe3b54f47b22846cebcad6bb7a993942f68b4c78423f650299add33f567612e16a472a23022767bfb5bb08030ffde576211ae3ecfd19788f4382b8d82fbdb20c7c0dfda3c9eafc2ae2f63aab55bbaa8f13940f120caebbd4ba246b3e606bbbaf99a08b551ae39ac9138ab5df9ece66e457748c42fa3d24e470a6c32f16284a7806733290eb417c296d0845b554047e5ed236f0da86b5100d3e55991ab5a532cb726b3c045113764662b613ae520c67202c36363e1e5cb52b73d532311f4aec5725a9b5aa541a7cbd026a8f8aef3781b907db30751092e323e2fff43980d6b146082d119b39a601e673b962d48b98611c8a87b4b711a558a5e2d3a03bc3f71e8c1c3a14cd7e31e3bfca775b3c590528779ce958cb0b22cf6d3bc333e9c7fec34b0a87baf2b98da8867efd7263ee642e98f38f3bdf6d632583dbe93ce222fc0f129c6d05d9074d9f2f95e4c48d7f3282c59bcf2956483437f448afba9bc23ae20a288515030e94d031810c7013d17f4de0fe8a1afb9058475fca7ddec05916741e6601e9fd052cfa201023213d93d25fcc1f42c02bb1cde260b0f47e977bf06bc94eedae5e6d3bd905a4d42142147a174d92c34ab6d45e95dfd9dc2e8b0e1cbdff16d0330ac5d0f96acae4ae28096c998dd2e8c3764e6b605365785f79456c7aeba019b4f22500ad97877df375f84f034b7361637ac1b1d7b5150cd059587ac03a7e3e0eb9b1514d51bc6b4cd25130f4d98919ec4bee5c7ae9d15c7bc6eda1b018db1b3f400ba618b9411b79332b93891be39c1131504b700baccc7edadebe61e92985d788913d172155ba6c086544429541db592af27b0e1a4da4245663e42b8100f0b39488cc9123bf2f6b35250b7dd895750d673263a779ef544bc689e460a83828bd2d2308180d1ad280eebe4e8c952949eed7167dac4da2c8fb50fb55eedbda1ce68a16bdf8c556fb9fc453267f7f5d5dffab0d1900832a101281bdd019a0ee2e28559a7f17a96a9fabcd597501056393232d37eac56a119e03b44043e490011589bec7ca94dd6bab2da38db3cb5d22a0e43bb7451debfd2088a92b3b1a75a6af65b49e38084a6b38bb2265cf9afc60b47c1d06768cb136eeac6c2d3d981a834ec430666b198d4460d76afe7f5ac7f40b904fd2fed9fba945550a19ecd98148f5375ad76221f3c51fa10a634fcafc60de3cf92de9d2f9f4f5e6300f83d05edf5698c76cd63ad881a8e08d5b8c6bc86a59bbceb74839dcf6e3192323f85678504067c6e4dafa166751c82a2aa88d542763f81a80488be3e657b4a3eacd6128f23f12e624b5ad422277566a837e2b7a9af3633ebe5ea23175118761ff3530980472510e4fed5a819f9a23e400fbb1183b0929b8bde1ced227496004d3cd9367174d90385a220ad59d42cba786a01003e2c1313b8cba2b55c1ea32a993e97d0a3ac10f5167904ac2c01e72ad133288ad48f1663a032417e21699b3b94f23beb1dca3bf31ee0fe147a5d516b5c8b6cb6b0346c502abc6ce7ef593ea1cd7795b0ad1a90db550709661799cbb5d591d285ce2ac6ff90cbf1746f09578f975337a393a7f87fe5a6b3b9f6541d83770f45d5978bb928713d7c00c250d6fce2f1b9536d3a999c774d0017af8702634b6bd143a146181c80264e6a6d2e62c96e89c81a6da0eec8957a769d1ae425029e82d62a2f45b6a056132cffae656ddba4eaf0f2c7b5e87ec0b5f726160e046bc7d7d0dc60d01d98361e75739e5eb60bdd861a3e930e8264cb0c5eed9b4a8282e435062cca0f624b6a5f67fbd9e8893b6fd657bea10d94b57e9757f824161ae95c01358da583a7c0c6a782364e2d2a0207d3ce376cb7156f0a91add7281c2570d3e40392244ffd0e72ca369f2e5a9996709bd56cc708d058cdd30942a1a234767d092c68dabc5d4c50a7e6c8381f235d6886392defc5860fe2114f9827fabb7eec9003feaedb68c9e64d72c728e11adf575091ed0a83cfbf8e23d65047d0c786e3d89d3893273f97cb64edbaac04d7a3011903e5d2f4bcc592a3458abb683e09fe6a398f27516f81a733a916ed784826fadc87c31f99d22c6eb9c0b5193c6d43936aa777976271d4f34453c69547a037ab4c3e56e1674c8ce6e5c0dce9bbe158b6655b5cb5d3902b6954cb9d521694c02eba48964fbc3ec496c5338a234f4f3273518e006dd841809a69bb6f4a3c8d3adcaf0ab6d4ca938bbe9c509c30f16b6b12c3e452e7fe53a04e277fcf4bbe1c73adac1b7407fe5282b193788f745a151100719b1399db1c88246f88666045cccdb414dacf14eab174c5545312ca1f4af59190100ebc06282642248f7101c3365070277b21c8e9cf87a9e462ec24794c776bc406412276d4f97cfb0ac6aa857294fd79884b522303949ed4ca045477b9ac35d49ed21099f44d908417b59313f7d55d360ecd3720d054285aeca06b0bfcbf3540b11e4fd8c1436aeaba8306ef3950354dbe14b131ffe821f35c024d97abeca27c8fe09df984cdb335502e0a4c854fe27e7fc9fca49c25a5e0f1e5817818334205e477db065c94d7c3c4e2ef912af41d644455b556570136918fd27d4fa85411ad8b6b87f263c9aa340feefae6fc48f12c0278606a631facac151b1ace4000a8b3d8e583694abde2188e5278fd9684e857303d212d919a207b68ad7d7b2e29ceeaa17f52bbab781b478aa13ff52252c860c87dc5d17633b8f0fbb88d27340a3573baa070c5f84152e0849047be0fbc124031ce49f3cfa1cd863dab68dffbef9d2ae16307b06f533b849d032478d521336e028e9796a9d75ee01c3fb04f91e3666134bda89fe9b6a29a21148185eb540fc62ebca11e985066403b0153cd751d28d386513cf0c8ca4d0eae0806253bad06a66262d559be1670f8bf0c96485683ba1c0ea71a6c2543584ff7df5ec99e130fcac80311ad32cb4e9878dd1f5cd4be5fc4dbdcb8272a4a45895824191e8653a050036dd2d47f4aaf6a10f8aadb3fb2ad4d89b74bf195cc73784a6731ae8f6ebaf14928a2c22ee08316a2b2a1c8300ad677579e1562ae2b03dcebb2ea0bb60bd8d9a0764ae6476a146ce4ba92ab603515adb2af7c1872c45b38c04776a99ae2b650e7c19fc348a9d4ca70f8eb5cd00f2ead54caaa667cf31156ed9ef135adb00378faf54eb92535a78e9767236e6d66b2447cbf95c0bcecfbee511e03e7a0010be282fda77827939b0587468ecdfc5618150851327618144b7106e687c5617396b01ed8753f85679e18130280bfd17081a57972fcc9a74f9a88ae531f8d1eb3b9c8e945c7eac14d9e45f062ea5a89d454c1e817dbd3f19cb5081b7fcd58ad090b1dd98d0db7104b3ea28ca5bcc50b29cf3031a16656a1327f00981b442f2b21312d16865be8163bad645dcbe04ae1d1749e68252eff5606a448f89243ccbc4d6e1acc0df46c64e4bc93ae6801925fc7b864442769aeaff19e235bdea18ff4526217251319e0371f717053da15b6aa43958f366b2be9812ac2631ce8f682e1b8665eea75f83b019c6f79036a19205e7c9aa5f74db1f931417d3230d65d46c036c67ac141910bf475dcf6a6de4638f1d574c582f3c39fb97a731f96ce049d8a0e9749e452440117e59a891d6fc583b5ff9e78132689e492c0ec3c1b377a55e105de84341008a5a0052fb7c75ea3b0718415ee8592e5b1a164e8c05a71e7d5ae989a827d8a36732458ddf10a6f4c4375d5dd916e157dd6815d5aecaa92caf77211d0319206fb256d112b3f0c2f639ab2e53e40d431f3812b6f8ba443bb957e5ef09c3ca27ad261caa59e1d2517ef188a1b1249f685341eb7a96e14b7c88788e50018bcd117fbe9f85f5caf1c05bae041a2a0ebcf7104afadaa97bbd88588a4256534dfb7d82d59ca04406515bdb0268cb830befc00d8a66605795a2ced76cf2b37553b1c4233f86445ad61edc282bd7bd6e3792a3e5a03cf4fae9d3e1c88e01aa8255b8722b70c498e44e317822bd5adb8bceb138eb8c0f4293b88270ea57233b977996d61dfaf1a394f83a43ea5e8bc94495b43c9d1c5919cf481d5cb4543b17d6698ec2c0a0c443c696f07e83fe42cc6ada2d3af014e8870c9e4d79135aeb70c86fb6ae454023d20756def2a529c68f4b749a38ed0a2740899da922bbd824e6cad27869c1cb4cecab57b062e161e53b2b185547d4dc3fe80adba9cf3709c229639ebd6043c446af64cfaba738d92b1b530495e386e9d1b785ff5ca6134e50273cfb7722a591beb5a0ff487b8d06a7699049d04e6d7845f6e4d39f7598a6d73fbd3fdcbf06c3c8a239827c32d80d697e49c9a6385f1e3ea0269083f8e517610ddee088c441e912241bf017753d33324b0375bc7b20b39360cf261cc0d040c8e1416a6610bc9b95d63a23ff3412f04eece5e6fe61f5b10f0", 0x1000}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000000b80)="ff1395d9a0f4be0908931b6e98d7d01bd211ad7457bc1abc9a7b841072af790cc6af2172ca0af0b94f3f5b33429f22c6bae55877fa6e2732290c1081971fc666d49570838d827ad7050bdd76290a2c9bf94274cf77c0378e61de1134f4f897f943432d42592a16fba967747ea1c9526822a4dee742f1b21384364554ba227d556a0e31fdb66e699023a0ef99f9e6baef36ade85ea20acd3e9fe55de3443112f64baeda28a569c8ce95cad2596b6af78fbba1d9acb1ef776e19029aaeb1d37acd2d3b3b5039e8c0c58e4502c2cc1b259ff68f73cb464f8baabaaa72df9dc6a999552db9cf0b709f6a7a3fc737eed0f83ef5", 0xf1}, {&(0x7f0000000c80)="66f34c40913348e7a60287decbb964e09067c9fc137288932d32978452162963fcb259d5a212d4d6a436703a13e3adf2ca5800311fdae5969f1b915b664009baf5103cc49298908f73e024a0abd5ec0abf3fa7691bff81500e8110f93a8b461732a559e14c4496df5de81f7af1fffaf7829a931c254b6b8291e6f1de6e9a9b7fdd8cef67b3d62023dc678e89636656f70260baec1303c668f69a0f2141b9de2e3fc052d50409fdd9d02bdbb4275450bbc56a4bc63e04a2dbfe3718ea5d49bd355e842ffc9fea5e43380c6d53a675a93a6d1fe971615306735de841ca6ec977df1639b3484b232b5d6629da36b88dd498", 0xf0}, {&(0x7f0000000880)="e180a71ca90f7be0e5673748c82c17d56138f4b6dafe525d1bd839c2315ef3ac7177e19324161efc554b8873b8bd1326a3a2dcf5efbbceb77cb81f9ea32ce241f567b59c3af7933bb354d677851f6289711bb274fac3319798c0912c47dc7b8a5ae90c", 0x63}, {&(0x7f0000000980)="00b81d37ef995cd4bdd3c46208a4774dcd730f0cd065e70cf0af617467b22fb72e04f18b9f7351b39d572e98aa5cde310af2b78e8f0c668acd463fa60f0a62c2fe2d486ebcdd50", 0x47}], 0x9, &(0x7f0000000e40)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x2b, 0x7, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x99}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x20, {0x3, 0x6, 0xa, 0xfffe, [0x0, 0x0, 0x5]}}]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x3c, 0xe, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0x3407, [0xfffffffffffffffb, 0x9, 0x7]}}, @generic={0x4, 0x41, "60ee31f4e66b2b0a4e2245f6e118bcb1e57420d561c573128f44f791ec299087d9aca07ed8b4e8a59ec20ae06eae0b2cebe5f3b78dfb9fda953901a02d91e10da6"}, @ra={0x5, 0x2, 0x226}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xb1}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x88, 0x6, 0x1, 0x97, 0x0, [@mcast2, @mcast1, @private1]}}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f80)="493e5665276918d438913eaab4ce76097d40fbf9c36559f7974a0176c792d9d8379e7d43e69ed81e5bc69d900d92aee47a7493df97b63c70fec96f120a9ae39b77c2dd0f0276b8d4f193a66310191df811d2ca7dc5749ff6c90a69a250dd33af833645679c14d9f64d7c5f4ce60c46716e0f9e5b", 0x74}, {&(0x7f0000001000)="65b6ce07ee9f56cfe0e6148d4f20d54065355db1e2ee00fd0669b98a98f20ccf755177bf7260f085568a4e862fb249888e65eb53940947c3187a86ec2c395b5af30866efe654c623d7130304ebe417273be0c5576556990da3bc83a4b4e28694c829d6d39acb2005f867bee8b428d648c76546e086e79933fd21560a599324", 0x7f}], 0x2, &(0x7f0000004c00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x58, 0x29, 0x36, {0x6c, 0x7, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x0, [0xa0, 0x6, 0x2, 0x8, 0x6]}}, @ra={0x5, 0x2, 0x2}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0xc7a}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3a, 0x8, 0x2, 0x8, 0x0, [@mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, @empty]}}}, @rthdr={{0x68, 0x29, 0x39, {0x73, 0xa, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @dstopts={{0x70, 0x29, 0x37, {0x5c, 0xa, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xc, 0xf, [0x401, 0x1ff, 0x2e2, 0x0, 0x903d, 0xfffffffffffffffb]}}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @hao={0xc9, 0x10, @private0}]}}}], 0x230}}], 0x2, 0x20000800) 6m4.124761299s ago: executing program 0 (id=3765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1) 6m3.944066308s ago: executing program 0 (id=3768): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1326020, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=0']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 6m3.89474861s ago: executing program 0 (id=3770): socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 6m3.557763274s ago: executing program 0 (id=3777): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) (fail_nth: 1) 6m3.557502744s ago: executing program 32 (id=3777): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) (fail_nth: 1) 3m17.892225377s ago: executing program 3 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4") sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000800) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000080)={'nat\x00', 0x0, [0x6, 0x9, 0x7b9, 0x6, 0x7]}, &(0x7f0000000140)=0x54) 3m17.728860164s ago: executing program 3 (id=6661): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000c80)='cpuset\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = creat(0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x0) 3m17.687583976s ago: executing program 3 (id=6663): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="00000014007041f0a501000000000000e7f41e46eeb80a5aa39dea99b8cbf60b8f43c4190a0396024ac12a2d143567d461c8d5", @ANYRESHEX=r0, @ANYBLOB="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"/297], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$can_raw(r2, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f627269646765004fe81656cbc4cc124402472af7bc28170e10fc5849819470b7e82600000000a3d7b3777459ee924089ffe6ff08fbe7f4ed04cd55d2046b2f868bf7000000000000897a1b746e4c64099ec7c4bf829ecfd1be9c5e18d8bef1c17fc9784994e4e78f8961799447494b1afe703500000000000000000009302ed2488f6e6327f42fcefd02e27a656f752c721fead946aabe96bc16b3b0105f49912ff0bf1aab36ba141a89291e848b6405f2a8075bd03000d4b9d383d963e366d679"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) 3m17.638267448s ago: executing program 3 (id=6664): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000b6ca83525f95bad5ebb923000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580), 0x1, 0x4ee, &(0x7f0000000d40)="$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") r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x1e, 0x0, &(0x7f0000000180)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r6, 0x301, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000380)=r7}, 0x20) 3m17.012826555s ago: executing program 3 (id=6677): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) pwritev(r0, &(0x7f0000000a40)=[{&(0x7f0000000040)="93", 0x1}], 0x1, 0x40d2ee47, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e006400", 0x8, 0x88a8ffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000013c0)=""/4100, 0x1004) 3m16.761089766s ago: executing program 3 (id=6686): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7f29}}, './file0\x00'}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYRES64], 0x119) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000c40)='sched_switch\x00', r1, 0x0, 0x20}, 0x18) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x6}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) waitid(0x0, 0x0, 0x0, 0xe, 0x0) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) 3m16.716765598s ago: executing program 33 (id=6686): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7f29}}, './file0\x00'}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYRES64], 0x119) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000c40)='sched_switch\x00', r1, 0x0, 0x20}, 0x18) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x6}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) waitid(0x0, 0x0, 0x0, 0xe, 0x0) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) 4.506931516s ago: executing program 1 (id=9206): mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_clone(0x26801000, 0x0, 0x700, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') 4.40552212s ago: executing program 5 (id=9209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000000)) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001e00)={0x28, 0x12, 0x503dabdc2aa92767, 0x70bd08, 0x25dfdbff, "", [@typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10, 0x11a, 0x0, 0x1, [@nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40849c4}, 0x8014) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 3.704140321s ago: executing program 5 (id=9215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x2, 0x6, 0xb3f83e6d522af86d, 0xffffffffffffffff, 0x529f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ff5bdf25010000003a0004002c4e03"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e1504511602000000", 0x13}, {&(0x7f0000000000)='S', 0x1}], 0x2}}], 0x1, 0x4004040) pwritev(r6, &(0x7f0000000440)=[{&(0x7f0000000140)='N', 0x1}], 0x1, 0x5, 0xfac) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r11) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x38, r13, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x38}}, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r15, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) socket$kcm(0x21, 0x2, 0x2) 3.666000822s ago: executing program 1 (id=9216): open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_clone(0x88180111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00R'], 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.625121854s ago: executing program 5 (id=9217): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmmsg$unix(r4, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000700)="96121714edb1e6d0656dbbbfc366a6216e96378c929151c0e45a6cdca1e6e2f43e8843e53b30daf3de3d075493b6f280299f0283f47db053dc143e227c14eba8960d698a5e5ffbe790f4176073bd24d71e83610c4c958db12be1d33c3d9e", 0x5e}, {&(0x7f0000000780)="66d84b6b0dc312cf8ed646efe419b3c75edcc4484906847844380dcce74e55594643e998f9576d240705bc376bd10f069a20889b7d3fee266c21dfe4fd7ece997d35a469d9ba37b6a4413a1a07cbe23f872e913c9d6b00f8cdaa4d18873eeccc7378ca4179a9", 0x66}, {&(0x7f0000000cc0)="f2bc7c4ab7d98c798a3b0347afa9ffe4edbccc74b19d2bbb0f7034e7226580b98ff87d0bec953fd207128a818f4fa4b347d16e3538fe8fcdcd9365307fed8158ad198b3cc95d683141eed356641f0c26f56f63cc078922e10e9d8bfdb4c9a050306f690eca10a6d211264055c17654b4cda7d46dbdd629f8243a2dea50112a947fc3fb1b2e65", 0x86}, {&(0x7f0000000600)="8b2cabb6c4147d9a0e5dd56bb0794528bd7444d6396a54c266766d6a411d9deb70a59667dcddc99f555c06e39ab6a6470608", 0x32}, {&(0x7f0000000d80)="e68857213951ec9e09dec08ea15f2eb6cf67895bac6f1cfbbc5219f98b41ca2a62105eb76b32d1d39c7fe243b37ed6917f72aa55151815adfb8ac8035939b2544679d71b869bf01fa20143b5931027ea770ff34f4fbc3a1b2b599bdd2f00824b942f9bdad4c9269647cc40ee4937f10001202b87aee261594f2ed415161c857782b2bfd9d0", 0x85}, {&(0x7f0000000e40)="936f6a6f94ebf8cda5e0dfc39dfdc964bcc30667ea4011c93f66dc636ddc659a4371df07f8d265bba0b16319b677254831d9f2936a84c8f1180103098306b9cfdb6835e94575b9a0aee1cac0415179c578a4e2203c137b1c32d03d5e7503f6da46b1d1bb4ec604ba94d730634d5961a8ca608226a0808a451ae41d320b4e860d3ab8293b84b9b0019a24aad43524fa83ac73681fee9d47bfabe6c8fc19d1473b7f1e5e658e18f2f50c364c9b5692d4373a74cb4e517790a52056b99a3a2fcbdd0cd74f11", 0xc4}, {&(0x7f0000000f40)="2a997f87a303d4f14a65e5eadcafea7d4bf27dcc2abb20cc40b54be1375b6eefa9b7b60e80d75397bf147d70aac7036ea7a5435a458f79c5a1e17ec011b2821d7e442dffd7610e78ce380c39abe93e013553979d5b0d54d655dd47ff09af99e911ae2c23a9d71e79905652e114ef1b38e5752fa9e124a20d651a39eb7c14f9d36da45fd2723fbb05499da9fb9a1ac4623af95bfa56fc0aaee1f6b992b677a0328842273fa12b7c8d19bc554f5cb8038fa40ac44699721769077adb87c3", 0xbd}, {&(0x7f0000001000)="defae88bf29fc925af055ff25726d5cbdb951ae8a5ef64898752dffe95caa4625b3d45f525d28581c180a7dbd2a964525c49ce9cc208c0d4f2d425e470e5b8546e6fbfab15a01eca828353de586f72e5a4b2f0a0c0f5ef73fa2926738c3bdea14cb37cd9799ad71c8892cf446d78259951b9156e7ab2a927333ff6c023299e95ed1a4f99705ea427c02baa811a4a64d664f71c498573522e1acf7cc1cdbb1029794447e7ec18487001af78242e0a31e47e414906f872fdb5c15d96412a4be01c3a05a0b758c386fc5d94ef4e01999a70561f6339a3fe418098b807188f861292081bd81f9853c66e6ba5fd217df6896a71ef1e8bad7e", 0xf6}, {&(0x7f0000001100)="8b9c5d482f1dbe2f566eddfd11985f9be16c6ff14745530fe0fdf10ef8599901173a4938ccdf7679bc60da29f76929022c35ff3ba846c0942c7aa46a29c95fc87252632a98ae1fe6337a32e91b6a689e52574c85f06ffe6e528cf1b764272b053aad8e6211207380c95dc4d6e4ef721f6d9246612a829d4c337c79f24ae1139ba6f035d3866b1ba68805b1c40d87e061a70a45129bb944b544d3ead3a02a8233977bbcce7a088f70e37ec04c5a649c94ffba5870b8385c1cf61172a20de488264d90af7f9df9db9c3450c9de4b09bdc9", 0xd0}], 0x9, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)="9ab2760fb8a4f2b202cd8747e59fb8342ded2a1c4cb2a507d016e09a189e12c862ccf7226e236db04c646803345f004f029f1ffe7ad5cce984eb", 0x3a}, {&(0x7f0000001340)="6eb36f30cafda336aa13d563fc2f1a6fd5b6b6d734a54a20bcbfeb77dcdbce02bc6b1ccfe7b6e21b1dc1af1c2d28532aab7a14a5008572e37ad91ac9e8e74ef856dd7e91808ad730642c05b438dcfb089ab103b43b6e76c5fe6c2710068cdeda9228a24b78cca3944382c2df38d8c7657424c8ba85e179b5878c7b2acbef28b374efe98bf26aac068675d32b4160ac4261843fb53cce5fc5ba7346934e59851098d08a0d7a296d1af591fd28a5374b95b2a3ca7b87723dfdc0fff16aa7c3a7a21116d044ebf94853885c6f4b665a1b10d2cca5aeece090df3466bf6e12f7008c2d87a44d755d2ccbc5d7d31102fa5edc62a50b3a5f82b87f", 0xf8}], 0x2, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x44}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001ac0)="0cc8143251a60af8100603f04295965c85098a0fc33e7f364f", 0x19}], 0x1, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}], 0x60, 0x20000000}}, {{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001dc0)="9932dcabd9da7d8aef0bf03a2cf76aed31", 0x11}, {&(0x7f0000001e00)="9155c0f637f54ebde6bb84d2e02b23671aec72da47436f448f0d716111d47fe443c002170d4969fa69a22ef4ec11c4827451a0bfa8261835f54570afbb985356371da823237692942b4cf61848e5796d440a8e9ce20275d793f0839c4a6de527b725627286d79703", 0x68}, {&(0x7f0000001e80)="c6cb8a30554da6dccde5d087c944eaa29c9be6f3357cbf15eff21baa2443c73f2aaf23482cbb7d0d1593", 0x2a}, {&(0x7f0000001ec0)="20310bdb31141954bc77fd890e56c493bdea7a29df73fa9086e68a020b75dd26e108fbe60898430449b43a", 0x2b}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="dc4955f322793de126593975a6f7c9051b5faf855ac5ab46b27181191e460f61a666c04d1c1cfc620910ec707e8a8e7d74b034284d6831886435bc02961d23cebb6560cbed24efa72385028d4d4be131237044470ad17544f978a29fcc972dd02e4585b02cbd690d6062ab8812c8e2a1ba98b2f30676648ab169219c37a0de35d1e83ee988a912ccd38778d2e1433c58ef2feecb806958f1d5fa74868d34075dfef907760b5de8c14cb2300d6bcb30983eddff66aa05b15a2c767a796968e924819e17e622084018", 0xc8}], 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="e201d4cdf5cd477b00000200000000000000000000e9ff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20000804}}], 0x4, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r7 = socket(0x400000000010, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xe, 0xe6, 0x4, 0x0, 0x3, 0x6, 0x8, 0x32e, 0x40, 0x10e, 0xf3, 0x408, 0x38, 0x3, 0x9, 0x0, 0x7}, [{0x60000000, 0x2, 0xfffffffffffffe01, 0x7, 0x7, 0x9, 0xc2d, 0xb3a8}, {0x5, 0x4a, 0x829, 0x918, 0x0, 0x6, 0x8, 0x3}, {0x4, 0x0, 0x7, 0x8, 0x4, 0x3, 0x2, 0x4}], "d61113e9470e16", ['\x00', '\x00']}, 0x2ef) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x60, 0x2c, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0x5}, {0xfff3, 0x6}, {0xfffc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x8, 0x8a}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xb43}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xfffffffb}, @TCA_U32_LINK={0x8, 0x3, 0x2006}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xb4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x984f4687b85a83b8, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r11, 0x60, 0x880}}, 0x20}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2000000000008, 0x0, 0x4, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000010007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r12}, 0x3d) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r13, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.377415885s ago: executing program 1 (id=9219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380", @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x80000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x4e6e, &(0x7f0000000000)={0x0, 0x694e, 0x8, 0x2, 0x3d}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 3.172830853s ago: executing program 5 (id=9221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) 2.31730721s ago: executing program 1 (id=9227): mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_clone(0x26801000, 0x0, 0x700, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') 2.105826589s ago: executing program 5 (id=9231): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYRES16=r2], 0x79) 2.030239523s ago: executing program 5 (id=9232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x20000ffffffff}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r4 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r4) read(r2, &(0x7f0000000340)=""/57, 0x39) 1.450217178s ago: executing program 4 (id=9241): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x5e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000300)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$mouse(&(0x7f0000000500), 0x528, 0x8202) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="1400000000fcdbdf250400f28000000000000000"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000010a01030000000000000000030000040900010073797a31000000000900010073797a31000000000900010073797a3100000000080002400000000108000240000000020c8c044000000010000000050c0004400000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x404880c}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 1.425962788s ago: executing program 1 (id=9243): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYRES16=r2], 0x79) 1.290696354s ago: executing program 1 (id=9244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x20000ffffffff}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r4 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 1.284814335s ago: executing program 2 (id=9245): pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.217034118s ago: executing program 4 (id=9246): r0 = epoll_create1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x2}, 0x18) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.178961659s ago: executing program 2 (id=9247): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x10000, @empty, 0x40}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x441, &(0x7f0000000d40)="$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") (async, rerun: 32) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x5001, 0x1000, 0x8}, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000440), 0x3) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5435, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600c0a3500180600fe80000000000000000000000d989b43e75009000000bbfe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002040a00"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) (async) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000011008af26ca6823a45b8f3ef47b9daff4270dff3beac799e87bd711ac353", 0xd8}], 0x1}, 0x94) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x0, 0x0, "8738c8e897dc896ddbe54d4573e006702ed55e083f132d7942c85cb0f9fb38d54b97cc18defc15a0bada313ea13d63b3d9e23eaf29bbc41aa2c7a3dd9f7bb6fd7a036223feb7f0593b3ee2dc8136dc57"}, 0xd8) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1.046967275s ago: executing program 2 (id=9248): pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.003176557s ago: executing program 2 (id=9251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000090350570caa4e4af5368f6ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 926.89543ms ago: executing program 6 (id=9253): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES8], 0xd, 0x7f4, &(0x7f0000001580)="$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") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x80000, 0xfffffffd, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4, 0xfff], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff8}]}}]}, 0xa4}}, 0x0) 884.541482ms ago: executing program 6 (id=9254): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8010) fsopen(0x0, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x2a3475, 0x0) 855.293433ms ago: executing program 6 (id=9255): mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_clone(0x26801000, 0x0, 0x700, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') 524.618158ms ago: executing program 4 (id=9256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x2, 0x6, 0xb3f83e6d522af86d, 0xffffffffffffffff, 0x529f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ff5bdf25010000003a0004002c4e03"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendmmsg$inet(r8, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e1504511602000000", 0x13}, {&(0x7f0000000000)='S', 0x1}], 0x2}}], 0x1, 0x4004040) pwritev(r5, &(0x7f0000000440)=[{&(0x7f0000000140)='N', 0x1}], 0x1, 0x5, 0xfac) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x38, r12, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x38}}, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r14, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) socket$kcm(0x21, 0x2, 0x2) 478.44326ms ago: executing program 6 (id=9257): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmmsg$unix(r4, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000700)="96121714edb1e6d0656dbbbfc366a6216e96378c929151c0e45a6cdca1e6e2f43e8843e53b30daf3de3d075493b6f280299f0283f47db053dc143e227c14eba8960d698a5e5ffbe790f4176073bd24d71e83610c4c958db12be1d33c3d9e", 0x5e}, {&(0x7f0000000780)="66d84b6b0dc312cf8ed646efe419b3c75edcc4484906847844380dcce74e55594643e998f9576d240705bc376bd10f069a20889b7d3fee266c21dfe4fd7ece997d35a469d9ba37b6a4413a1a07cbe23f872e913c9d6b00f8cdaa4d18873eeccc7378ca4179a9", 0x66}, {&(0x7f0000000cc0)="f2bc7c4ab7d98c798a3b0347afa9ffe4edbccc74b19d2bbb0f7034e7226580b98ff87d0bec953fd207128a818f4fa4b347d16e3538fe8fcdcd9365307fed8158ad198b3cc95d683141eed356641f0c26f56f63cc078922e10e9d8bfdb4c9a050306f690eca10a6d211264055c17654b4cda7d46dbdd629f8243a2dea50112a947fc3fb1b2e65", 0x86}, {&(0x7f0000000600)="8b2cabb6c4147d9a0e5dd56bb0794528bd7444d6396a54c266766d6a411d9deb70a59667dcddc99f555c06e39ab6a6470608", 0x32}, {&(0x7f0000000d80)="e68857213951ec9e09dec08ea15f2eb6cf67895bac6f1cfbbc5219f98b41ca2a62105eb76b32d1d39c7fe243b37ed6917f72aa55151815adfb8ac8035939b2544679d71b869bf01fa20143b5931027ea770ff34f4fbc3a1b2b599bdd2f00824b942f9bdad4c9269647cc40ee4937f10001202b87aee261594f2ed415161c857782b2bfd9d0", 0x85}, {&(0x7f0000000e40)="936f6a6f94ebf8cda5e0dfc39dfdc964bcc30667ea4011c93f66dc636ddc659a4371df07f8d265bba0b16319b677254831d9f2936a84c8f1180103098306b9cfdb6835e94575b9a0aee1cac0415179c578a4e2203c137b1c32d03d5e7503f6da46b1d1bb4ec604ba94d730634d5961a8ca608226a0808a451ae41d320b4e860d3ab8293b84b9b0019a24aad43524fa83ac73681fee9d47bfabe6c8fc19d1473b7f1e5e658e18f2f50c364c9b5692d4373a74cb4e517790a52056b99a3a2fcbdd0cd74f11", 0xc4}, {&(0x7f0000000f40)="2a997f87a303d4f14a65e5eadcafea7d4bf27dcc2abb20cc40b54be1375b6eefa9b7b60e80d75397bf147d70aac7036ea7a5435a458f79c5a1e17ec011b2821d7e442dffd7610e78ce380c39abe93e013553979d5b0d54d655dd47ff09af99e911ae2c23a9d71e79905652e114ef1b38e5752fa9e124a20d651a39eb7c14f9d36da45fd2723fbb05499da9fb9a1ac4623af95bfa56fc0aaee1f6b992b677a0328842273fa12b7c8d19bc554f5cb8038fa40ac44699721769077adb87c3", 0xbd}, {&(0x7f0000001000)="defae88bf29fc925af055ff25726d5cbdb951ae8a5ef64898752dffe95caa4625b3d45f525d28581c180a7dbd2a964525c49ce9cc208c0d4f2d425e470e5b8546e6fbfab15a01eca828353de586f72e5a4b2f0a0c0f5ef73fa2926738c3bdea14cb37cd9799ad71c8892cf446d78259951b9156e7ab2a927333ff6c023299e95ed1a4f99705ea427c02baa811a4a64d664f71c498573522e1acf7cc1cdbb1029794447e7ec18487001af78242e0a31e47e414906f872fdb5c15d96412a4be01c3a05a0b758c386fc5d94ef4e01999a70561f6339a3fe418098b807188f861292081bd81f9853c66e6ba5fd217df6896a71ef1e8bad7e", 0xf6}, {&(0x7f0000001100)="8b9c5d482f1dbe2f566eddfd11985f9be16c6ff14745530fe0fdf10ef8599901173a4938ccdf7679bc60da29f76929022c35ff3ba846c0942c7aa46a29c95fc87252632a98ae1fe6337a32e91b6a689e52574c85f06ffe6e528cf1b764272b053aad8e6211207380c95dc4d6e4ef721f6d9246612a829d4c337c79f24ae1139ba6f035d3866b1ba68805b1c40d87e061a70a45129bb944b544d3ead3a02a8233977bbcce7a088f70e37ec04c5a649c94ffba5870b8385c1cf61172a20de488264d90af7f9df9db9c3450c9de4b09bdc9", 0xd0}], 0x9, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)="9ab2760fb8a4f2b202cd8747e59fb8342ded2a1c4cb2a507d016e09a189e12c862ccf7226e236db04c646803345f004f029f1ffe7ad5cce984eb", 0x3a}, {&(0x7f0000001340)="6eb36f30cafda336aa13d563fc2f1a6fd5b6b6d734a54a20bcbfeb77dcdbce02bc6b1ccfe7b6e21b1dc1af1c2d28532aab7a14a5008572e37ad91ac9e8e74ef856dd7e91808ad730642c05b438dcfb089ab103b43b6e76c5fe6c2710068cdeda9228a24b78cca3944382c2df38d8c7657424c8ba85e179b5878c7b2acbef28b374efe98bf26aac068675d32b4160ac4261843fb53cce5fc5ba7346934e59851098d08a0d7a296d1af591fd28a5374b95b2a3ca7b87723dfdc0fff16aa7c3a7a21116d044ebf94853885c6f4b665a1b10d2cca5aeece090df3466bf6e12f7008c2d87a44d755d2ccbc5d7d31102fa5edc62a50b3a5f82b87f", 0xf8}], 0x2, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x44}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001ac0)="0cc8143251a60af8100603f04295965c85098a0fc33e7f364f", 0x19}], 0x1, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}], 0x60, 0x20000000}}, {{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001dc0)="9932dcabd9da7d8aef0bf03a2cf76aed31", 0x11}, {&(0x7f0000001e00)="9155c0f637f54ebde6bb84d2e02b23671aec72da47436f448f0d716111d47fe443c002170d4969fa69a22ef4ec11c4827451a0bfa8261835f54570afbb985356371da823237692942b4cf61848e5796d440a8e9ce20275d793f0839c4a6de527b725627286d79703", 0x68}, {&(0x7f0000001e80)="c6cb8a30554da6dccde5d087c944eaa29c9be6f3357cbf15eff21baa2443c73f2aaf23482cbb7d0d1593", 0x2a}, {&(0x7f0000001ec0)="20310bdb31141954bc77fd890e56c493bdea7a29df73fa9086e68a020b75dd26e108fbe60898430449b43a", 0x2b}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="dc4955f322793de126593975a6f7c9051b5faf855ac5ab46b27181191e460f61a666c04d1c1cfc620910ec707e8a8e7d74b034284d6831886435bc02961d23cebb6560cbed24efa72385028d4d4be131237044470ad17544f978a29fcc972dd02e4585b02cbd690d6062ab8812c8e2a1ba98b2f30676648ab169219c37a0de35d1e83ee988a912ccd38778d2e1433c58ef2feecb806958f1d5fa74868d34075dfef907760b5de8c14cb2300d6bcb30983eddff66aa05b15a2c767a796968e924819e17e622084018", 0xc8}], 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="e201d4cdf5cd477b00000200000000000000000000e9ff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20000804}}], 0x4, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r7 = socket(0x400000000010, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xe, 0xe6, 0x4, 0x0, 0x3, 0x6, 0x8, 0x32e, 0x40, 0x10e, 0xf3, 0x408, 0x38, 0x3, 0x9, 0x0, 0x7}, [{0x60000000, 0x2, 0xfffffffffffffe01, 0x7, 0x7, 0x9, 0xc2d, 0xb3a8}, {0x5, 0x4a, 0x829, 0x918, 0x0, 0x6, 0x8, 0x3}, {0x4, 0x0, 0x7, 0x8, 0x4, 0x3, 0x2, 0x4}], "d61113e9470e16", ['\x00', '\x00']}, 0x2ef) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x60, 0x2c, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0x5}, {0xfff3, 0x6}, {0xfffc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x8, 0x8a}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xb43}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xfffffffb}, @TCA_U32_LINK={0x8, 0x3, 0x2006}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xb4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x984f4687b85a83b8, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r11, 0x60, 0x880}}, 0x20}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2000000000008, 0x0, 0x4, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000010007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r12}, 0x3d) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r13, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 446.469181ms ago: executing program 4 (id=9258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) 241.2702ms ago: executing program 4 (id=9259): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8010) fsopen(0x0, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x2a3475, 0x0) 180.438002ms ago: executing program 4 (id=9260): mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r10, 0x0, 0x4c) 133.194114ms ago: executing program 6 (id=9261): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000ac0)={0xfc, 0x0, &(0x7f0000000c00)=[@increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/210, 0xd2, 0x0, 0xfffffffffffffffb}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000840)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/60, 0x3c, 0x1, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/217, 0xd9, 0x1}}, &(0x7f00000008c0)={0x0, 0x18, 0x40}}}, @register_looper, @clear_death], 0x83, 0x0, &(0x7f0000000480)="6854d200afc91442eef0016865e52389a0ea2a3a83e9838b274c5385d244273ab8fc48b8b398af20e030ce01cc2bc3828d2dffcb421fd00c957140b0a62074072248f3f10276dd7fd7cb6d6fcce6779256c248a2a89e69db71624d8c7b48147804083f9dd02689536a2133985e84c2afab83e96b1077db4976ec56ca1f63f9dac9d871"}) fcntl$setlease(r0, 0x400, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4100, 0x1004}], 0x1, 0x33, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0) r6 = syz_io_uring_setup(0x20c5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x200004}, &(0x7f0000000600), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000740)={0x1000000000000059, 0x0, 0x0, &(0x7f0000000200)=[{0xffffffffffffffff}], &(0x7f0000000240)=[0x0, 0x4]}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYRESOCT=r2], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r8, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) prctl$PR_SET_NAME(0xf, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r10}, 0x4) 42.130089ms ago: executing program 2 (id=9262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) chroot(&(0x7f0000000040)='./file0\x00') 21.228379ms ago: executing program 6 (id=9263): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x5e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000300)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$mouse(&(0x7f0000000500), 0x528, 0x8202) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="1400000000fcdbdf250400f28000000000000000"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000010a01030000000000000000030000040900010073797a31000000000900010073797a31000000000900010073797a3100000000080002400000000108000240000000020c8c044000000010000000050c0004400000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x404880c}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 0s ago: executing program 2 (id=9264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x20000ffffffff}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r4 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) read(r2, &(0x7f0000000340)=""/57, 0x39) kernel console output (not intermixed with test programs): ext4_evict_inode:273: xattr delete (err -117) [ 525.132413][T28103] EXT4-fs (loop2): 1 orphan inode deleted [ 525.141356][T28103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.350185][T28128] __nla_validate_parse: 3 callbacks suppressed [ 525.350246][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8664'. [ 525.430877][T28132] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 525.445404][T28132] team0: No ports can be present during mode change [ 525.483764][T28134] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 3072 [ 525.571804][T20992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.926153][T28150] loop2: detected capacity change from 0 to 512 [ 525.957481][T28150] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8674: EA inode hash validation failed [ 525.971801][T28150] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8674: corrupted inode contents [ 525.984956][T28150] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.8674: mark_inode_dirty error [ 525.998078][T28150] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8674: corrupted inode contents [ 526.011669][T28150] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.8674: mark_inode_dirty error [ 526.024808][T28150] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.8674: mark inode dirty (error -117) [ 526.038580][T28150] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 526.048305][T28150] EXT4-fs (loop2): 1 orphan inode deleted [ 526.058220][T28150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.114589][T28160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8676'. [ 526.651003][T28170] loop1: detected capacity change from 0 to 512 [ 526.717200][T20992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.729548][T28170] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.8680: EA inode hash validation failed [ 526.748529][T28170] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.8680: corrupted inode contents [ 526.767302][T28170] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.8680: mark_inode_dirty error [ 526.779926][T28170] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.8680: corrupted inode contents [ 526.799460][T28170] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.8680: mark_inode_dirty error [ 526.818201][T28170] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.8680: mark inode dirty (error -117) [ 526.832159][T28170] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 526.841830][T28170] EXT4-fs (loop1): 1 orphan inode deleted [ 526.851032][T28170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.884470][T28188] lo speed is unknown, defaulting to 1000 [ 526.966872][T28183] futex_wake_op: syz.6.8685 tries to shift op by -3; fix this program [ 527.144603][T20071] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.263168][T28201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28201 comm=syz.4.8692 [ 527.263385][T28201] all: renamed from lo [ 527.654324][T28214] netlink: 26740 bytes leftover after parsing attributes in process `syz.6.8697'. [ 527.733527][T28217] netlink: 'syz.1.8698': attribute type 1 has an invalid length. [ 527.741299][T28217] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8698'. [ 528.110646][T28239] loop5: detected capacity change from 0 to 128 [ 528.123855][T28239] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 528.131774][T28239] FAT-fs (loop5): Filesystem has been set read-only [ 528.142439][T28239] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 528.150368][T28239] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 528.442840][T28248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28248 comm=syz.4.8710 [ 528.469855][T28248] all: renamed from lo [ 529.059160][T28253] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 529.069924][T28253] team0: No ports can be present during mode change [ 529.231919][T28257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8713'. [ 529.328697][T28267] loop4: detected capacity change from 0 to 1024 [ 529.337207][T28267] EXT4-fs: Ignoring removed orlov option [ 529.349374][T28267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.406831][T28267] lo speed is unknown, defaulting to 1000 [ 529.515975][ T9506] Bluetooth: hci0: Frame reassembly failed (-84) [ 529.523356][T28281] Bluetooth: hci0: Frame reassembly failed (-84) [ 529.529786][T28267] futex_wake_op: syz.4.8718 tries to shift op by -3; fix this program [ 529.600642][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.618908][T28280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28280 comm=syz.6.8723 [ 529.632543][T28280] all: renamed from lo (while UP) [ 529.945536][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8726'. [ 530.034132][ T29] kauditd_printk_skb: 1439 callbacks suppressed [ 530.034147][ T29] audit: type=1400 audit(1794.768:120336): avc: denied { map_create } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.059549][ T29] audit: type=1400 audit(1794.768:120337): avc: denied { execmem } for pid=28303 comm="syz.6.8731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 530.078556][ T29] audit: type=1400 audit(1794.787:120338): avc: denied { map_read map_write } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.113294][ T29] audit: type=1400 audit(1794.824:120339): avc: denied { prog_load } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.132155][ T29] audit: type=1400 audit(1794.824:120340): avc: denied { bpf } for pid=28302 comm="syz.5.8730" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 530.148572][T28304] netlink: 'syz.5.8730': attribute type 1 has an invalid length. [ 530.152456][ T29] audit: type=1400 audit(1794.824:120341): avc: denied { perfmon } for pid=28302 comm="syz.5.8730" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 530.160211][T28304] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8730'. [ 530.180786][ T29] audit: type=1400 audit(1794.824:120342): avc: denied { prog_run } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.208493][ T29] audit: type=1400 audit(1794.824:120343): avc: denied { create } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.228725][ T29] audit: type=1400 audit(1794.824:120344): avc: denied { write } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.248824][ T29] audit: type=1400 audit(1794.824:120345): avc: denied { map_create } for pid=28302 comm="syz.5.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.465254][T28324] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 530.466536][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8739'. [ 530.475820][T28324] team0: No ports can be present during mode change [ 530.578785][T28332] netlink: 'syz.4.8743': attribute type 1 has an invalid length. [ 530.586618][T28332] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8743'. [ 531.528881][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 531.535517][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.535681][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.542153][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 531.557152][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.557311][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.573172][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 531.573232][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 531.573270][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.574946][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 531.600142][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.600286][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.615316][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 531.615334][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.615359][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.615836][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22) [ 531.641935][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.649764][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.651218][T28376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 531.665574][T28376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 531.665863][T28376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 531.674419][T28376] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(32) [ 531.674437][T28376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.674461][T28376] vhci_hcd vhci_hcd.0: Device attached [ 531.682996][T28387] vhci_hcd: connection closed [ 531.683204][T28385] vhci_hcd: connection closed [ 531.683352][ T9023] vhci_hcd: stop threads [ 531.683364][ T9023] vhci_hcd: release socket [ 531.683373][ T9023] vhci_hcd: disconnect device [ 531.683414][ T9023] vhci_hcd: stop threads [ 531.683422][ T9023] vhci_hcd: release socket [ 531.683481][ T9023] vhci_hcd: disconnect device [ 531.683556][T28383] vhci_hcd: connection closed [ 531.683626][T28381] vhci_hcd: connection closed [ 531.683783][T28379] vhci_hcd: connection closed [ 531.683967][ T9023] vhci_hcd: stop threads [ 531.684013][ T9023] vhci_hcd: release socket [ 531.684044][ T9023] vhci_hcd: disconnect device [ 531.684141][T28377] vhci_hcd: connection closed [ 531.684167][ T9023] vhci_hcd: stop threads [ 531.684176][ T9023] vhci_hcd: release socket [ 531.684189][ T9023] vhci_hcd: disconnect device [ 531.684331][ T9023] vhci_hcd: stop threads [ 531.684337][ T9023] vhci_hcd: release socket [ 531.684358][ T9023] vhci_hcd: disconnect device [ 531.684495][ T9023] vhci_hcd: stop threads [ 531.684504][ T9023] vhci_hcd: release socket [ 531.684517][ T9023] vhci_hcd: disconnect device [ 531.719666][T12911] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 531.827187][ T7979] vhci_hcd: vhci_device speed not set [ 531.930454][T28399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.939212][T28399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.053399][ T9023] Bluetooth: hci0: Frame reassembly failed (-84) [ 532.234576][T28389] vhci_hcd: connection closed [ 532.234812][ T53] vhci_hcd: stop threads [ 532.243892][ T53] vhci_hcd: release socket [ 532.248310][ T53] vhci_hcd: disconnect device [ 532.299428][T28423] FAULT_INJECTION: forcing a failure. [ 532.299428][T28423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.312703][T28423] CPU: 0 UID: 0 PID: 28423 Comm: syz.1.8778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 532.312744][T28423] Tainted: [W]=WARN [ 532.312753][T28423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.312782][T28423] Call Trace: [ 532.312809][T28423] [ 532.312817][T28423] __dump_stack+0x1d/0x30 [ 532.312840][T28423] dump_stack_lvl+0xe8/0x140 [ 532.312868][T28423] dump_stack+0x15/0x1b [ 532.312893][T28423] should_fail_ex+0x265/0x280 [ 532.313001][T28423] should_fail+0xb/0x20 [ 532.313032][T28423] should_fail_usercopy+0x1a/0x20 [ 532.313058][T28423] _copy_from_user+0x1c/0xb0 [ 532.313119][T28423] perf_copy_attr+0x145/0x610 [ 532.313195][T28423] ? get_pid_task+0x96/0xd0 [ 532.313269][T28423] __se_sys_perf_event_open+0x67/0x1210 [ 532.313306][T28423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 532.313336][T28423] ? vfs_write+0x7e8/0x960 [ 532.313376][T28423] ? __rcu_read_unlock+0x4f/0x70 [ 532.313402][T28423] __x64_sys_perf_event_open+0x67/0x80 [ 532.313438][T28423] x64_sys_call+0x78c/0x3000 [ 532.313481][T28423] do_syscall_64+0xd8/0x2a0 [ 532.313511][T28423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.313533][T28423] RIP: 0033:0x7f7a0a31f749 [ 532.313566][T28423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.313583][T28423] RSP: 002b:00007f7a08d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 532.313605][T28423] RAX: ffffffffffffffda RBX: 00007f7a0a575fa0 RCX: 00007f7a0a31f749 [ 532.313621][T28423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 532.313636][T28423] RBP: 00007f7a08d87090 R08: 0000000000000000 R09: 0000000000000000 [ 532.313650][T28423] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 532.313686][T28423] R13: 00007f7a0a576038 R14: 00007f7a0a575fa0 R15: 00007ffc65a38888 [ 532.313738][T28423] [ 532.511485][T28421] loop5: detected capacity change from 0 to 128 [ 532.524742][T28421] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 532.532720][T28421] FAT-fs (loop5): Filesystem has been set read-only [ 532.539484][T28421] bio_check_eod: 14428 callbacks suppressed [ 532.539498][T28421] syz.5.8777: attempt to access beyond end of device [ 532.539498][T28421] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 532.559678][T28421] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 532.567581][T28421] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 532.582727][T28421] syz.5.8777: attempt to access beyond end of device [ 532.582727][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.625636][T28421] syz.5.8777: attempt to access beyond end of device [ 532.625636][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.658645][T28421] syz.5.8777: attempt to access beyond end of device [ 532.658645][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.681234][T28421] syz.5.8777: attempt to access beyond end of device [ 532.681234][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.702597][T28421] syz.5.8777: attempt to access beyond end of device [ 532.702597][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.736846][T28421] syz.5.8777: attempt to access beyond end of device [ 532.736846][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.798589][T28421] syz.5.8777: attempt to access beyond end of device [ 532.798589][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.830643][T28421] syz.5.8777: attempt to access beyond end of device [ 532.830643][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.855394][T28421] syz.5.8777: attempt to access beyond end of device [ 532.855394][T28421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 532.947299][T28432] lo speed is unknown, defaulting to 1000 [ 533.788564][T28458] loop2: detected capacity change from 0 to 512 [ 533.821967][T28458] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8792: EA inode hash validation failed [ 533.852760][T28458] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8792: corrupted inode contents [ 533.872008][T28464] !yz!: rxe_newlink: already configured on team_slave_0 [ 533.889616][T28458] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.8792: mark_inode_dirty error [ 533.903063][T28458] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8792: corrupted inode contents [ 533.920202][T28458] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.8792: mark_inode_dirty error [ 533.938763][T28468] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 533.947152][T28468] team0: No ports can be present during mode change [ 533.974722][T28458] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.8792: mark inode dirty (error -117) [ 533.989728][T28458] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 534.000681][T28458] EXT4-fs (loop2): 1 orphan inode deleted [ 534.010569][T28458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.199352][T12911] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 534.274428][T20992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.659337][ T9] usb usb12-port2: attempt power cycle [ 535.450338][ T29] kauditd_printk_skb: 1048 callbacks suppressed [ 535.450352][ T29] audit: type=1400 audit(2055.822:121394): avc: denied { prog_load } for pid=28500 comm="syz.1.8803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 535.475468][ T29] audit: type=1400 audit(2055.822:121395): avc: denied { bpf } for pid=28500 comm="syz.1.8803" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 535.496000][ T29] audit: type=1400 audit(2055.822:121396): avc: denied { perfmon } for pid=28500 comm="syz.1.8803" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 535.516742][ T29] audit: type=1400 audit(2055.822:121397): avc: denied { prog_run } for pid=28500 comm="syz.1.8803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 535.559862][T28511] lo speed is unknown, defaulting to 1000 [ 535.786891][T28513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 535.793562][T28513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.801117][T28513] vhci_hcd vhci_hcd.0: Device attached [ 535.948000][T28514] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 535.954698][T28514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.962208][T28514] vhci_hcd vhci_hcd.0: Device attached [ 536.016015][ T29] audit: type=1400 audit(2055.859:121398): avc: denied { write } for pid=28500 comm="syz.1.8803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 536.034235][T28523] tipc: Started in network mode [ 536.035143][ T29] audit: type=1400 audit(2055.859:121399): avc: denied { create } for pid=28500 comm="syz.1.8803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 536.040091][T28523] tipc: Node identity 8eec5e61c8ba, cluster identity 4711 [ 536.059880][ T29] audit: type=1400 audit(2055.859:121400): avc: denied { write } for pid=28500 comm="syz.1.8803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 536.067177][T28523] tipc: Enabled bearer , priority 0 [ 536.086828][ T29] audit: type=1400 audit(2055.859:121401): avc: denied { nlmsg_write } for pid=28500 comm="syz.1.8803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 536.093673][ T3362] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 536.114104][ T29] audit: type=1400 audit(2055.859:121402): avc: denied { read write } for pid=20992 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.114139][ T29] audit: type=1400 audit(2055.859:121403): avc: denied { open } for pid=20992 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.156323][T28526] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 536.175808][T28526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.183527][T28526] vhci_hcd vhci_hcd.0: Device attached [ 536.194227][T28523] syzkaller0: entered promiscuous mode [ 536.199858][T28523] syzkaller0: entered allmulticast mode [ 536.254955][T28513] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 536.261594][T28513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.269167][T28513] vhci_hcd vhci_hcd.0: Device attached [ 536.309756][T28523] tipc: Resetting bearer [ 536.367111][T28513] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 536.373801][T28513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.381472][T28513] vhci_hcd vhci_hcd.0: Device attached [ 536.382131][T28522] tipc: Resetting bearer [ 536.396312][T28522] tipc: Disabling bearer [ 536.418601][T28513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 536.425308][T28513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 536.433047][T28513] vhci_hcd vhci_hcd.0: Device attached [ 536.469482][T28513] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.501552][T28513] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.521450][T28541] FAULT_INJECTION: forcing a failure. [ 536.521450][T28541] name failslab, interval 1, probability 0, space 0, times 0 [ 536.524282][T28513] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.534138][T28541] CPU: 0 UID: 0 PID: 28541 Comm: syz.4.8808 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 536.534207][T28541] Tainted: [W]=WARN [ 536.534218][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.534236][T28541] Call Trace: [ 536.534245][T28541] [ 536.534256][T28541] __dump_stack+0x1d/0x30 [ 536.534290][T28541] dump_stack_lvl+0xe8/0x140 [ 536.534322][T28541] dump_stack+0x15/0x1b [ 536.534401][T28541] should_fail_ex+0x265/0x280 [ 536.534452][T28541] should_failslab+0x8c/0xb0 [ 536.534478][T28541] __kmalloc_node_track_caller_noprof+0xa5/0x5a0 [ 536.534521][T28541] ? sidtab_sid2str_get+0xa0/0x130 [ 536.534592][T28541] kmemdup_noprof+0x2b/0x70 [ 536.534637][T28541] sidtab_sid2str_get+0xa0/0x130 [ 536.534689][T28541] security_sid_to_context_core+0x1eb/0x2e0 [ 536.534726][T28541] security_sid_to_context+0x27/0x40 [ 536.534789][T28541] avc_audit_post_callback+0x10f/0x520 [ 536.534829][T28541] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 536.534929][T28541] common_lsm_audit+0x1bb/0x230 [ 536.534956][T28541] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 536.535055][T28541] slow_avc_audit+0x104/0x140 [ 536.535135][T28541] avc_has_perm+0x13a/0x180 [ 536.535175][T28541] selinux_socket_sendmsg+0x175/0x1b0 [ 536.535222][T28541] security_socket_sendmsg+0x48/0x80 [ 536.535273][T28541] __sock_sendmsg+0x30/0x180 [ 536.535330][T28541] ____sys_sendmsg+0x31e/0x4a0 [ 536.535363][T28541] ___sys_sendmsg+0x17b/0x1d0 [ 536.535408][T28541] __x64_sys_sendmsg+0xd4/0x160 [ 536.535499][T28541] x64_sys_call+0x17ba/0x3000 [ 536.535549][T28541] do_syscall_64+0xd8/0x2a0 [ 536.535588][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.535653][T28541] RIP: 0033:0x7f801b05f749 [ 536.535675][T28541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.535716][T28541] RSP: 002b:00007f8019ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.535752][T28541] RAX: ffffffffffffffda RBX: 00007f801b2b5fa0 RCX: 00007f801b05f749 [ 536.535786][T28541] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 536.535803][T28541] RBP: 00007f8019ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 536.535820][T28541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.535912][T28541] R13: 00007f801b2b6038 R14: 00007f801b2b5fa0 R15: 00007fff36510b78 [ 536.535940][T28541] [ 536.556431][T28541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.582320][T28513] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(32) [ 536.794407][T28513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 536.802317][T28513] vhci_hcd vhci_hcd.0: Device attached [ 536.896483][T28548] vhci_hcd: connection closed [ 536.896694][ T1582] vhci_hcd: stop threads [ 536.897240][T28544] vhci_hcd: connection closed [ 536.901413][ T1582] vhci_hcd: release socket [ 536.901433][ T1582] vhci_hcd: disconnect device [ 536.906341][T28527] vhci_hcd: connection closed [ 536.925227][T28534] vhci_hcd: connection closed [ 536.930003][T28520] vhci_hcd: connection closed [ 536.935030][T28515] vhci_hcd: connection reset by peer [ 536.947156][ T1582] vhci_hcd: stop threads [ 536.951586][ T1582] vhci_hcd: release socket [ 536.956238][ T1582] vhci_hcd: disconnect device [ 536.973179][ T1582] vhci_hcd: stop threads [ 536.977472][ T1582] vhci_hcd: release socket [ 536.981942][ T1582] vhci_hcd: disconnect device [ 536.991089][ T1582] vhci_hcd: stop threads [ 536.995365][ T1582] vhci_hcd: release socket [ 536.999853][ T1582] vhci_hcd: disconnect device [ 537.005844][ T1582] vhci_hcd: stop threads [ 537.010125][ T1582] vhci_hcd: release socket [ 537.014633][ T1582] vhci_hcd: disconnect device [ 537.019637][ T1582] vhci_hcd: stop threads [ 537.023909][ T1582] vhci_hcd: release socket [ 537.028374][ T1582] vhci_hcd: disconnect device [ 537.042327][T28581] loop4: detected capacity change from 0 to 512 [ 537.051105][T28581] EXT4-fs: Ignoring removed bh option [ 537.057903][T28581] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 537.067041][T28581] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 537.076997][T28581] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 537.086461][T28581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 537.096032][T28581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.112815][T28581] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 537.137017][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.481713][ T9] usb usb12-port2: unable to enumerate USB device [ 537.581137][T28562] vhci_hcd: connection closed [ 537.581538][ T2586] vhci_hcd: stop threads [ 537.590559][ T2586] vhci_hcd: release socket [ 537.595009][ T2586] vhci_hcd: disconnect device [ 537.766975][T28647] netlink: 27636 bytes leftover after parsing attributes in process `syz.2.8821'. [ 538.049351][T28672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28672 comm=syz.2.8824 [ 538.055450][T28672] all: renamed from lo [ 538.316908][T28683] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8825'. [ 538.334345][T28683] lo speed is unknown, defaulting to 1000 [ 538.390958][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8825'. [ 538.459712][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 538.506031][T28706] Bluetooth: hci0: Frame reassembly failed (-84) [ 538.812039][T28718] loop1: detected capacity change from 0 to 512 [ 538.861654][T28718] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.8833: EA inode hash validation failed [ 538.887522][T28718] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.8833: corrupted inode contents [ 538.919916][T28718] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.8833: mark_inode_dirty error [ 538.940130][T28718] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.8833: corrupted inode contents [ 538.955803][T28718] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.8833: mark_inode_dirty error [ 538.973518][T28718] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.8833: mark inode dirty (error -117) [ 538.987578][T28718] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 538.998316][T28718] EXT4-fs (loop1): 1 orphan inode deleted [ 539.008389][T28718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.218235][T28733] lo speed is unknown, defaulting to 1000 [ 539.674753][T20071] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.773689][T28737] loop1: detected capacity change from 0 to 128 [ 539.798398][T28737] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 539.806282][T28737] FAT-fs (loop1): Filesystem has been set read-only [ 539.813181][T28737] bio_check_eod: 6540 callbacks suppressed [ 539.813194][T28737] syz.1.8837: attempt to access beyond end of device [ 539.813194][T28737] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 539.856074][T28737] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 539.864004][T28737] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 539.872146][T28737] syz.1.8837: attempt to access beyond end of device [ 539.872146][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.885735][T28737] syz.1.8837: attempt to access beyond end of device [ 539.885735][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.899139][T28737] syz.1.8837: attempt to access beyond end of device [ 539.899139][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.914198][T28737] syz.1.8837: attempt to access beyond end of device [ 539.914198][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.920881][T28739] netlink: 'syz.2.8838': attribute type 1 has an invalid length. [ 539.927676][T28737] syz.1.8837: attempt to access beyond end of device [ 539.927676][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.935250][T28739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8838'. [ 539.949983][T28737] syz.1.8837: attempt to access beyond end of device [ 539.949983][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.972191][T28737] syz.1.8837: attempt to access beyond end of device [ 539.972191][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.986216][T28737] syz.1.8837: attempt to access beyond end of device [ 539.986216][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 539.999944][T28737] syz.1.8837: attempt to access beyond end of device [ 539.999944][T28737] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 540.385014][T28747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.418395][T28747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.515407][T28751] loop2: detected capacity change from 0 to 512 [ 540.549007][ T9023] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.567030][ T9023] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.600986][ T9023] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.616111][T12911] Bluetooth: hci0: command 0x1003 tx timeout [ 540.622188][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 540.640856][T28751] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8842: EA inode hash validation failed [ 540.677306][T28751] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8842: corrupted inode contents [ 540.713397][ T9023] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.724350][T28751] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.8842: mark_inode_dirty error [ 540.738024][T28751] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8842: corrupted inode contents [ 540.755085][T28751] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.8842: mark_inode_dirty error [ 540.773859][T28751] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.8842: mark inode dirty (error -117) [ 540.795632][T28751] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 540.814150][T28751] EXT4-fs (loop2): 1 orphan inode deleted [ 540.828712][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 540.828728][ T29] audit: type=1400 audit(2060.854:122253): avc: denied { unmount } for pid=20071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 540.834464][T28751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.835721][ T29] audit: type=1326 audit(2060.863:122254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.6.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1c48e6f7d7 code=0x7ffc0000 [ 540.916369][ T29] audit: type=1400 audit(2060.891:122255): avc: denied { mount } for pid=28746 comm="syz.2.8842" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 540.937956][ T29] audit: type=1326 audit(2060.891:122256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28746 comm="syz.2.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c8f57df90 code=0x7ffc0000 [ 540.951858][T28762] audit: audit_backlog=65 > audit_backlog_limit=64 [ 540.961231][ T29] audit: type=1326 audit(2060.891:122257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28746 comm="syz.2.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c8f57df90 code=0x7ffc0000 [ 540.967710][T28762] audit: audit_lost=102 audit_rate_limit=0 audit_backlog_limit=64 [ 540.990888][ T29] audit: type=1400 audit(2060.891:122258): avc: denied { read write } for pid=28746 comm="syz.2.8842" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.998636][T28762] audit: backlog limit exceeded [ 541.011325][T28757] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.134867][T28766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8848'. [ 541.166074][T28766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8848'. [ 541.244332][T28771] FAULT_INJECTION: forcing a failure. [ 541.244332][T28771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.257644][T28771] CPU: 1 UID: 0 PID: 28771 Comm: syz.5.8850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 541.257684][T28771] Tainted: [W]=WARN [ 541.257693][T28771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.257789][T28771] Call Trace: [ 541.257796][T28771] [ 541.257803][T28771] __dump_stack+0x1d/0x30 [ 541.257829][T28771] dump_stack_lvl+0xe8/0x140 [ 541.257857][T28771] dump_stack+0x15/0x1b [ 541.257957][T28771] should_fail_ex+0x265/0x280 [ 541.258004][T28771] should_fail+0xb/0x20 [ 541.258035][T28771] should_fail_usercopy+0x1a/0x20 [ 541.258076][T28771] _copy_to_iter+0x251/0xe70 [ 541.258097][T28771] ? _raw_spin_unlock+0x26/0x50 [ 541.258131][T28771] ? _raw_spin_lock_irqsave+0x75/0xd0 [ 541.258174][T28771] ? __list_del_entry_valid_or_report+0x65/0x130 [ 541.258202][T28771] tun_do_read+0xa76/0x15e0 [ 541.258272][T28771] ? __pfx_default_wake_function+0x10/0x10 [ 541.258302][T28771] tun_chr_read_iter+0x176/0x250 [ 541.258378][T28771] do_iter_readv_writev+0x4a1/0x540 [ 541.258415][T28771] vfs_readv+0x1ea/0x690 [ 541.258440][T28771] do_readv+0xe7/0x210 [ 541.258459][T28771] __x64_sys_readv+0x45/0x50 [ 541.258496][T28771] x64_sys_call+0x2831/0x3000 [ 541.258516][T28771] do_syscall_64+0xd8/0x2a0 [ 541.258544][T28771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.258567][T28771] RIP: 0033:0x7fed7198f749 [ 541.258583][T28771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.258669][T28771] RSP: 002b:00007fed703f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 541.258770][T28771] RAX: ffffffffffffffda RBX: 00007fed71be5fa0 RCX: 00007fed7198f749 [ 541.258784][T28771] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 541.258798][T28771] RBP: 00007fed703f7090 R08: 0000000000000000 R09: 0000000000000000 [ 541.258810][T28771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.258822][T28771] R13: 00007fed71be6038 R14: 00007fed71be5fa0 R15: 00007ffd6ab92538 [ 541.258837][T28771] [ 541.479632][ T3362] usb 5-1: enqueue for inactive port 0 [ 541.485310][ T3362] usb 5-1: enqueue for inactive port 0 [ 541.564965][ T3362] vhci_hcd: vhci_device speed not set [ 541.566842][T20992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.600224][T28788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8855'. [ 541.663435][T28795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.672583][T28795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.199705][T28797] loop1: detected capacity change from 0 to 512 [ 542.206855][T28797] EXT4-fs: Ignoring removed nobh option [ 542.215223][T28797] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8858: error while reading EA inode 32 err=-116 [ 542.227883][T28797] EXT4-fs (loop1): Remounting filesystem read-only [ 542.234680][T28797] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 542.245006][T28797] EXT4-fs (loop1): 1 orphan inode deleted [ 542.251228][T28797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.264148][T28797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.346339][T28806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8862'. [ 542.355593][T28806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8862'. [ 542.716339][T28826] lo speed is unknown, defaulting to 1000 [ 542.716817][T28827] lo speed is unknown, defaulting to 1000 [ 543.434747][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8879'. [ 543.447355][T28847] bridge0: entered promiscuous mode [ 543.455624][T28849] FAULT_INJECTION: forcing a failure. [ 543.455624][T28849] name failslab, interval 1, probability 0, space 0, times 0 [ 543.468293][T28849] CPU: 1 UID: 0 PID: 28849 Comm: syz.2.8880 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 543.468370][T28849] Tainted: [W]=WARN [ 543.468378][T28849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.468391][T28849] Call Trace: [ 543.468399][T28849] [ 543.468407][T28849] __dump_stack+0x1d/0x30 [ 543.468500][T28849] dump_stack_lvl+0xe8/0x140 [ 543.468525][T28849] dump_stack+0x15/0x1b [ 543.468562][T28849] should_fail_ex+0x265/0x280 [ 543.468592][T28849] should_failslab+0x8c/0xb0 [ 543.468610][T28849] kmem_cache_alloc_noprof+0x50/0x4a0 [ 543.468712][T28849] ? create_new_namespaces+0x3c/0x400 [ 543.468737][T28849] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 543.468764][T28849] create_new_namespaces+0x3c/0x400 [ 543.468831][T28849] __se_sys_setns+0x199/0xee0 [ 543.468856][T28849] __x64_sys_setns+0x31/0x40 [ 543.468881][T28849] x64_sys_call+0x2760/0x3000 [ 543.468969][T28849] do_syscall_64+0xd8/0x2a0 [ 543.469003][T28849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.469026][T28849] RIP: 0033:0x7f4c8f57f749 [ 543.469040][T28849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.469058][T28849] RSP: 002b:00007f4c8dfe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 543.469080][T28849] RAX: ffffffffffffffda RBX: 00007f4c8f7d5fa0 RCX: 00007f4c8f57f749 [ 543.469095][T28849] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000005 [ 543.469110][T28849] RBP: 00007f4c8dfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 543.469125][T28849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.469139][T28849] R13: 00007f4c8f7d6038 R14: 00007f4c8f7d5fa0 R15: 00007ffd9d6cd808 [ 543.469200][T28849] [ 543.673654][T28853] siw: device registration error -23 [ 543.701038][T28855] netlink: 'syz.2.8883': attribute type 1 has an invalid length. [ 543.708848][T28855] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8883'. [ 543.741459][ T9499] Bluetooth: hci0: Frame reassembly failed (-84) [ 543.989354][T28875] netlink: 'syz.2.8892': attribute type 1 has an invalid length. [ 544.004028][T28875] bond0: entered promiscuous mode [ 544.009266][T28875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.031459][T28875] bond0: (slave bridge0): making interface the new active one [ 544.039088][T28875] bridge0: entered promiscuous mode [ 544.046231][T28875] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 544.067205][T28877] loop5: detected capacity change from 0 to 512 [ 544.110274][T28877] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.8891: EA inode hash validation failed [ 544.125860][T28877] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.8891: corrupted inode contents [ 544.138551][T28877] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.8891: mark_inode_dirty error [ 544.151004][T28877] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.8891: corrupted inode contents [ 544.163661][T28877] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.8891: mark_inode_dirty error [ 544.177167][T28877] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.8891: mark inode dirty (error -117) [ 544.195232][T28877] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 544.205041][T28877] EXT4-fs (loop5): 1 orphan inode deleted [ 544.218394][T28877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.258761][T28885] netlink: 27732 bytes leftover after parsing attributes in process `syz.2.8894'. [ 544.333446][T28889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28889 comm=syz.2.8895 [ 544.344650][T14361] usb usb6-port1: attempt power cycle [ 544.384158][T28889] all: renamed from lo [ 544.455003][T28894] netlink: 'syz.4.8896': attribute type 1 has an invalid length. [ 544.462997][T28894] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8896'. [ 544.761835][T28914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.782821][T28914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.838590][T23404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.531240][T15771] Bluetooth: hci1: Frame reassembly failed (-84) [ 545.916470][ T3653] Bluetooth: hci0: command 0x1003 tx timeout [ 545.922515][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 546.188831][ T29] kauditd_printk_skb: 1240 callbacks suppressed [ 546.188849][ T29] audit: type=1400 audit(2321.873:123497): avc: denied { sys_module } for pid=28950 comm="syz.6.8919" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 546.216685][ T29] audit: type=1400 audit(2321.873:123498): avc: denied { module_request } for pid=28950 comm="syz.6.8919" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 546.243927][ T29] audit: type=1400 audit(2321.930:123499): avc: denied { module_request } for pid=28950 comm="syz.6.8919" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 546.267600][ T29] audit: type=1400 audit(2321.930:123500): avc: denied { read write } for pid=23404 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.291713][ T29] audit: type=1400 audit(2321.930:123501): avc: denied { open } for pid=23404 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.315822][ T29] audit: type=1400 audit(2321.930:123502): avc: denied { ioctl } for pid=23404 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.342335][T14361] usb usb6-port1: unable to enumerate USB device [ 546.345849][T28951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28951 comm=syz.6.8919 [ 546.348859][ T29] audit: type=1400 audit(2321.948:123503): avc: denied { sys_module } for pid=28950 comm="syz.6.8919" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 546.382283][ T29] audit: type=1400 audit(2321.948:123504): avc: denied { module_request } for pid=28950 comm="syz.6.8919" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 546.403797][ T29] audit: type=1400 audit(2321.976:123505): avc: denied { create } for pid=28954 comm="syz.5.8920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.404585][T28951] all: renamed from lo (while UP) [ 546.424018][ T29] audit: type=1400 audit(2321.976:123506): avc: denied { write } for pid=28954 comm="syz.5.8920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.436873][T28956] netlink: 27748 bytes leftover after parsing attributes in process `syz.5.8920'. [ 547.049186][T28973] loop1: detected capacity change from 0 to 128 [ 547.055055][T28973] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 547.063676][T28973] FAT-fs (loop1): Filesystem has been set read-only [ 547.063861][T28973] bio_check_eod: 19764 callbacks suppressed [ 547.063877][T28973] syz.1.8926: attempt to access beyond end of device [ 547.063877][T28973] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 547.090096][T28973] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 547.090193][T28973] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 547.090297][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090297][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090357][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090357][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090397][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090397][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090437][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090437][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090512][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090512][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090541][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090541][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090606][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090606][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090643][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090643][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.090681][T28973] syz.1.8926: attempt to access beyond end of device [ 547.090681][T28973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 547.711936][T12911] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 547.718093][ T3890] Bluetooth: hci1: command 0x1003 tx timeout [ 547.943547][T28981] netlink: 'syz.5.8929': attribute type 1 has an invalid length. [ 547.951431][T28981] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8929'. [ 548.128099][T28990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8933'. [ 548.244242][T28997] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8936'. [ 548.303404][T29001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.312082][T29001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.386864][T29002] loop5: detected capacity change from 0 to 512 [ 548.394859][T29002] EXT4-fs: Ignoring removed bh option [ 548.401684][T29002] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 548.410798][T29002] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 548.423466][T29002] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 548.433124][T29002] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 548.442672][T29002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.467041][T29002] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 548.494280][T23404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.563636][T29013] loop5: detected capacity change from 0 to 128 [ 548.583718][T29013] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 548.591693][T29013] FAT-fs (loop5): Filesystem has been set read-only [ 548.601302][T29013] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 548.609191][T29013] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 548.918153][T29021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8944'. [ 549.167946][T29031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29031 comm=syz.1.8947 [ 549.195903][T29031] all: renamed from lo [ 549.501982][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8951'. [ 549.599022][T29049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.625632][T29049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.325555][T29066] loop1: detected capacity change from 0 to 128 [ 550.336285][T29066] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 550.344153][T29066] FAT-fs (loop1): Filesystem has been set read-only [ 550.350805][T29066] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 550.358680][T29066] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 550.806369][T29070] loop5: detected capacity change from 0 to 512 [ 550.871324][T29070] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.8963: EA inode hash validation failed [ 550.886041][T29070] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.8963: corrupted inode contents [ 550.901965][T29074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29074 comm=syz.6.8965 [ 550.915512][T29074] all: renamed from lo (while UP) [ 550.960953][T29070] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.8963: mark_inode_dirty error [ 551.171288][T29070] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.8963: corrupted inode contents [ 551.184646][T29070] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.8963: mark_inode_dirty error [ 551.211980][T29070] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.8963: mark inode dirty (error -117) [ 551.227653][T29070] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 551.241296][T29070] EXT4-fs (loop5): 1 orphan inode deleted [ 551.251290][T29070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.540520][ T29] kauditd_printk_skb: 895 callbacks suppressed [ 551.540570][ T29] audit: type=1326 audit(2326.887:124402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29069 comm="syz.5.8963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed719865e7 code=0x7ffc0000 [ 551.578209][ T29] audit: type=1400 audit(2326.887:124403): avc: denied { create } for pid=29098 comm="syz.6.8970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 551.597608][ T29] audit: type=1326 audit(2326.887:124404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.620925][ T29] audit: type=1326 audit(2326.887:124405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.644079][ T29] audit: type=1326 audit(2326.887:124406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.667245][ T29] audit: type=1326 audit(2326.887:124407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.690452][ T29] audit: type=1326 audit(2326.887:124408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.713603][ T29] audit: type=1326 audit(2326.887:124409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.736776][ T29] audit: type=1326 audit(2326.887:124410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.759972][ T29] audit: type=1326 audit(2326.887:124411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.6.8970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1c48e6f749 code=0x7ffc0000 [ 551.809830][T23404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.328892][T29122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29122 comm=syz.4.8977 [ 552.329177][T29122] all: renamed from lo [ 552.863370][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8987'. [ 552.906087][T29153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8988'. [ 552.931661][T29153] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 553.024097][T29165] netlink: 'syz.5.8994': attribute type 1 has an invalid length. [ 553.032008][T29165] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8994'. [ 553.102063][T29167] loop2: detected capacity change from 0 to 512 [ 553.109493][T29167] EXT4-fs: Ignoring removed bh option [ 553.139724][T29164] loop4: detected capacity change from 0 to 512 [ 553.154011][T29167] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 553.163126][T29167] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 553.180568][T29167] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 553.190290][T29167] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 553.201552][T29167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.217511][T29164] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.8993: EA inode hash validation failed [ 553.230936][T29167] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 553.232713][T29164] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.8993: corrupted inode contents [ 553.252489][T29164] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.8993: mark_inode_dirty error [ 553.265185][T29164] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.8993: corrupted inode contents [ 553.278688][T29164] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.8993: mark_inode_dirty error [ 553.295006][T29164] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.8993: mark inode dirty (error -117) [ 553.308770][T29164] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 553.320056][T29164] EXT4-fs (loop4): 1 orphan inode deleted [ 553.350159][T29164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.363224][T20992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.607691][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.706876][T29186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29186 comm=syz.2.8999 [ 553.720232][T29186] all: renamed from lo [ 553.737237][T29184] loop4: detected capacity change from 0 to 512 [ 553.764245][T29184] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.8998: EA inode hash validation failed [ 553.780176][T29184] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.8998: corrupted inode contents [ 553.797791][T29184] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.8998: mark_inode_dirty error [ 553.811185][T29184] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.8998: corrupted inode contents [ 553.825426][T29184] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.8998: mark_inode_dirty error [ 553.855928][T29184] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.8998: mark inode dirty (error -117) [ 553.898550][T29184] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 553.909736][T29184] EXT4-fs (loop4): 1 orphan inode deleted [ 553.919103][T29184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.073479][T29198] loop5: detected capacity change from 0 to 128 [ 554.086170][T29198] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 554.094019][T29198] FAT-fs (loop5): Filesystem has been set read-only [ 554.101599][T29198] bio_check_eod: 68758 callbacks suppressed [ 554.101614][T29198] syz.5.9001: attempt to access beyond end of device [ 554.101614][T29198] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 554.126540][T29198] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 554.134395][T29198] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 554.144806][T29198] syz.5.9001: attempt to access beyond end of device [ 554.144806][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.161519][T29198] syz.5.9001: attempt to access beyond end of device [ 554.161519][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.177377][T29198] syz.5.9001: attempt to access beyond end of device [ 554.177377][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.192983][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.196854][T29198] syz.5.9001: attempt to access beyond end of device [ 554.196854][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.219679][T29191] lo speed is unknown, defaulting to 1000 [ 554.226779][T29198] syz.5.9001: attempt to access beyond end of device [ 554.226779][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.240416][T29198] syz.5.9001: attempt to access beyond end of device [ 554.240416][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.257317][T29198] syz.5.9001: attempt to access beyond end of device [ 554.257317][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.273453][T29198] syz.5.9001: attempt to access beyond end of device [ 554.273453][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.287242][T29198] syz.5.9001: attempt to access beyond end of device [ 554.287242][T29198] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 554.308908][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.319978][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.366896][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.387119][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.426711][T29209] sch_fq: defrate 7 ignored. [ 554.441222][T29209] loop4: detected capacity change from 0 to 1024 [ 554.448883][T29209] EXT4-fs: Ignoring removed orlov option [ 554.454536][T29209] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.464761][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.509353][T29191] chnl_net:caif_netlink_parms(): no params data found [ 554.518664][T29209] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c118, mo2=0002] [ 554.527166][T29209] System zones: 0-1, 3-12 [ 554.535382][T29209] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.599236][T29209] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 16: comm syz.4.9004: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 554.696520][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.707047][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.717032][ T53] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 554.727958][ T53] bond0 (unregistering): Released all slaves [ 554.736412][T29191] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.743520][T29191] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.750744][T29191] bridge_slave_0: entered allmulticast mode [ 554.757375][T29191] bridge_slave_0: entered promiscuous mode [ 554.766666][T29191] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.773737][T29191] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.783194][T29191] bridge_slave_1: entered allmulticast mode [ 554.789653][T29191] bridge_slave_1: entered promiscuous mode [ 554.795977][ T53] tipc: Left network mode [ 554.827541][T29191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.850702][ T53] hsr_slave_0: left promiscuous mode [ 554.857774][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 554.867293][ T53] hsr_slave_1: left promiscuous mode [ 554.873027][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.880459][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.888190][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.895625][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.914340][ T53] veth1_macvtap: left promiscuous mode [ 554.920227][ T53] veth0_macvtap: left promiscuous mode [ 554.925791][ T53] veth1_vlan: left promiscuous mode [ 554.931091][ T53] veth0_vlan: left promiscuous mode [ 554.988981][T29221] netlink: 'syz.5.9006': attribute type 1 has an invalid length. [ 554.996893][T29221] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9006'. [ 555.013747][ T53] pim6reg (unregistering): left allmulticast mode [ 555.052692][T29223] loop5: detected capacity change from 0 to 512 [ 555.061326][T29223] EXT4-fs: Ignoring removed bh option [ 555.067735][T29223] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 555.076845][T29223] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 555.088002][T29223] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 555.098417][T29223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 555.108175][T29223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.122719][T29191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.132072][T29223] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 555.153432][T23404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.171171][T29191] team0: Port device team_slave_0 added [ 555.177945][T29191] team0: Port device team_slave_1 added [ 555.193754][T29191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.200749][T29191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.226682][T29191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.241714][T29191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.248711][T29191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.274787][T29191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.309439][T29230] lo speed is unknown, defaulting to 1000 [ 555.385492][T29191] hsr_slave_0: entered promiscuous mode [ 555.391842][T29191] hsr_slave_1: entered promiscuous mode [ 555.423153][T29232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.761125][T29191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.778607][T29191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.798250][T29191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.829702][T29191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.880128][T29236] loop5: detected capacity change from 0 to 512 [ 556.001075][T29191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.019314][T29191] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.033525][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.040708][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.060718][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.062304][T29236] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.9009: EA inode hash validation failed [ 556.067823][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.151436][T29236] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9009: corrupted inode contents [ 556.167227][T29236] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.9009: mark_inode_dirty error [ 556.198580][T29236] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9009: corrupted inode contents [ 556.259498][T29236] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.9009: mark_inode_dirty error [ 556.279574][T29191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.310463][T29236] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.9009: mark inode dirty (error -117) [ 556.342186][T29236] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 556.371671][T29236] EXT4-fs (loop5): 1 orphan inode deleted [ 556.393581][T29236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.454475][T29264] loop4: detected capacity change from 0 to 128 [ 556.489608][T29264] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 556.489956][T29191] veth0_vlan: entered promiscuous mode [ 556.497686][T29264] FAT-fs (loop4): Filesystem has been set read-only [ 556.515201][T29264] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 556.523138][T29264] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 556.530212][T29191] veth1_vlan: entered promiscuous mode [ 556.536540][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 556.536858][T12911] Bluetooth: hci0: command 0x1003 tx timeout [ 556.581053][T29191] veth0_macvtap: entered promiscuous mode [ 556.610411][T29191] veth1_macvtap: entered promiscuous mode [ 556.735811][T29269] 9pnet_fd: Insufficient options for proto=fd [ 556.755693][T29191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.769276][T29191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.816020][ T957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.826144][ T957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.859292][ T957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.883539][ T957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.906627][ T29] kauditd_printk_skb: 1261 callbacks suppressed [ 556.906657][ T29] audit: type=1400 audit(2331.882:125673): avc: denied { mounton } for pid=29191 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 556.935591][ T29] audit: type=1400 audit(2331.882:125674): avc: denied { mount } for pid=29191 comm="syz-executor" name="/" dev="gadgetfs" ino=3838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 556.957912][ T29] audit: type=1400 audit(2331.882:125675): avc: denied { mounton } for pid=29191 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 556.980556][ T29] audit: type=1400 audit(2331.882:125676): avc: denied { module_request } for pid=29191 comm="syz-executor" kmod="fs-binder" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 557.002417][ T29] audit: type=1326 audit(2331.901:125677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.5.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed719865e7 code=0x7ffc0000 [ 557.025525][ T29] audit: type=1326 audit(2331.901:125678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.5.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed7192b829 code=0x7ffc0000 [ 557.048733][ T29] audit: type=1326 audit(2331.901:125679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.5.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed719865e7 code=0x7ffc0000 [ 557.071892][ T29] audit: type=1326 audit(2331.901:125680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.5.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed7192b829 code=0x7ffc0000 [ 557.094970][ T29] audit: type=1400 audit(2331.929:125682): avc: denied { map_read map_write } for pid=29273 comm="syz.6.9017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 557.114548][ T29] audit: type=1326 audit(2331.901:125681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.5.9009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7198f749 code=0x7ffc0000 [ 557.160632][T29278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9000'. [ 557.229403][T23404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.441831][T29287] loop1: detected capacity change from 0 to 512 [ 557.459787][T29287] EXT4-fs: Ignoring removed bh option [ 557.477017][T29287] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 557.486098][T29287] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 557.563875][T29287] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 557.573417][T29287] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 557.590483][T29287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.608235][T29287] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 557.629300][T29191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.793650][T29314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29314 comm=syz.6.9026 [ 557.898209][T29318] all: renamed from lo (while UP) [ 558.121942][T29322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.176975][T29322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.633078][T29324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.681164][T29324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.803899][T29332] loop1: detected capacity change from 0 to 128 [ 558.823192][T29332] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 558.831121][T29332] FAT-fs (loop1): Filesystem has been set read-only [ 558.868059][T29332] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 558.875953][T29332] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 559.384295][ T9506] Bluetooth: hci0: Frame reassembly failed (-84) [ 559.450190][T29332] bio_check_eod: 44421 callbacks suppressed [ 559.450208][T29332] syz.1.9033: attempt to access beyond end of device [ 559.450208][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.469642][T29332] syz.1.9033: attempt to access beyond end of device [ 559.469642][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.483500][T29332] syz.1.9033: attempt to access beyond end of device [ 559.483500][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.497220][T29332] syz.1.9033: attempt to access beyond end of device [ 559.497220][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.510934][T29332] syz.1.9033: attempt to access beyond end of device [ 559.510934][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.524278][T29332] syz.1.9033: attempt to access beyond end of device [ 559.524278][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.537638][T29332] syz.1.9033: attempt to access beyond end of device [ 559.537638][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.551997][T29332] syz.1.9033: attempt to access beyond end of device [ 559.551997][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.566044][T29332] syz.1.9033: attempt to access beyond end of device [ 559.566044][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 559.608604][T29332] syz.1.9033: attempt to access beyond end of device [ 559.608604][T29332] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 560.089038][T29357] netlink: 'syz.1.9041': attribute type 5 has an invalid length. [ 560.122327][T29357] batman_adv: batadv0: Adding interface: vxlan0 [ 560.128681][T29357] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.190233][T29357] batman_adv: batadv0: Interface activated: vxlan0 [ 560.208133][ T957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.219319][ T957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.237524][T29357] loop1: detected capacity change from 0 to 512 [ 560.256489][ T957] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.257455][T29357] EXT4-fs: test_dummy_encryption option not supported [ 560.294359][ T957] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.379111][T29360] netlink: 27764 bytes leftover after parsing attributes in process `syz.1.9042'. [ 560.463426][T29362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.482693][T29362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.889335][T29374] FAULT_INJECTION: forcing a failure. [ 560.889335][T29374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.902492][T29374] CPU: 1 UID: 0 PID: 29374 Comm: syz.5.9044 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 560.902525][T29374] Tainted: [W]=WARN [ 560.902532][T29374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.902544][T29374] Call Trace: [ 560.902572][T29374] [ 560.902582][T29374] __dump_stack+0x1d/0x30 [ 560.902612][T29374] dump_stack_lvl+0xe8/0x140 [ 560.902674][T29374] dump_stack+0x15/0x1b [ 560.902695][T29374] should_fail_ex+0x265/0x280 [ 560.902737][T29374] should_fail+0xb/0x20 [ 560.902815][T29374] should_fail_usercopy+0x1a/0x20 [ 560.902839][T29374] _copy_from_user+0x1c/0xb0 [ 560.902906][T29374] do_ipv6_setsockopt+0x124/0x2160 [ 560.902941][T29374] ? avc_has_perm_noaudit+0x27/0x130 [ 560.902977][T29374] ? avc_has_perm_noaudit+0xab/0x130 [ 560.903066][T29374] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 560.903094][T29374] ipv6_setsockopt+0x59/0x130 [ 560.903144][T29374] udpv6_setsockopt+0x99/0xb0 [ 560.903172][T29374] sock_common_setsockopt+0x69/0x80 [ 560.903228][T29374] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 560.903350][T29374] __sys_setsockopt+0x184/0x200 [ 560.903374][T29374] __x64_sys_setsockopt+0x64/0x80 [ 560.903394][T29374] x64_sys_call+0x21d5/0x3000 [ 560.903475][T29374] do_syscall_64+0xd8/0x2a0 [ 560.903511][T29374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.903559][T29374] RIP: 0033:0x7fed7198f749 [ 560.903573][T29374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.903591][T29374] RSP: 002b:00007fed703b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 560.903660][T29374] RAX: ffffffffffffffda RBX: 00007fed71be6180 RCX: 00007fed7198f749 [ 560.903675][T29374] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000005 [ 560.903692][T29374] RBP: 00007fed703b5090 R08: 0000000000000108 R09: 0000000000000000 [ 560.903719][T29374] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 560.903734][T29374] R13: 00007fed71be6218 R14: 00007fed71be6180 R15: 00007ffd6ab92538 [ 560.903823][T29374] [ 561.259514][T29376] loop4: detected capacity change from 0 to 512 [ 561.267702][T29376] EXT4-fs: Ignoring removed bh option [ 561.276095][T29376] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 561.285187][T29376] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 561.297518][T29376] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 561.309009][T29376] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 561.319772][T29376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.349579][T29376] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 561.372555][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.509497][T29390] netlink: 27764 bytes leftover after parsing attributes in process `syz.6.9051'. [ 561.570560][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 561.894355][T29407] lo speed is unknown, defaulting to 1000 [ 562.366156][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 562.366171][ T29] audit: type=1400 audit(2337.008:126529): avc: denied { read write } for pid=20636 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 562.396451][ T29] audit: type=1400 audit(2337.008:126530): avc: denied { read write open } for pid=20636 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 562.421364][ T29] audit: type=1400 audit(2337.008:126531): avc: denied { ioctl } for pid=20636 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 562.596857][ T29] audit: type=1400 audit(2337.046:126532): avc: denied { create } for pid=29410 comm="syz.4.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.617336][ T29] audit: type=1400 audit(2337.055:126533): avc: denied { allowed } for pid=29410 comm="syz.4.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 562.636490][ T29] audit: type=1400 audit(2337.055:126534): avc: denied { create } for pid=29410 comm="syz.4.9056" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 562.657583][ T29] audit: type=1400 audit(2337.055:126535): avc: denied { map } for pid=29410 comm="syz.4.9056" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=100426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 562.681833][ T29] audit: type=1400 audit(2337.055:126536): avc: denied { read write } for pid=29410 comm="syz.4.9056" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=100426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 562.706616][ T29] audit: type=1400 audit(2337.064:126537): avc: denied { prog_load } for pid=29410 comm="syz.4.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 562.725511][ T29] audit: type=1400 audit(2337.064:126538): avc: denied { bpf } for pid=29410 comm="syz.4.9056" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 562.865666][T29419] siw: device registration error -23 [ 563.251014][ T9506] Bluetooth: hci0: Frame reassembly failed (-84) [ 563.267880][T29425] Bluetooth: hci0: Frame reassembly failed (-84) [ 563.466176][T29430] loop4: detected capacity change from 0 to 512 [ 563.484063][T29430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.503424][T29430] SELinux: Context is not valid (left unmapped). [ 563.612895][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.726040][T29440] loop4: detected capacity change from 0 to 128 [ 563.992123][T15771] Bluetooth: hci1: Frame reassembly failed (-84) [ 564.943774][T29462] macvtap1: entered promiscuous mode [ 564.949121][T29462] macvtap1: entered allmulticast mode [ 565.072385][T29474] tap0: tun_chr_ioctl cmd 1074025675 [ 565.077850][T29474] tap0: persist enabled [ 565.082292][T29474] tap0: tun_chr_ioctl cmd 1074025675 [ 565.087688][T29474] tap0: persist enabled [ 565.273944][T29484] sch_tbf: burst 3298 is lower than device lo mtu (32783) ! [ 565.415596][ T3653] Bluetooth: hci0: command 0x1003 tx timeout [ 565.415631][T12911] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 565.708027][T29498] loop1: detected capacity change from 0 to 512 [ 565.735251][T29498] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.9084: EA inode hash validation failed [ 565.748712][T29498] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9084: corrupted inode contents [ 565.761249][T29498] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.9084: mark_inode_dirty error [ 565.773459][T29498] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9084: corrupted inode contents [ 565.785947][T29498] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.9084: mark_inode_dirty error [ 565.798774][T29498] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.9084: mark inode dirty (error -117) [ 565.811851][T29498] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 565.821334][T29498] EXT4-fs (loop1): 1 orphan inode deleted [ 565.829720][T29498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.185822][T12911] Bluetooth: hci1: command 0x1003 tx timeout [ 566.217383][ T3890] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 566.242449][T29505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.242569][T29505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.261230][T29191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.350066][T29511] netlink: 'syz.1.9088': attribute type 1 has an invalid length. [ 566.350083][T29511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9088'. [ 566.524579][T29519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 566.893158][T29534] FAULT_INJECTION: forcing a failure. [ 566.893158][T29534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.893228][T29534] CPU: 0 UID: 0 PID: 29534 Comm: syz.2.9097 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 566.893270][T29534] Tainted: [W]=WARN [ 566.893279][T29534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.893296][T29534] Call Trace: [ 566.893305][T29534] [ 566.893315][T29534] __dump_stack+0x1d/0x30 [ 566.893385][T29534] dump_stack_lvl+0xe8/0x140 [ 566.893411][T29534] dump_stack+0x15/0x1b [ 566.893434][T29534] should_fail_ex+0x265/0x280 [ 566.893509][T29534] should_fail+0xb/0x20 [ 566.893544][T29534] should_fail_usercopy+0x1a/0x20 [ 566.893564][T29534] _copy_to_user+0x20/0xa0 [ 566.893633][T29534] simple_read_from_buffer+0xb5/0x130 [ 566.893676][T29534] proc_fail_nth_read+0x10e/0x150 [ 566.893712][T29534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.893736][T29534] vfs_read+0x1a8/0x770 [ 566.893790][T29534] ? __rcu_read_unlock+0x4f/0x70 [ 566.893814][T29534] ? __fget_files+0x184/0x1c0 [ 566.893833][T29534] ? mutex_lock+0x58/0x90 [ 566.893861][T29534] ksys_read+0xda/0x1a0 [ 566.893970][T29534] __x64_sys_read+0x40/0x50 [ 566.894001][T29534] x64_sys_call+0x2889/0x3000 [ 566.894025][T29534] do_syscall_64+0xd8/0x2a0 [ 566.894071][T29534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.894095][T29534] RIP: 0033:0x7f4c8f57e15c [ 566.894110][T29534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 566.894128][T29534] RSP: 002b:00007f4c8dfe7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.894150][T29534] RAX: ffffffffffffffda RBX: 00007f4c8f7d5fa0 RCX: 00007f4c8f57e15c [ 566.894166][T29534] RDX: 000000000000000f RSI: 00007f4c8dfe70a0 RDI: 0000000000000004 [ 566.894233][T29534] RBP: 00007f4c8dfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.894333][T29534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.894349][T29534] R13: 00007f4c8f7d6038 R14: 00007f4c8f7d5fa0 R15: 00007ffd9d6cd808 [ 566.894373][T29534] [ 566.949139][T29526] netlink: 27756 bytes leftover after parsing attributes in process `syz.1.9095'. [ 567.235404][T29546] netlink: 'syz.2.9100': attribute type 1 has an invalid length. [ 567.243315][T29546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9100'. [ 567.610029][T29553] lo speed is unknown, defaulting to 1000 [ 567.760426][ T29] kauditd_printk_skb: 1139 callbacks suppressed [ 567.760441][ T29] audit: type=1400 audit(2598.059:127678): avc: denied { read write } for pid=20636 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 567.791013][ T29] audit: type=1400 audit(2598.059:127679): avc: denied { open } for pid=20636 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 567.826087][ T29] audit: type=1400 audit(2598.106:127680): avc: denied { prog_load } for pid=29567 comm="syz.6.9107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.844996][ T29] audit: type=1400 audit(2598.106:127681): avc: denied { bpf } for pid=29567 comm="syz.6.9107" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 567.865283][ T29] audit: type=1400 audit(2598.106:127682): avc: denied { perfmon } for pid=29567 comm="syz.6.9107" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 567.885932][ T29] audit: type=1400 audit(2598.115:127683): avc: denied { ioctl } for pid=20636 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 567.911270][ T29] audit: type=1400 audit(2598.115:127684): avc: denied { module_request } for pid=29553 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 567.921295][T29553] chnl_net:caif_netlink_parms(): no params data found [ 567.933937][ T29] audit: type=1400 audit(2598.162:127685): avc: denied { create } for pid=29571 comm="syz.4.9108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 567.998639][ T29] audit: type=1400 audit(2598.265:127686): avc: denied { bind } for pid=29571 comm="syz.4.9108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 568.017820][ T29] audit: type=1400 audit(2598.265:127687): avc: denied { create } for pid=29571 comm="syz.4.9108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 568.046231][ T9506] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 568.054495][ T9506] bridge0 (unregistering): left promiscuous mode [ 568.154643][ T9506] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.165536][ T9506] bond_slave_0: left promiscuous mode [ 568.172031][ T9506] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.181073][ T9506] bond_slave_1: left promiscuous mode [ 568.187475][ T9506] $Hÿ (unregistering): Released all slaves [ 568.196920][ T9506] bond0 (unregistering): Released all slaves [ 568.279405][ T9506] hsr_slave_0: left promiscuous mode [ 568.285299][ T9506] hsr_slave_1: left promiscuous mode [ 568.291061][ T9506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.300926][ T9506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.319059][ T9506] pim6reg (unregistering): left allmulticast mode [ 568.384504][T29553] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.391622][T29553] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.400133][T29553] bridge_slave_0: entered allmulticast mode [ 568.406614][T29553] bridge_slave_0: entered promiscuous mode [ 568.443513][T29553] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.450579][T29553] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.458057][T29553] bridge_slave_1: entered allmulticast mode [ 568.465679][T29553] bridge_slave_1: entered promiscuous mode [ 568.486545][T29553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.497364][T29553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.524817][T29553] team0: Port device team_slave_0 added [ 568.533877][T29553] team0: Port device team_slave_1 added [ 568.553671][T29553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.560749][T29553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.586690][T29553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.621609][T29553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.628618][T29553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.654834][T29553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.717833][T29553] hsr_slave_0: entered promiscuous mode [ 568.724214][T29553] hsr_slave_1: entered promiscuous mode [ 568.730317][T29553] debugfs: 'hsr0' already exists in 'hsr' [ 568.736060][T29553] Cannot create hsr debugfs directory [ 569.233653][T29553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 569.274125][T29553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 569.300414][T29553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 569.330113][T29553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 569.404690][T29553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.439691][T29553] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.450781][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.457899][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.475621][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.482771][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.505207][T29553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.515599][T29553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.670082][T29553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.830224][T29553] veth0_vlan: entered promiscuous mode [ 569.836462][T29617] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 569.850904][T29617] team0: No ports can be present during mode change [ 569.860526][T29553] veth1_vlan: entered promiscuous mode [ 569.886798][T29553] veth0_macvtap: entered promiscuous mode [ 569.908873][T29553] veth1_macvtap: entered promiscuous mode [ 569.925296][T29553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.937726][T29553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.949012][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.962774][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.979717][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.002326][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.836255][ T9506] Bluetooth: hci0: Frame reassembly failed (-84) [ 570.848480][T29640] loop1: detected capacity change from 0 to 512 [ 570.876127][T29640] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.9123: EA inode hash validation failed [ 570.894437][T29640] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9123: corrupted inode contents [ 570.908579][T29640] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.9123: mark_inode_dirty error [ 570.921829][T29640] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9123: corrupted inode contents [ 570.954055][T29640] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.9123: mark_inode_dirty error [ 570.976593][T29640] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.9123: mark inode dirty (error -117) [ 571.015863][T29640] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 571.074119][T29640] EXT4-fs (loop1): 1 orphan inode deleted [ 571.107406][T29640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.310519][T29654] loop4: detected capacity change from 0 to 512 [ 571.434018][T29654] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.9128: EA inode hash validation failed [ 571.484131][T29654] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9128: corrupted inode contents [ 571.503845][T29191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.540018][T29654] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.9128: mark_inode_dirty error [ 571.566130][T29672] random: crng reseeded on system resumption [ 571.577231][T29672] Restarting kernel threads ... [ 571.582314][T29672] Done restarting kernel threads. [ 571.598088][T29654] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9128: corrupted inode contents [ 571.613499][T29654] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.9128: mark_inode_dirty error [ 571.630623][T29654] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.9128: mark inode dirty (error -117) [ 571.656247][T29654] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 571.670149][T29654] EXT4-fs (loop4): 1 orphan inode deleted [ 571.672048][T29671] lo speed is unknown, defaulting to 1000 [ 571.722639][T29654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.728568][T29675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9133'. [ 571.745517][T29675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9133'. [ 571.754447][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9133'. [ 571.849004][T29675] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 571.874363][T29681] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 572.536301][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.917647][T29706] loop4: detected capacity change from 0 to 512 [ 572.983547][T29706] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.9143: EA inode hash validation failed [ 572.998993][T29706] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9143: corrupted inode contents [ 573.016048][T29706] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.9143: mark_inode_dirty error [ 573.020057][T29709] siw: device registration error -23 [ 573.027994][T12911] Bluetooth: hci0: command 0x1003 tx timeout [ 573.037894][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 573.041535][T29706] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9143: corrupted inode contents [ 573.058739][T29706] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.9143: mark_inode_dirty error [ 573.072265][T29706] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.9143: mark inode dirty (error -117) [ 573.088325][T29706] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 573.103075][T29706] EXT4-fs (loop4): 1 orphan inode deleted [ 573.117709][T29706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.133747][ T29] kauditd_printk_skb: 1280 callbacks suppressed [ 573.133764][ T29] audit: type=1400 audit(2859.076:128968): avc: denied { mount } for pid=29705 comm="syz.4.9143" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 573.172754][T29713] loop2: detected capacity change from 0 to 512 [ 573.182949][T29713] EXT4-fs: Ignoring removed bh option [ 573.193664][ T29] audit: type=1326 audit(2859.076:128969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f801b05df90 code=0x7ffc0000 [ 573.216912][ T29] audit: type=1326 audit(2859.076:128970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f801b05df90 code=0x7ffc0000 [ 573.240363][ T29] audit: type=1400 audit(2859.076:128971): avc: denied { read write } for pid=29705 comm="syz.4.9143" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.259139][T29713] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 573.264205][ T29] audit: type=1400 audit(2859.094:128972): avc: denied { open } for pid=29705 comm="syz.4.9143" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.273243][T29713] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 573.305047][ T29] audit: type=1326 audit(2859.094:128973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 573.328216][ T29] audit: type=1326 audit(2859.094:128974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 573.351407][ T29] audit: type=1326 audit(2859.094:128975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 573.374648][ T29] audit: type=1326 audit(2859.094:128976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 573.397812][ T29] audit: type=1326 audit(2859.094:128977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29705 comm="syz.4.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 573.422196][T29713] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 573.433983][T29713] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 573.451910][T29713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.478071][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.493688][T29713] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 573.536280][T29553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.615451][ T7979] usb usb6-port1: attempt power cycle [ 573.775087][T29721] loop2: detected capacity change from 0 to 512 [ 573.868304][T29721] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.9148: EA inode hash validation failed [ 573.882264][T29721] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.9148: corrupted inode contents [ 573.901046][T29721] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.9148: mark_inode_dirty error [ 573.921552][T29721] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.9148: corrupted inode contents [ 573.934677][T29721] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.9148: mark_inode_dirty error [ 573.949408][T29721] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.9148: mark inode dirty (error -117) [ 573.963833][T29721] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 573.974123][T29721] EXT4-fs (loop2): 1 orphan inode deleted [ 574.002721][T29726] lo speed is unknown, defaulting to 1000 [ 574.251030][T29721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.347918][T29730] netlink: 'syz.5.9151': attribute type 1 has an invalid length. [ 574.355820][T29730] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9151'. [ 574.407673][T29732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29732 comm=syz.4.9152 [ 574.684144][T29740] loop5: detected capacity change from 0 to 512 [ 574.716773][T29740] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.9155: EA inode hash validation failed [ 574.735749][T29740] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9155: corrupted inode contents [ 574.759815][T29740] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.9155: mark_inode_dirty error [ 574.794910][T29740] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9155: corrupted inode contents [ 574.809547][T29740] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.9155: mark_inode_dirty error [ 574.833722][T29740] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.9155: mark inode dirty (error -117) [ 574.848806][T29740] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 574.858636][T29740] EXT4-fs (loop5): 1 orphan inode deleted [ 574.869009][T29740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.946942][T29553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.987949][T29750] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9159'. [ 575.065577][ T9499] Bluetooth: hci0: Frame reassembly failed (-84) [ 575.096753][T29750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.111244][T29750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.142072][T29750] ipvlan0: left allmulticast mode [ 575.147433][T29750] veth0_vlan: left allmulticast mode [ 575.171427][T23404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.188283][T29750] bond2: left allmulticast mode [ 575.207325][ T9499] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.216448][ T9499] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.225463][ T9499] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.238034][ T9499] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.316461][T29771] loop2: detected capacity change from 0 to 512 [ 575.324571][T29771] EXT4-fs: Ignoring removed bh option [ 575.339649][T29771] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.348720][T29771] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 575.442107][T29771] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 575.454223][T29771] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 575.467561][T29771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.482280][T29771] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 575.502528][T29553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.557700][T29787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9172'. [ 575.566749][T29787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9172'. [ 575.717756][T29803] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 575.727727][T29803] block device autoloading is deprecated and will be removed. [ 575.756994][T29803] loop5: detected capacity change from 0 to 764 [ 575.779431][T29801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 575.787132][T29803] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 575.903378][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9175'. [ 575.962437][T29807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.978148][ T7979] usb usb6-port1: unable to enumerate USB device [ 575.980544][T29807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.988203][T29672] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.005978][T29672] vhci_hcd: default hub control req: 0007 v0000 i0000 l0 [ 576.096691][T29811] loop2: detected capacity change from 0 to 4096 [ 576.105326][T29815] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9180'. [ 576.110836][T29811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.146665][T29811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.210451][T29553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.368598][T29833] siw: device registration error -23 [ 576.377400][ T1582] Bluetooth: hci1: Frame reassembly failed (-84) [ 576.626180][T29843] loop1: detected capacity change from 0 to 512 [ 576.659058][T29849] loop5: detected capacity change from 0 to 128 [ 576.681790][T29849] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 576.689719][T29849] FAT-fs (loop5): Filesystem has been set read-only [ 576.711512][T29849] bio_check_eod: 509 callbacks suppressed [ 576.711526][T29849] syz.5.9193: attempt to access beyond end of device [ 576.711526][T29849] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 576.752796][T29849] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 576.760720][T29849] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 576.785767][T29849] syz.5.9193: attempt to access beyond end of device [ 576.785767][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.822912][T29849] syz.5.9193: attempt to access beyond end of device [ 576.822912][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.850694][T29843] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.9191: EA inode hash validation failed [ 576.875088][T29849] syz.5.9193: attempt to access beyond end of device [ 576.875088][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.897225][T29843] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9191: corrupted inode contents [ 576.916957][T29849] syz.5.9193: attempt to access beyond end of device [ 576.916957][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.940185][T29843] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.9191: mark_inode_dirty error [ 576.956678][T29849] syz.5.9193: attempt to access beyond end of device [ 576.956678][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.977758][T29843] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9191: corrupted inode contents [ 576.985136][T29849] syz.5.9193: attempt to access beyond end of device [ 576.985136][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.992020][T29843] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.9191: mark_inode_dirty error [ 577.016677][T29843] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.9191: mark inode dirty (error -117) [ 577.030116][T29849] syz.5.9193: attempt to access beyond end of device [ 577.030116][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 577.044125][T29843] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 577.053757][T29843] EXT4-fs (loop1): 1 orphan inode deleted [ 577.059819][T29849] syz.5.9193: attempt to access beyond end of device [ 577.059819][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 577.075528][T29843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.097091][T29849] syz.5.9193: attempt to access beyond end of device [ 577.097091][T29849] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 577.218006][ T3653] Bluetooth: hci0: command 0x1003 tx timeout [ 577.218715][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 577.318027][T29854] lo speed is unknown, defaulting to 1000 [ 577.368407][T29857] __nla_validate_parse: 2 callbacks suppressed [ 577.368424][T29857] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9195'. [ 577.383590][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9195'. [ 577.392461][T29857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9195'. [ 577.550151][T29857] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 577.767673][T29191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.421691][T29880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29880 comm=syz.1.9201 [ 578.500899][ T29] kauditd_printk_skb: 1328 callbacks suppressed [ 578.500915][ T29] audit: type=1400 audit(3376.010:130306): avc: denied { create } for pid=29878 comm="syz.1.9201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 578.527490][ T29] audit: type=1400 audit(3376.047:130307): avc: denied { open } for pid=29878 comm="syz.1.9201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 578.546639][ T29] audit: type=1400 audit(3376.047:130308): avc: denied { perfmon } for pid=29878 comm="syz.1.9201" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.567274][ T29] audit: type=1400 audit(3376.047:130309): avc: denied { kernel } for pid=29878 comm="syz.1.9201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 578.586454][ T29] audit: type=1400 audit(3376.047:130310): avc: denied { perfmon } for pid=29878 comm="syz.1.9201" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.606918][T12911] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 578.607087][ T29] audit: type=1400 audit(3376.047:130311): avc: denied { prog_load } for pid=29878 comm="syz.1.9201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 578.631920][ T29] audit: type=1400 audit(3376.047:130312): avc: denied { bpf } for pid=29878 comm="syz.1.9201" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.652267][ T29] audit: type=1400 audit(3376.047:130313): avc: denied { prog_run } for pid=29878 comm="syz.1.9201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 578.671208][ T29] audit: type=1400 audit(3376.244:130314): avc: denied { read write } for pid=20636 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.695215][ T29] audit: type=1400 audit(3376.244:130315): avc: denied { read write open } for pid=20636 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.862806][T29884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9203'. [ 578.959560][T29886] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 579.288527][T29890] loop1: detected capacity change from 0 to 512 [ 579.361881][T29890] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.9206: EA inode hash validation failed [ 579.379623][T29890] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9206: corrupted inode contents [ 579.469449][T29890] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.9206: mark_inode_dirty error [ 579.535222][T29890] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9206: corrupted inode contents [ 579.556797][T29890] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.9206: mark_inode_dirty error [ 579.576410][T29890] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.9206: mark inode dirty (error -117) [ 579.595434][T29909] loop5: detected capacity change from 0 to 512 [ 579.608891][T29890] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 579.619557][T29890] EXT4-fs (loop1): 1 orphan inode deleted [ 579.631532][T29890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.685140][T29909] EXT4-fs (loop5): too many log groups per flexible block group [ 579.695209][T29909] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 579.704748][T29909] EXT4-fs (loop5): mount failed [ 579.899691][T29191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.903562][T29920] netlink: 'syz.5.9215': attribute type 1 has an invalid length. [ 579.916477][T29920] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9215'. [ 579.965896][T29925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=29925 comm=syz.5.9217 [ 579.977769][T29922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.227340][T29929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9219'. [ 580.500647][T29937] netlink: 'syz.1.9219': attribute type 1 has an invalid length. [ 580.526352][T29937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.551681][T29937] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 580.561166][T29937] bond1: (slave batadv1): making interface the new active one [ 580.570248][T29937] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 580.601417][T29936] loop5: detected capacity change from 0 to 128 [ 581.061594][T29943] loop2: detected capacity change from 0 to 1024 [ 581.165686][T29943] EXT4-fs: inline encryption not supported [ 581.210473][T29936] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 581.218433][T29936] FAT-fs (loop5): Filesystem has been set read-only [ 581.237841][T29936] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 581.245734][T29936] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 581.270228][T29943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.332643][T29959] netlink: 'syz.4.9228': attribute type 1 has an invalid length. [ 581.340430][T29959] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9228'. [ 581.351543][T29553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.411587][T29964] loop2: detected capacity change from 0 to 512 [ 581.419076][T29964] EXT4-fs: Ignoring removed bh option [ 581.425888][T29964] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 581.435007][T29964] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 581.448446][T29964] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 581.462564][T29964] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 581.485081][T29964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.510440][T29964] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 581.563027][T29553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.578039][T29960] loop1: detected capacity change from 0 to 512 [ 581.591544][T29948] Bluetooth: hci0: Frame reassembly failed (-84) [ 581.617762][T29960] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.9227: EA inode hash validation failed [ 581.633316][T29960] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9227: corrupted inode contents [ 581.650183][T29960] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.9227: mark_inode_dirty error [ 581.662627][T29960] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9227: corrupted inode contents [ 581.676297][T29960] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.9227: mark_inode_dirty error [ 581.689958][T29960] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.9227: mark inode dirty (error -117) [ 581.703470][T29960] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 581.715619][T29960] EXT4-fs (loop1): 1 orphan inode deleted [ 581.724687][T29960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.764475][T29974] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9233'. [ 581.774357][T29974] hsr_slave_0: left promiscuous mode [ 581.780188][T29974] hsr_slave_1: left promiscuous mode [ 581.938404][T29976] loop2: detected capacity change from 0 to 764 [ 581.975555][T29976] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 582.010182][T29976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9234'. [ 582.039016][T29985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.142977][T29191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.168323][T29990] netlink: 'syz.2.9240': attribute type 1 has an invalid length. [ 582.173286][T29993] loop4: detected capacity change from 0 to 1024 [ 582.176084][T29990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9240'. [ 582.184471][T29993] EXT4-fs: inline encryption not supported [ 582.228006][T29993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.349295][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.397006][ T9491] Bluetooth: hci1: Frame reassembly failed (-84) [ 582.431188][T30009] loop2: detected capacity change from 0 to 512 [ 582.462631][T30010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.474399][T30010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.484424][T30009] loop2: detected capacity change from 0 to 512 [ 583.079553][T30055] netlink: 'syz.4.9256': attribute type 1 has an invalid length. [ 583.087348][T30055] __nla_validate_parse: 1 callbacks suppressed [ 583.087366][T30055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9256'. [ 583.169991][T30057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=30057 comm=syz.6.9257 [ 583.302958][T30066] EXT4-fs: Ignoring removed bh option [ 583.308773][T30066] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 583.317848][T30066] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 583.329932][T30066] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 583.339297][T30066] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 583.348117][T30066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.362762][T30066] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 583.387375][T20636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.584751][T30071] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.9260: EA inode hash validation failed [ 583.603107][T30071] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9260: corrupted inode contents [ 583.623680][T30020] Bluetooth: hci2: Frame reassembly failed (-84) [ 583.630467][T30071] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.9260: mark_inode_dirty error [ 583.658963][T30071] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9260: corrupted inode contents [ 583.675756][T30071] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.9260: mark_inode_dirty error [ 583.690312][T30071] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.9260: mark inode dirty (error -117) [ 583.705688][T30071] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 583.715310][T30071] EXT4-fs (loop4): 1 orphan inode deleted [ 583.724026][T30071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.803478][T12020] Bluetooth: hci0: command 0x1003 tx timeout [ 583.803485][ T3890] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 583.803570][T12020] ================================================================== [ 583.803615][T12020] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 583.803670][T12020] [ 583.803680][T12020] write to 0xffffffff88e9d070 of 8 bytes by task 3890 on cpu 1: [ 583.803696][T12020] data_alloc+0x259/0x390 [ 583.803730][T12020] prb_reserve+0x964/0xb60 [ 583.803765][T12020] vprintk_store+0x56d/0x860 [ 583.803795][T12020] vprintk_emit+0x15a/0x610 [ 583.803838][T12020] vprintk_default+0x26/0x30 [ 583.803878][T12020] vprintk+0x1d/0x30 [ 583.803904][T12020] _printk+0x79/0xa0 [ 583.803937][T12020] bt_err+0x9d/0xd0 [ 583.803963][T12020] hci_dev_open_sync+0xfa4/0x2290 [ 583.803992][T12020] hci_power_on+0xef/0x390 [ 583.804022][T12020] process_scheduled_works+0x4ce/0x9d0 [ 583.804051][T12020] worker_thread+0x582/0x770 [ 583.804082][T12020] kthread+0x489/0x510 [ 583.804117][T12020] ret_from_fork+0x149/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 583.804150][T12020] ret_from_fork_asm+0x1a/0x30 [ 583.804181][T12020] [ 583.804190][T12020] read to 0xffffffff88e9d070 of 8 bytes by task 12020 on cpu 0: [ 583.804206][T12020] data_push_tail+0x100/0x470 [ 583.804238][T12020] data_alloc+0x11b/0x390 [ 583.804270][T12020] prb_reserve+0x964/0xb60 [ 583.804313][T12020] vprintk_store+0x56d/0x860 [ 583.804347][T12020] vprintk_emit+0x15a/0x610 [ 583.804381][T12020] vprintk_default+0x26/0x30 [ 583.804416][T12020] vprintk+0x1d/0x30 [ 583.804438][T12020] _printk+0x79/0xa0 [ 583.804467][T12020] bt_err+0x9d/0xd0 [ 583.804500][T12020] hci_cmd_timeout+0x97/0x140 [ 583.804535][T12020] process_scheduled_works+0x4ce/0x9d0 [ 583.804562][T12020] worker_thread+0x582/0x770 [ 583.804590][T12020] kthread+0x489/0x510 [ 583.804623][T12020] ret_from_fork+0x149/0x290 [ 583.804652][T12020] ret_from_fork_asm+0x1a/0x30 [ 583.804680][T12020] [ 583.804687][T12020] value changed: 0x0000000100002132 -> 0x0000000100002cb9 [ 583.804701][T12020] [ 583.804707][T12020] Reported by Kernel Concurrency Sanitizer on: [ 583.804724][T12020] CPU: 0 UID: 0 PID: 12020 Comm: kworker/u9:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 583.804753][T12020] Tainted: [W]=WARN [ 583.804761][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.804778][T12020] Workqueue: hci0 hci_cmd_timeout [ 583.804815][T12020] ================================================================== [ 583.825838][T30082] lo speed is unknown, defaulting to 1000 [ 583.859780][ T29] kauditd_printk_skb: 1665 callbacks suppressed [ 583.859798][ T29] audit: type=1326 audit(3893.118:131822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f801b0565e7 code=0x7ffc0000 [ 584.081575][ T29] audit: type=1400 audit(3893.118:131823): avc: denied { write } for pid=3302 comm="syz-executor" path="pipe:[2464]" dev="pipefs" ino=2464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 584.104431][ T29] audit: type=1326 audit(3893.324:131824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801affb829 code=0x7ffc0000 [ 584.127531][ T29] audit: type=1326 audit(3893.324:131825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f801b0565e7 code=0x7ffc0000 [ 584.151103][ T29] audit: type=1326 audit(3893.324:131826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801affb829 code=0x7ffc0000 [ 584.174523][ T29] audit: type=1326 audit(3893.324:131827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 584.197876][ T29] audit: type=1326 audit(3893.324:131828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 584.221017][ T29] audit: type=1326 audit(3893.324:131829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801b05f749 code=0x7ffc0000 [ 584.244377][ T29] audit: type=1326 audit(3893.371:131830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f801b0565e7 code=0x7ffc0000 [ 584.255177][T30070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.267569][ T29] audit: type=1326 audit(3893.371:131831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30070 comm="syz.4.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801affb829 code=0x7ffc0000 [ 584.417964][T30020] bond1 (unregistering): (slave geneve2): Releasing active interface [ 584.431874][T30020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.441478][T30020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.450675][T30020] bond0 (unregistering): Released all slaves [ 584.459546][T30020] bond1 (unregistering): Released all slaves [ 584.468213][T30020] bond2 (unregistering): Released all slaves [ 584.522093][T30020] hsr_slave_0: left promiscuous mode [ 584.527722][T30020] hsr_slave_1: left promiscuous mode [ 584.533443][T30020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.540884][T30020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.573162][T12911] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 584.596124][T30020] team0 (unregistering): Port device team_slave_1 removed [ 584.605936][T30020] team0 (unregistering): Port device team_slave_0 removed [ 584.613569][T29948] smc: removing ib device !yz! [ 584.951453][T30020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.961765][T30020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.003409][T30020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.013721][T30020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.067883][T30020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.078240][T30020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.131832][T30020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.142146][T30020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.219866][T30020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.292507][T30020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.356271][T30020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.431334][T30020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.720089][T30020] bridge_slave_1: left allmulticast mode [ 585.725738][T30020] bridge_slave_1: left promiscuous mode [ 585.731442][T30020] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.739170][T30020] bridge_slave_0: left allmulticast mode [ 585.744808][T30020] bridge_slave_0: left promiscuous mode [ 585.750505][T30020] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.759946][T30020] batman_adv: batadv0: Interface deactivated: vxlan0 [ 585.770556][ T3890] Bluetooth: hci2: command 0x1003 tx timeout [ 585.770682][ T3653] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 585.846585][T30020] batman_adv: batadv0: Removing interface: vxlan0 [ 585.879395][T30020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.889321][T30020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.898703][T30020] bond0 (unregistering): Released all slaves [ 585.907240][T30020] bond1 (unregistering): (slave batadv1): Releasing active interface [ 585.916267][T30020] bond1 (unregistering): Released all slaves [ 585.941095][T30020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.951455][T30020] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 585.960444][T30020] bond0 (unregistering): Released all slaves [ 586.028947][T30020] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 586.037064][T30020] bridge1 (unregistering): left promiscuous mode [ 586.071696][T30020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.081090][T30020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.089927][T30020] bond0 (unregistering): Released all slaves [ 586.098332][T30020] bond1 (unregistering): Released all slaves [ 586.154783][T30020] hsr_slave_0: left promiscuous mode [ 586.160605][T30020] hsr_slave_1: left promiscuous mode [ 586.166391][T30020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.173850][T30020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.181437][T30020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.188868][T30020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.198404][T30020] hsr_slave_0: left promiscuous mode [ 586.203947][T30020] hsr_slave_1: left promiscuous mode [ 586.210268][T30020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.217647][T30020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.225514][T30020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.232972][T30020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.241985][T30020] hsr_slave_0: left promiscuous mode [ 586.247686][T30020] hsr_slave_1: left promiscuous mode [ 586.253363][T30020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.260795][T30020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.273833][T30020] veth1_macvtap: left promiscuous mode [ 586.279307][T30020] veth0_macvtap: left promiscuous mode [ 586.284883][T30020] veth1_vlan: left promiscuous mode [ 586.290183][T30020] veth0_vlan: left promiscuous mode [ 586.295916][T30020] veth1_macvtap: left promiscuous mode [ 586.301531][T30020] veth0_macvtap: left promiscuous mode [ 586.307372][T30020] veth1_vlan: left promiscuous mode [ 586.312661][T30020] veth0_vlan: left promiscuous mode [ 586.418517][T30020] team0 (unregistering): Port device team_slave_1 removed [ 586.428372][T30020] team0 (unregistering): Port device team_slave_0 removed [ 586.570441][T30020] team0 (unregistering): Port device team_slave_1 removed [ 586.580065][T30020] team0 (unregistering): Port device team_slave_0 removed [ 586.611137][ T7979] infiniband syz1: ib_query_port failed (-19) [ 587.484760][T30020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.570380][T30020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.643947][T30020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.729499][T30020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.815189][T30020] bridge_slave_1: left allmulticast mode [ 587.820877][T30020] bridge_slave_1: left promiscuous mode [ 587.826510][T30020] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.834169][T30020] bridge_slave_0: left allmulticast mode [ 587.839839][T30020] bridge_slave_0: left promiscuous mode [ 587.845664][T30020] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.932474][T30020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.942447][T30020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.951915][T30020] bond0 (unregistering): Released all slaves [ 587.997964][T30020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.005448][T30020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.012912][T30020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.020297][T30020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.030507][T30020] veth1_macvtap: left promiscuous mode [ 588.036004][T30020] veth0_macvtap: left promiscuous mode [ 588.041589][T30020] veth1_vlan: left promiscuous mode [ 588.046886][T30020] veth0_vlan: left promiscuous mode [ 588.106531][T30020] team0 (unregistering): Port device team_slave_1 removed [ 588.119521][T30020] team0 (unregistering): Port device team_slave_0 removed [ 590.989817][T30030] bridge_slave_1: left allmulticast mode [ 590.995552][T30030] bridge_slave_1: left promiscuous mode [ 591.001320][T30030] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.008783][T30030] bridge_slave_0: left allmulticast mode [ 591.014570][T30030] bridge_slave_0: left promiscuous mode [ 591.020309][T30030] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.107784][T30030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.117560][T30030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.126969][T30030] bond0 (unregistering): Released all slaves [ 591.135226][T30030] bond1 (unregistering): (slave batadv1): Releasing active interface [ 591.144070][T30030] bond1 (unregistering): Released all slaves [ 591.224997][T30030] tipc: Left network mode [ 591.231736][T30030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.239119][T30030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.246652][T30030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.254006][T30030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.264758][T30030] veth1_macvtap: left promiscuous mode [ 591.270278][T30030] veth0_macvtap: left promiscuous mode [ 591.275912][T30030] veth1_vlan: left promiscuous mode [ 591.281138][T30030] veth0_vlan: left promiscuous mode [ 591.327361][T30030] pim6reg (unregistering): left allmulticast mode