last executing test programs: 8.864156062s ago: executing program 1 (id=463): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0xd5, 0x9, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x8000, 0x70ff, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', r6, 0x8, 0x7, 0x5, 0x5, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @empty, {[@noop, @lsrr={0x83, 0xf, 0xae, [@local, @private=0xa010102, @multicast1]}, @timestamp={0x44, 0x8, 0x43, 0x0, 0xc, [0x7fff]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r8, 0x0, 0x0, 0x140, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 8.292783078s ago: executing program 1 (id=466): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) listen(0xffffffffffffffff, 0x0) munlockall() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff020000000000000000000000000001000400000000"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a019903b1e0b626998500000000010000e000000000000000440c0001ac1414bb4e210000445f0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.244805573s ago: executing program 1 (id=477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)={0x20, r6, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x71ee33ae2e41d682}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240041c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 6.324084677s ago: executing program 1 (id=485): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0002000000b6515083"], 0x30}}, 0x44) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x8}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "ff41f494e367287d75c6f655c736f0a88a86c6bd7f065e6697afb9f64e5cfa30e53da1a80e0aa8224b16998bfbb1d81164d84367edc0071c32"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x826}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x97, 0x8}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x34d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48001}, 0x50) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000640)=r0, 0x4) sendmmsg$inet(r10, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) bind$rds(r0, &(0x7f0000000680)={0x2, 0x4e22, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000540)={@empty, @remote, r8}, 0xc) setreuid(0xee01, 0xee01) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 5.529036562s ago: executing program 1 (id=489): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400f8ff08000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) fchmod(0xffffffffffffffff, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(&(0x7f0000000240)='./file1\x00', 0xee00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.093212297s ago: executing program 1 (id=490): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940), 0x1, 0x7ab, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r2, 0x0) poll(&(0x7f0000000000)=[{r2, 0xa080}], 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x1, 0x80) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x44004) 2.608069299s ago: executing program 0 (id=511): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = gettid() tkill(r4, 0x37) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shmat(0x0, &(0x7f000060c000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xffffffffffffbffd, 0x1) 2.044323064s ago: executing program 3 (id=515): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000001280)={0x3, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f00000000000000dd0a00000020008573013de64995ecd39500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000d5440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000d5640)={0x0, 0x0, "22b7ddc964f42cdeca681ba9aca849715d3be6192724b020bd2808d9f769840eade03a9213098e6ff966c152daeacf97eb0be2d4ff7e39f38d45388df3d9897b0543d00482b90979b85cc3c4e008eda17064aea9d06715ed5681fc27d900b614cf6aa4cc255e5cd5a95810ac34a844da7ecb4536703a6c64d92e1267c848db5cbc24644efee393b2a28cdfae4ff284176ff79927427ea1d1d6293930903d10321841b1fc3aea2b59ad7d044e8f367c99ca414ae6cafb8cd887f138340622ca2b4d9aad0ba4991a4d391a30990c086712fcf17d5454ad313aa26aa76e1555d7318a615b5ee1454232f3acb64b055d78fc2171d759ac00b4e5f2c3fac863b11a57", "c12548c2884609ab0789a58b72b72f8e93f823d34c496d5f1d76c6f866328677959e41ff227db6ca603b79a0c74d2cdd4a6d387ee0fda76b6a4256ea23ab05cdc17a99ce9f1bb26729b3d74a608ab09b8a41b9b21ce5ee0427ea04e4f0c6e9478eed392db3744fca052121c2fdecfcaccc44358eef2e42291c859b8c409b32bee2abf94093a1f139e041562f489bb65d3fdb63f9523405b607b1a6150bec51959b8943b6b1f75de88280e92baa78d099a72ea74c4e10fb3b56179574478b7636d3122b6bcf3685594652ed285955603a2b15f55a3d35d3549f5fd5708145a7b0c1e0b34612ebee41eff0787ba24d51cd5c40aeeddb30c6590333029f16e9b5818b0b5f80f75cf0a8f131412bba92b85ee5dbf6e06069c928dfa9fd0e0cfeed766d7200336089ff7ddbe72645f8dc385cbd3285d5f2bd79d89f4cf7b3ad2b5f3e146888103be76c573f9a7174decc5ac96d6e40ef88d2bf2ef41c9b2e6d18687aff7e6d977c850198b0cf3475412cac026fb29e59eadb7d29c26fa62f70de278fbfd6d2a48756f09404065432784c7d07bd60e4edcdd9da7e2dbacbd2358c6bbbdff8e4ddb2aef7ca970f9f4785709bfa65039e310d33f385c18337fdfb141d9cbe068a7cf6a721a76ffe5c70f313d1ada70d7e8f44fe49ed218f2e4ae47eb9af380ea9a7fdca1581a392e3ece078decff23f81851c3c251ed12c00aa94e3ff4d07466b079a583415e939af9c6958339c4b87973807e89525af13fc6c785440c4037ef543197a996234e8100f0afe7c41ca1ba43bd6ca316d9331bf57cf5937973d0275b7c99f74c4defcc5f3d41f02b9eb141c6e03ffe134bbf1b4c9c15de41ceeb630c936927ec6b79aa70ee59ca6fb732352bae0e9e51e0f77c89aa8c8a442a1b0b1c0d7a0a6de643b106d7c9cbb71fcf754b3a12ec25ad65bf178dd7d193f81572f84087f40033205052c5ce527f6fc98ab01c2a1b21fb59bf48f0e6fb72ae89f3052a65dfdf9a6e34634e9f7c0e9e0f3947aab38d13e2d0b8b9c0b26d2b358a14e12313638292e77bf77e69bdbf98a9c08fbdb02811c3349a7efd9310d7a5836f6337c7a24a79fba58ab23647da67cae93ba1896948a2c7eaef627e08e07af76f2676f8d41dc789d3b55c2d98f6bdaf8d83379edce39c20a599254b2af3d227e61b626c50c215e0cad61a5212793d7ecf051e78ff877f7e19cdcdd8aa18ec44b9414cbf4a8d266fc1c6e5c79bcc9f7e4969032ffba5e6fb4a8b40dd313146e7357b344e067c00635bcc076e02561752686a47e5079452a5cefbd99dcdbd0da85088f9a0e8602f448cfcf44384787adc246b757c7ad351fcd337244c45f27756a2f2787c33963eee91036bcba7227dc86f91a2d2386bf684d13b613118680c0b2981bd09bcdd645813d04e8892d8f133d8e1beb0bb466e4fa49f4045257baf26f79baaad3cd182bd2912d5f752c737df768036670ffe62bd6b853c040003bad062b89613a3e038988eea20af98d36142e063666b87a636ba7e720d37c88c87a839fd5fe8e6e72cca5f73a0a3382a27ca4047ef24be4dd4d5fb64145a46f2eda42f48baa1ca4e1b1a67d06341127ec155c839cfc611a57e6626995c39d3ebf48ed28b00bcc62ef4680c3b3b38915de2f12ae2d7d754efbf2c58d8c1aae786364eade5043f2145742ef4fc3dd9b95c7e4f7f40c8f7c4341f3a812912d2954353ddd8b7c49d58d64cfc7dc190febbfd24bc72510116ce249dab683b9fe60fd14d88e47d0bbd402ebfb78ba9053cf8383781465394a93f5a43136fa1b8202c8afe643c1979b2c0ee66be926a6d92c4854539e713b5c5df282b32062a09d179f1412ae490e606369a6c9710ba14b812ae12f4180d6c233786b0e1525fac9dcace5d76241376c9ee2a8da2b1fcdbbaf761364827e7bd87faaa1bc7495d16b17aedad972d780f817f38398a60adaa5c24bebdd6dfc0c213ea6d160609da5e6c218d66307c4f3293e3e93f421b82c6f520918b82020a29dda0624fa9f12186562c7375c91c9d4f38a96ac079f2732ad41414f4f543bc5df3c6a0c38decb2c4e7e2a5a12780bbf00374fa93e0f166f0aeaf24b1ad36ebd7c0433fd19777ce9ec22ff2d46a27a69f0792de97f9777fa9a24c2723b5f32c52135192c47ea36536c2e9f5d0880a4ff47d195e9ed01063f53c98975722dfb185f49622db49f5b6a6a3953bdbe83c5f8ff95c0e16bc4561e5a0f3e7c9b0cc97732e623d2f3dc281fb2d101ea93c75d51719009bded4c190e83f76cc022667e2c422105c7a3241f231f136a6983dd3d294ea698d6744ea1f447988b2cd141763ef1f7fe1e5a50faca1ba5fef8f108f75e466041305a4f03a79e73f92d05693e2aaca3a2a93adb418ba8f81a839b57f61e300c4dd2caf1d91c4ce70544dc6010bc20d768e40bbee06cd71c6f1c9143dfe6e2841e1cb3b6e4ff3d756b3fb6961508211b8e350ba7a5d90c48a93a3843837a8adff47a7ddd2b2f7301002f40f4d0f8de3e7420af0c2391a81287265d19af76b8358c5b1c96ae14ef01f58354fd8d337c8a128892ff923468a7ffc653fda945ededad31f591b86a552a0c9f84e393d765e2df9b98ef7d557f5823160be2dd854b34d11f4bad6c7bee365479fff901a8e467343bf4e7679c104ca75303e4fd1959510870b0c9caf94f6767bd07f419998641284cf6d7ee3e0be7ad9dda1b50d6a25a9ec79066f2454b46872d3a72dfb991bfcc50457f49cc834a59d09046a1abc98f4c7cd55aa9fd3b1f0c7e061ad3cf9edbad09465fc34534fac2deb7b4e108d3135b008b1699852e22074c898e50012488567e7c505bcac2564cce477b893e465fae8256c3d3152c1560625b59e521549004ee1990f690923a395dc009c9c38375eb7cbfd63fd0d2ea61d77a98df8fb22242c539e7c3fd93195b08fc5fbc8d6acb345198a86f9d1e5bf31a99c2bb264921eac7a9717aa48d55585241ff4c845093cb5e320fe9187941ca5e753da7feba646118098201d8aa8e935dfaa3f949797951213cfa27bb6699c21980fffc5c62bb7ebc0f0c343532a3252641cded182f462294114df5494e496348aaa49282bdc52d91a4b885a5174d311af598c4504a9b7cba9c5f8ecdc4ef0a7c360e73e3ccce56efa1f47ec910a5888f5c4343217637b22258e8540adebf26941f2df2d200d232b55185e0b42b2c1bf95580ec976266b9b0ce7ff7f93ebb83523885a535e2e809e95d974f7c0d4799fcba5277162da162cee0f3ad4278977e15bdd0c6e99beb59f63aa04216ed4206f31b5a7fc113d03ef57b1ee70173ff59129e1167dea9f8003ff83d827be6c8962b5d1d3c45053e9b68a4d4a1eea68e85984612f82bc3c5b37a6b55a1922a0167277825b3603347c07dafb896f0da9f11e75b87d775d48c02e321cf2e8f63656015162a44ea4910ed744dc8778a5f3f42aa09d4a453fa0ee2bb838fa275a271606e2a8729deb78fe4783f113373db6cc63014f640a8b87ed670a204fb9e196b420e603328cd34d43f06b96bedce317763908475ddca629e83a9f947275ff18c5d01af6f04942d9e99c21c44cb2cfbb25a556c343a7e562eb7fe30184c7b44978c1398d9316ec52e65de4307958a9c19c59f178d2216f1dbaba92ea339e13d3a7635ca9fd99afdf7ebe50cd4267139f48e8f826c5ba34a694fbb45d6e9a957bfcda08e2850ae3d577b5603cc53af91472af185433f90d5092cb5f89a653328dfeb45a20fd67ba0ae417350aa26737c8bd8e2c057b46682760cf96472b52a0a36a80e471815414008dd9a8c906d4cea5680fad7d2508e0b34d796e5c86c04e0b89184a95659f5e7c66d14ca6da71bb76cd0d6acd285e44218a7eefa40eadd016fcac1d40d40b92209a0136bc9c06138dc84c30d5c908b88b3914f13eda12071569da45d728d0d10853394f6ef9175a954d407a542f2c15a5a303e7ba1e9e3792ccd50ed30858419d3e8535dbee5106b4f14c2220cbdfe3d1b1e07d2c1d0a53025a922e35bae984da4fd049182ae18a163ce9563bc71da6c2fad3d6aed89519e54eee3106e03be0a031a1e3a3dd02765da120626335e32974640d9ee524960f62a43e444fd596c3238d80da9a6ddddcba7f5a91668f97166faa57c1393c113b5827ff43c3f18c837c16b87184b74282963484620aff6be3a4047d5d80e0c53158182dd17131756cca69c7c6b86b613936551d896a1821cba9b40d86a6bffd11d1f9448fb6032b92b029557a69131c47d13562548ab83144524ecc2e3995823c798f19bed5147d99c7627df178a78005fb400a77902c5881cf240b723986533e60ac3ff8fcf20a9503ed36f4fae15c54f3f5de1472ed93d03ef448a58595dff7bad5d74f64ad9f1d37c22d773c08f011d93b52d97c1251137d14df74bb8e29fa4ff647e0567519f7905f1c98136198404f8aa5a174bed5aecc1014a3686b814bff1eeaadf57a22360fd2484e084dde57abcc95b7167134b47dee107b0e3881a1841ddbf48f002f66952dfb1503904fb084412016098e36331877cb15d01f5cbe8f604d66e705e3316b5974aa22bbd9d9a3f72072157a4ed60f95c9516d0badff27eabf3e86c1d23cbfc0e918390df7b5df601549fb0c6b52f37fcfaca5cbb3bfb26229e3d5eedc31c22bf785350e6437a4792c96d3edf520e740c0da7838f58b8f139a9fed2f8ac4f89070b24cbb41c9fb7e06fd214b363c2f82dceb03a8c1734190032ef87e7fb46a403af5318bb95db00706bd187d662a564cb35c514e10157bb37139f25ce36966b6543e7dd2d8bf479070ac0f729abf9aa446d6a6b1993b1d248988b9cd0062dd5155f091b972364d3b310b79c55e03e7e04f745b1290d0a23deacb7200061f045e3738a5efb297de7d7417cbacb6e25168f4a9fd98ba24ff62822706356ee664ca5b7ee2e285aa6fafc2a0acda2f679568e869dec8cb4c7de23b7057bc3d7263906053bf3ad8587e828c15ce2de831e7079212444a495fedcea3e94b878fd769bbe15463e84e49f446c424d331c280464f897875fa3fbc4fd25aadd8595acf9aaf077945e9723be09cacf4b81efb2488f627176249cd13b33ffdcd005cedf665850d45fe1ff0a2a8b3f49de729b2d203366e649ac3b832ecd9b5ebc196172d8cd44e2c03d1441b65763b01565aeeb29d62289db4c101495b87996d9e0a17aeacd19941c803068d30fb490c664dad3f6715f6db9671a12d1c148aa5b908e295c605678b7d5b247a0c051756ddc3138323d3d2f2c6cfea028e265dca8cd59457417df1181b85e8f9bfa51406e5ebe43af6897db3ea743e84b94a5dc82adf003f39edb6f0a7ad106709039951f18c60bb60841b7e8c30ec6c765a870b25fd847d6fe21c95b283facda10de4a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d6640)={0xaa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}], 0x3, "0a6ddba31adbb2"}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r12, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r12, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a01030000000400000000000000060900"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.977785489s ago: executing program 3 (id=517): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400f8ff08000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180f312b08555fba2b0400000400000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) fchmod(0xffffffffffffffff, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(&(0x7f0000000240)='./file1\x00', 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.952341372s ago: executing program 3 (id=518): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00'}) socket$kcm(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x4004000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000180)=0x1d) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) pselect6(0x40, &(0x7f0000002a00)={0x7, 0x80000001, 0x8, 0xfffffffffffface2, 0x12c, 0xfffffffffffffffa, 0xff, 0x8}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 1.794038355s ago: executing program 2 (id=520): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) listen(0xffffffffffffffff, 0x0) munlockall() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff020000000000000000000000000001000400000000"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a019903b1e0b626998500000000010000e000000000000000440c0001ac1414bb4e210000445f0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.772753826s ago: executing program 0 (id=521): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) clock_adjtime(0x0, &(0x7f0000000880)={0x2, 0x2, 0x2fb3, 0x2, 0x5, 0x6, 0x4, 0x2, 0x3ff, 0x400, 0x5, 0x101, 0x1, 0x90a1, 0x6d08, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x9, 0x9, 0x9, 0x5, 0x4, 0xc3, 0xfffffffffffffffe}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000008000005c0000000000", @ANYRES32, @ANYBLOB="000000cfd90000400000f535fd512101e27d9c5fe61988be5a27107dfeb4b5ea76f2fc8ded59d042864a20757aca7833467e94dffeb26f289806f540974d5c7cb2f4667328320cf6da972e33b58f6d36c785afbc1305", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x128, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x1, 0x5, 0x5129, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x3, 0x1, 0x49, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x0, 0x700, 0x5, 0xd7}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x8, 0x71e, {{0xa, 0x4, 0x2, 0xc, 0x28, 0x47, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x82, 0x11, "aab292578303a0a06afcaf58b444ed"}]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001800000000000009b000000186700000f0000000000009a4ce22a01c8d0594b00f7ffffffcd91e0ff010000"], &(0x7f0000000200)='syzkaller\x00', 0xfffffff8, 0x17, &(0x7f00000002c0)=""/23, 0x41000, 0x40, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x97, 0x5}, 0x10, 0x1181d, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, r4], &(0x7f0000000680)=[{0x3, 0x2, 0x1}], 0x10, 0xa2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="ece63d2b", 0x4, 0xffffffffffffffff) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 1.700501882s ago: executing program 0 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) pwritev2(r2, &(0x7f0000002880)=[{&(0x7f00000027c0)}], 0x1, 0x6, 0x1, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'syz_tun\x00', 0x2c0f}) open_tree(0xffffffffffffffff, 0x0, 0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x544) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='rpcb_register\x00', r6}, 0xf) r7 = socket$inet6(0xa, 0x2, 0x0) getegid() ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x3d, r8}) 1.699633872s ago: executing program 4 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x7) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") 1.617449069s ago: executing program 2 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1a, 0xa8, @random="7bbf7bec864a21f4e5308f8989990ec47ae3beaf9092"}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syncfs(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000002000000000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000200000014000600ff"], 0x50}}, 0x0) 1.422230155s ago: executing program 2 (id=525): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/313], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x412, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r4, 0x40044591, 0x0) read(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r6, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) copy_file_range(r7, 0x0, r0, 0x0, 0xfffffffffffffffa, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2}}}}]}, 0x4c}}, 0x20004000) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000001c0)={r12, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18) 1.420162265s ago: executing program 4 (id=526): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400f8ff08000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180f312b08555fba2b04", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) fchmod(0xffffffffffffffff, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(&(0x7f0000000240)='./file1\x00', 0xee00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.271483077s ago: executing program 2 (id=527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x8051}, 0x4002, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x30040004) pipe2$watch_queue(&(0x7f0000000200), 0x80) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$vsock_stream(0x28, 0x1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) getgid() pidfd_send_signal(r3, 0x80004002, 0x0, 0x0) 1.164324646s ago: executing program 2 (id=528): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0xc, 0x4, 0x0, 'queue0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0xe, 0x7, 0x4, 0x2}, {0x401, 0x10, 0x5, 0x3}, {0x1, 0xd, 0x7, 0x7}]}) fallocate(r5, 0x0, 0x0, 0x5) 1.163498336s ago: executing program 4 (id=529): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400f8ff08000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180f312b08555fba2b0400000400000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) fchmod(0xffffffffffffffff, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(&(0x7f0000000240)='./file1\x00', 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.135203648s ago: executing program 3 (id=530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r6, &(0x7f0000000500)="9a1b889e99121c56d7286cd04ee50d83957484762cc3fc022d7e37befff2e5e53f40ae98c7f849c8b122c2693f9e1f6bb748faf4e9ea6e8582cf80bcaeba301429b18f4c99ed4b1ab44443a270f0afa58a32344e7e2f871469cd5914e594", 0x5e) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000580)={0x6, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000740)=""/72, 0x48}, {&(0x7f00000007c0)=""/108, 0x6c}], &(0x7f00000004c0)=[0x4, 0x400, 0xf0, 0x3, 0x0, 0x9, 0x9, 0x5], 0x3}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000002817fb41000000040000000200000000000008000000000000610000000000"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_cmd={0x14, 0x5, 0x710, 0x0, 0x4, 0x9, 0x3, 0x6, 0x8, 0x6, 0xf, 0x1, 0x1, 0x25, 0x1, 0x0, [0xb, 0xffffffff]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.134410158s ago: executing program 4 (id=531): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x0, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) 771.938047ms ago: executing program 0 (id=532): mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07"], 0x38}, 0x1, 0x0, 0x0, 0x24000084}, 0xc04c4c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r1, 0x101, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0xfffffff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfffffffc]}}], 0x40000018) r6 = dup(r4) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="2a797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r6, &(0x7f0000000180)=""/147, 0xfdef) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='fib6_table_lookup\x00', r8, 0x0, 0x1}, 0x18) 671.039756ms ago: executing program 0 (id=533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100000000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0xe}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x4020940d, &(0x7f0000000480)={0x0, 0x0}) flock(r7, 0x5) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3000091, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRESOCT=r4], 0x0, 0x23e, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) 438.456204ms ago: executing program 0 (id=534): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x8, 0x0, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 292.460716ms ago: executing program 2 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0xb, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x8050) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x1000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x10) rseq(&(0x7f0000000400), 0xfffffffffffffd65, 0xfffffffffffffffe, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x3, 0x3a) 247.678729ms ago: executing program 4 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0xf2, 0x110418, 0x0, 0x8000008, 0x3, 0x7, 0x7, 0x0, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x80, 0x10, 0x6, 0x6, 0x1101, 0x1}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x61, 0x61, 0x5f]}}, &(0x7f00000007c0)=""/93, 0x4e, 0x5d, 0x0, 0x9, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a0001002abd7000ffdbdf25008100000000000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="f9ff60b64d521fe30b7f2b161dc8ffffff"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = gettid() r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) readv(r10, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r7, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 232.284391ms ago: executing program 3 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8a81, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r4 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a0, &(0x7f0000001400)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$inet(r5, 0x0, 0x0, 0x1) 181.531975ms ago: executing program 3 (id=538): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r2, 0x0, 0xd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) unshare(0x2000400) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfa, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000000380)={0x5, &(0x7f0000000840)=[{0x4, 0x1b, &(0x7f00000000c0)="8f26c0ab1d8887fe0d9f06ab09c769f3997cf8b6581b8d082e629c", 0x0, 0x1}, {0x8001, 0xda, &(0x7f0000000480)="8308094112d43aa30d041d090ff41e2161ae03e430e8716e30c614b872d7ef32027007b6c63babfc5dd358000fbf69fb0ee274752b8f3f14c9db9c37faf3747c151e09c3d645fe14c440aad71d4586b5a4c17ea381ce61e9b3cc187d36a424cbcb8551a6f6f3f622a9aa8a39147f7320d5456a399854a87a2bb84e4de11c091cbab252331c77e287c4c1c421319f2dd0a3192e29084429c0166da5b796404ee3583d22c5ddca61efb1be043c4b1843c70b396d550e09f9e9c70b7ceee4853cf653568bfdbb7c29ede17466c2322c10f56f65b1ae18f1b1840ee2", 0x1, 0x339ede0bd783f0a2}, {0x5, 0x72, &(0x7f0000000240)="496751f661cab937d3390e131391aad75db5c386c0ec78ff511d64d6384d91953afe2c9a2362d2a07548827f49eaac20daf7ae6cfcbe49176a47c879bcadc7328281b26a6b16b0ef8b32609508dcde6a1e205fa2506c89b0066c03080024b47858241b2df7c323877a2740491bc8644cf847", 0x1}, {0xb, 0xcd, &(0x7f0000000740)="30c64174b196305428f236303758040edaf6b62988e23a0828e6e23bb8fe9f31b8d6a0f4fcfdd4e463d132685e205a1fb92de360ab4b9c7b3472168c6ceff09537c2cafb2c8bd66f55b5920e9767b07ac8f890ed9d9373b35ac24a7d60c5491f521d48acb4b47dfcc393180787e563381763ca76505ba1eebd6ee2b2fa25c32b9bc2a7f6cd877e49e4e2401ff71bfd1ee95ad8354a7a641df4533f3788631be5424acc7ae39b944d80665e0d3cb2c2862aa7c3697da93cb17519c5e26379f584b79b5f5a5303bf0180073066fb", 0x1, 0x1}, {0x6, 0x1d, &(0x7f0000000340)="f03e58c36ca76d7599a5248e64b70309e561c9934bf30c7b955f695a43"}]}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000020c0)={0x0, 0x3ff}, &(0x7f0000002100)=0x8) unshare(0x54040000) 0s ago: executing program 4 (id=539): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180506e30000002bbd7000fddbdf25010016006e2100"], 0x18}}, 0x81) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000200)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0xffffffffffffffff, 0xcb276f128ad24ce5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001403000000006c907800000000000000000420880b00000026f2000000000000dd080088be00000000100000000100000000000000080022eb0000000020008000020000000000000000000000080065580000d100fe44d1274ebf375687820c416190f57cc536fe404e3e941fb28e1d8fc034316ac02b9836f78b4874648301040000bed3755d53016f1f7a3bb468ea1fdd6cf253e4730d0c254ce9e0bda131809d74700753"], 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x606c) kernel console output (not intermixed with test programs): j=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.770594][ T29] audit: type=1326 audit(1755887312.768:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.793873][ T29] audit: type=1326 audit(1755887312.768:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.804190][ T3815] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.817331][ T29] audit: type=1326 audit(1755887312.768:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.833389][ T3815] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.84: inode #2304: comm syz.4.84: iget: illegal inode # [ 37.850919][ T29] audit: type=1326 audit(1755887312.768:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.865170][ T3815] EXT4-fs (loop4): Remounting filesystem read-only [ 37.886925][ T29] audit: type=1326 audit(1755887312.768:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.893422][ T3815] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 37.916763][ T29] audit: type=1326 audit(1755887312.768:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.931950][ T3815] EXT4-fs (loop4): mount failed [ 37.955309][ T29] audit: type=1326 audit(1755887312.768:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 37.987560][ T3818] bond0: (slave bond_slave_1): Releasing backup interface [ 37.999959][ T3818] bond_slave_1 (unregistering): left promiscuous mode [ 38.204952][ T3838] loop0: detected capacity change from 0 to 512 [ 38.283929][ T3840] loop4: detected capacity change from 0 to 1024 [ 38.293549][ T3840] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.364180][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.582860][ T3840] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.591229][ T3840] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.598650][ T3840] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 38.613397][ T3840] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 38.614705][ T3838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.620237][ T3840] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.87: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.634790][ T3838] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.646892][ T3840] EXT4-fs (loop4): 1 orphan inode deleted [ 38.662511][ T3840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.691203][ T3852] capability: warning: `syz.3.92' uses 32-bit capabilities (legacy support in use) [ 38.717834][ T3830] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.87: iget: bad extended attribute block 6 [ 38.810216][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.862916][ T3860] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.870182][ T3860] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.878053][ T3860] bridge0: entered allmulticast mode [ 38.896099][ T3860] bridge_slave_1: left allmulticast mode [ 38.903577][ T3860] bridge_slave_1: left promiscuous mode [ 38.910022][ T3860] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.924848][ T3860] bridge_slave_0: left allmulticast mode [ 38.930866][ T3860] bridge_slave_0: left promiscuous mode [ 38.937316][ T3860] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.964869][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.546951][ T3867] loop3: detected capacity change from 0 to 1024 [ 39.556961][ T3867] EXT4-fs: Ignoring removed bh option [ 39.563058][ T3867] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.578743][ T3867] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.99: inode #2304: comm syz.3.99: iget: illegal inode # [ 39.596221][ T3867] EXT4-fs (loop3): Remounting filesystem read-only [ 39.603115][ T3867] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 39.618572][ T3867] EXT4-fs (loop3): mount failed [ 39.709406][ T3881] loop0: detected capacity change from 0 to 128 [ 39.748722][ T3881] IPv6: Can't replace route, no match found [ 39.896429][ T3901] loop3: detected capacity change from 0 to 512 [ 39.912967][ T3901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.942916][ T3901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 39.958327][ T3901] System zones: 1-12 [ 39.968440][ T3901] EXT4-fs (loop3): 1 truncate cleaned up [ 39.982821][ T3901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.998439][ T3901] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 40.101452][ T3910] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 40.101452][ T3910] The task syz.2.107 (3910) triggered the difference, watch for misbehavior. [ 40.478052][ T3912] loop4: detected capacity change from 0 to 1024 [ 40.487233][ T3912] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.506875][ T3912] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.112: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.521008][ T3912] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.112: Failed to acquire dquot type 0 [ 40.540804][ T3912] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.112: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.554616][ T3912] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.112: Invalid inode bitmap blk 0 in block_group 0 [ 40.567723][ T3912] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 40.577538][ T3912] EXT4-fs (loop4): 1 orphan inode deleted [ 40.584169][ T3912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.591603][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.632558][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 40.663332][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.698838][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.938260][ T3928] loop2: detected capacity change from 0 to 1024 [ 40.947183][ T3928] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.236401][ T3928] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.244654][ T3928] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.251912][ T3928] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.267027][ T3928] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 41.273815][ T3928] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.113: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.287498][ T3928] EXT4-fs (loop2): 1 orphan inode deleted [ 41.293679][ T3928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.336918][ T3921] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.113: iget: bad extended attribute block 6 [ 41.573337][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.165805][ T3951] loop2: detected capacity change from 0 to 512 [ 42.185117][ T3951] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 42.194996][ T3951] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 42.223734][ T3951] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.122: Invalid inode table block 1 in block_group 0 [ 42.362651][ T3951] EXT4-fs (loop2): Remounting filesystem read-only [ 42.369487][ T3951] EXT4-fs (loop2): get root inode failed [ 42.375220][ T3951] EXT4-fs (loop2): mount failed [ 42.443546][ T3949] loop2: detected capacity change from 0 to 512 [ 42.486735][ T3957] loop3: detected capacity change from 0 to 1024 [ 42.498654][ T3957] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.506466][ T3949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.531972][ T3957] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.124: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.541965][ T3949] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.556396][ T3957] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.124: Failed to acquire dquot type 0 [ 42.569547][ T3957] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.124: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.583210][ T3957] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.124: Invalid inode bitmap blk 0 in block_group 0 [ 42.601985][ T3957] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 42.602661][ T2220] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.626741][ T3957] EXT4-fs (loop3): 1 orphan inode deleted [ 42.636996][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.649874][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 42.649900][ T29] audit: type=1326 audit(1755887317.758:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ec4cd550 code=0x7ffc0000 [ 42.678987][ T2220] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 42.688201][ T2220] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 42.690039][ T29] audit: type=1326 audit(1755887317.758:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 42.723092][ T29] audit: type=1326 audit(1755887317.758:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 42.746506][ T29] audit: type=1326 audit(1755887317.758:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 42.770161][ T29] audit: type=1326 audit(1755887317.788:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc3ec4cd937 code=0x7ffc0000 [ 42.793656][ T29] audit: type=1326 audit(1755887317.788:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ec4cd550 code=0x7ffc0000 [ 42.817100][ T29] audit: type=1326 audit(1755887317.788:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ec4cebe9 code=0x7ffc0000 [ 42.840621][ T29] audit: type=1326 audit(1755887317.788:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ec4cebe9 code=0x7ffc0000 [ 42.875635][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.875647][ T29] audit: type=1326 audit(1755887317.808:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 42.925666][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.001661][ T3980] loop2: detected capacity change from 0 to 512 [ 43.022888][ T3980] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 43.043978][ T3980] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 43.078350][ T3980] EXT4-fs (loop2): 1 truncate cleaned up [ 43.102067][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.143616][ T3980] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 4: comm syz.2.129: lblock 0 mapped to illegal pblock 4 (length 1) [ 43.159149][ T3980] EXT4-fs (loop2): Remounting filesystem read-only [ 43.193120][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.225821][ T3974] loop3: detected capacity change from 0 to 128 [ 43.303503][ T3987] netlink: 'syz.4.131': attribute type 7 has an invalid length. [ 43.311405][ T3987] __nla_validate_parse: 2 callbacks suppressed [ 43.311416][ T3987] netlink: 140 bytes leftover after parsing attributes in process `syz.4.131'. [ 43.558496][ T4004] loop3: detected capacity change from 0 to 1024 [ 43.566702][ T4004] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.682483][ T4004] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.690814][ T4004] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.699117][ T4004] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.714059][ T4004] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 43.720942][ T4004] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.130: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.737494][ T4004] EXT4-fs (loop3): 1 orphan inode deleted [ 43.744696][ T4004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.771060][ T4004] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.130: iget: bad extended attribute block 6 [ 44.016313][ T4012] Zero length message leads to an empty skb [ 44.196889][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.247581][ T4018] loop0: detected capacity change from 0 to 2048 [ 44.283259][ T4018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.354354][ T4029] loop3: detected capacity change from 0 to 512 [ 44.364820][ T4029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.394181][ T4029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 44.423396][ T4029] System zones: 1-12 [ 44.429012][ T4029] EXT4-fs (loop3): 1 truncate cleaned up [ 44.665905][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.002464][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.264021][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.586671][ T4062] loop3: detected capacity change from 0 to 512 [ 45.654719][ T4062] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 45.664543][ T4062] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 45.864704][ T4062] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.141: Invalid inode table block 1 in block_group 0 [ 45.882108][ T4062] EXT4-fs (loop3): Remounting filesystem read-only [ 45.888672][ T4062] EXT4-fs (loop3): get root inode failed [ 45.894425][ T4062] EXT4-fs (loop3): mount failed [ 45.961390][ T4066] loop3: detected capacity change from 0 to 512 [ 45.981797][ T4066] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 46.134969][ T4060] loop0: detected capacity change from 0 to 128 [ 46.223215][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 46.307616][ T4079] netlink: 'syz.2.148': attribute type 21 has an invalid length. [ 46.315421][ T4079] netlink: 'syz.2.148': attribute type 4 has an invalid length. [ 46.334115][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 46.363770][ T4079] random: crng reseeded on system resumption [ 46.375785][ T4079] Restarting kernel threads ... [ 46.399787][ T4079] Done restarting kernel threads. [ 46.440321][ T4083] SELinux: Context @ is not valid (left unmapped). [ 46.506703][ T4090] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 46.513464][ T4090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.521086][ T4090] vhci_hcd vhci_hcd.0: Device attached [ 46.559202][ T4090] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 46.565952][ T4090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.573522][ T4090] vhci_hcd vhci_hcd.0: Device attached [ 46.600964][ T4090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 46.800322][ T4093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.866030][ T4102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 46.926898][ T41] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 46.950926][ T4104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.147002][ T3542] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 47.156738][ T4102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.176666][ T4090] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 47.183291][ T4090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.190938][ T4090] vhci_hcd vhci_hcd.0: Device attached [ 47.206196][ T4100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 47.212810][ T4100] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 47.220743][ T4100] vhci_hcd vhci_hcd.0: Device attached [ 47.231212][ T4102] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(31) [ 47.232404][ T4093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.237825][ T4102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.237909][ T4102] vhci_hcd vhci_hcd.0: Device attached [ 47.295159][ T4106] vhci_hcd: connection closed [ 47.295223][ T4107] vhci_hcd: connection closed [ 47.295667][ T4091] vhci_hcd: connection reset by peer [ 47.310442][ T12] vhci_hcd: stop threads [ 47.310594][ T4094] vhci_hcd: connection closed [ 47.314785][ T12] vhci_hcd: release socket [ 47.324214][ T12] vhci_hcd: disconnect device [ 47.334118][ T4109] loop3: detected capacity change from 0 to 512 [ 47.356079][ T4109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.366991][ T12] vhci_hcd: stop threads [ 47.368195][ T4093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.371260][ T12] vhci_hcd: release socket [ 47.386108][ T12] vhci_hcd: disconnect device [ 47.403137][ T12] vhci_hcd: stop threads [ 47.403749][ T4109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 47.407455][ T12] vhci_hcd: release socket [ 47.407469][ T12] vhci_hcd: disconnect device [ 47.422428][ T4109] System zones: 1-12 [ 47.432988][ T12] vhci_hcd: stop threads [ 47.437277][ T12] vhci_hcd: release socket [ 47.441730][ T12] vhci_hcd: disconnect device [ 47.442998][ T4109] EXT4-fs (loop3): 1 truncate cleaned up [ 47.472017][ T4109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.549638][ T4093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.662756][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.692888][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 47.692975][ T29] audit: type=1326 audit(1755887322.798:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.703544][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.722806][ T29] audit: type=1326 audit(1755887322.798:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.785140][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.802353][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.853338][ T29] audit: type=1326 audit(1755887322.948:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.876806][ T29] audit: type=1326 audit(1755887322.948:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.900531][ T29] audit: type=1326 audit(1755887322.958:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.936226][ T29] audit: type=1326 audit(1755887322.958:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.959784][ T29] audit: type=1326 audit(1755887322.958:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 47.965754][ T4111] vhci_hcd: connection closed [ 47.983276][ T29] audit: type=1326 audit(1755887322.978:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 48.015759][ T29] audit: type=1326 audit(1755887322.978:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 48.039472][ T29] audit: type=1326 audit(1755887322.978:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 48.081154][ T12] vhci_hcd: stop threads [ 48.085536][ T12] vhci_hcd: release socket [ 48.090315][ T12] vhci_hcd: disconnect device [ 48.135757][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.184750][ T4132] syzkaller0: entered promiscuous mode [ 48.190390][ T4132] syzkaller0: entered allmulticast mode [ 48.288541][ T4146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'. [ 48.297589][ T4146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'. [ 48.463664][ T4146] loop3: detected capacity change from 0 to 764 [ 48.541313][ T4146] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.620563][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 48.644054][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 48.834870][ T4160] bond_slave_1: entered promiscuous mode [ 48.841008][ T4159] bond_slave_1: left promiscuous mode [ 48.917232][ T4165] C: renamed from team_slave_0 (while UP) [ 49.097996][ T4165] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 49.143968][ T4165] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 49.178691][ T4168] can0: slcan on ttyS3. [ 49.238266][ T4165] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 49.246059][ T4165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.167'. [ 49.271666][ T4169] can0 (unregistered): slcan off ttyS3. [ 49.280164][ T4174] can0: slcan on ttyS3. [ 49.445434][ T4197] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 49.460952][ T4197] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.776300][ T4166] syz.2.165 (4166) used greatest stack depth: 7304 bytes left [ 49.827091][ T4236] loop3: detected capacity change from 0 to 512 [ 49.834749][ T4236] EXT4-fs: Ignoring removed oldalloc option [ 49.856808][ T4236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.869866][ T4236] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.935232][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.991854][ T4170] can0 (unregistered): slcan off ttyS3. [ 50.068065][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 50.244099][ T4282] /dev/sg0: Can't lookup blockdev [ 50.259984][ T4278] loop3: detected capacity change from 0 to 1024 [ 50.297817][ T4278] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.352614][ T4284] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 50.361246][ T4284] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 50.381696][ T4278] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.389626][ T4278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e028, mo2=0000] [ 50.402339][ T4278] System zones: 0-1, 3-12 [ 50.407893][ T4278] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.416688][ T4278] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.177: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.430947][ T4278] EXT4-fs (loop3): Remounting filesystem read-only [ 50.437839][ T4278] EXT4-fs (loop3): 1 orphan inode deleted [ 50.444072][ T4278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.464104][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 50.537032][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.547351][ T4291] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 50.547680][ T3383] IPVS: starting estimator thread 0... [ 50.620050][ T4297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.182'. [ 50.641620][ T4297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.182'. [ 50.666103][ T4293] IPVS: using max 3072 ests per chain, 153600 per kthread [ 50.700371][ T4298] netlink: 'syz.1.181': attribute type 21 has an invalid length. [ 50.708209][ T4298] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 50.751145][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 50.775159][ T4298] random: crng reseeded on system resumption [ 50.788918][ T4298] Restarting kernel threads ... [ 50.802502][ T4298] Done restarting kernel threads. [ 51.066561][ T4316] netlink: 'syz.4.186': attribute type 10 has an invalid length. [ 51.075874][ T4316] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.813617][ T4308] syz.3.183 (4308) used greatest stack depth: 6408 bytes left [ 51.966309][ T4341] loop3: detected capacity change from 0 to 512 [ 51.976635][ T4341] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.987928][ T4341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 51.995987][ T4341] System zones: 1-12 [ 52.018561][ T4341] EXT4-fs (loop3): 1 truncate cleaned up [ 52.026464][ T4341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.166377][ T4341] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 52.327414][ T4351] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 52.355519][ T3411] IPVS: starting estimator thread 0... [ 52.361303][ T4353] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 52.367930][ T4353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.375599][ T4353] vhci_hcd vhci_hcd.0: Device attached [ 52.388159][ T3542] usb 1-1: enqueue for inactive port 0 [ 52.393843][ T3542] usb 1-1: enqueue for inactive port 0 [ 52.399601][ T4352] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 52.406238][ T4352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.413805][ T4352] vhci_hcd vhci_hcd.0: Device attached [ 52.420780][ T4352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.433253][ T4352] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 52.439915][ T4352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.447483][ T4352] vhci_hcd vhci_hcd.0: Device attached [ 52.456682][ T4352] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 52.462152][ T3542] vhci_hcd: vhci_device speed not set [ 52.463295][ T4352] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 52.476648][ T4352] vhci_hcd vhci_hcd.0: Device attached [ 52.482432][ T4357] IPVS: using max 2976 ests per chain, 148800 per kthread [ 52.496612][ T4352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.505811][ T4352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.515113][ T4352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.524819][ T4352] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(29) [ 52.531529][ T4352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.539192][ T4352] vhci_hcd vhci_hcd.0: Device attached [ 52.551460][ T4364] vhci_hcd: connection closed [ 52.551811][ T377] vhci_hcd: stop threads [ 52.552626][ T4360] vhci_hcd: connection closed [ 52.556726][ T377] vhci_hcd: release socket [ 52.556745][ T377] vhci_hcd: disconnect device [ 52.561502][ T4356] vhci_hcd: connection closed [ 52.572519][ T4362] vhci_hcd: connection closed [ 52.575453][ T4355] vhci_hcd: connection closed [ 52.580449][ T377] vhci_hcd: stop threads [ 52.593169][ T377] vhci_hcd: release socket [ 52.597600][ T377] vhci_hcd: disconnect device [ 52.603772][ T377] vhci_hcd: stop threads [ 52.608068][ T377] vhci_hcd: release socket [ 52.612626][ T377] vhci_hcd: disconnect device [ 52.617594][ T377] vhci_hcd: stop threads [ 52.621990][ T377] vhci_hcd: release socket [ 52.626459][ T377] vhci_hcd: disconnect device [ 52.631264][ T377] vhci_hcd: stop threads [ 52.635637][ T377] vhci_hcd: release socket [ 52.640061][ T377] vhci_hcd: disconnect device [ 52.651682][ T3411] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 52.659134][ T3411] usb 3-1: enqueue for inactive port 0 [ 52.664752][ T3411] usb 3-1: enqueue for inactive port 0 [ 52.670512][ T3411] usb 3-1: enqueue for inactive port 0 [ 52.694021][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.743582][ T3411] vhci_hcd: vhci_device speed not set [ 52.781253][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 52.781269][ T29] audit: type=1326 audit(1755887327.878:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.811395][ T29] audit: type=1326 audit(1755887327.898:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.834751][ T29] audit: type=1326 audit(1755887327.898:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.858177][ T29] audit: type=1326 audit(1755887327.898:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.881745][ T29] audit: type=1326 audit(1755887327.898:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.882531][ T4376] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 52.905257][ T29] audit: type=1326 audit(1755887327.898:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.936188][ T29] audit: type=1326 audit(1755887327.898:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.959707][ T29] audit: type=1326 audit(1755887327.898:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 52.983159][ T29] audit: type=1326 audit(1755887327.898:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 53.006675][ T29] audit: type=1326 audit(1755887327.898:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 53.209547][ T4385] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 53.216420][ T4385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.224053][ T4385] vhci_hcd vhci_hcd.0: Device attached [ 53.236817][ T4385] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 53.243486][ T4385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.251010][ T4385] vhci_hcd vhci_hcd.0: Device attached [ 53.278796][ T4391] netlink: 'syz.4.197': attribute type 21 has an invalid length. [ 53.286723][ T4391] netlink: 'syz.4.197': attribute type 4 has an invalid length. [ 53.295046][ T4385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.304807][ T4385] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 53.311578][ T4385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.319259][ T4385] vhci_hcd vhci_hcd.0: Device attached [ 53.319578][ T4391] random: crng reseeded on system resumption [ 53.328146][ T4385] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 53.337662][ T4385] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.345484][ T4385] vhci_hcd vhci_hcd.0: Device attached [ 53.358500][ T4385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.369040][ T4385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.381642][ T4391] Restarting kernel threads ... [ 53.388089][ T4391] Done restarting kernel threads. [ 53.393811][ T4397] /dev/sg0: Can't lookup blockdev [ 53.399690][ T4385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.435155][ T4385] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(29) [ 53.441800][ T4385] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.449513][ T4385] vhci_hcd vhci_hcd.0: Device attached [ 53.479189][ T4398] vhci_hcd: connection closed [ 53.479983][ T4394] vhci_hcd: connection closed [ 53.484844][ T2957] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 53.499361][ T4388] vhci_hcd: connection closed [ 53.499720][ T4386] vhci_hcd: connection closed [ 53.500626][ T4387] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 53.516824][ T4392] vhci_hcd: connection closed [ 53.516955][ T558] vhci_hcd: stop threads [ 53.526059][ T558] vhci_hcd: release socket [ 53.530662][ T558] vhci_hcd: disconnect device [ 53.536129][ T558] vhci_hcd: stop threads [ 53.540407][ T558] vhci_hcd: release socket [ 53.545012][ T558] vhci_hcd: disconnect device [ 53.554798][ T558] vhci_hcd: stop threads [ 53.559071][ T558] vhci_hcd: release socket [ 53.564069][ T558] vhci_hcd: disconnect device [ 53.568944][ T558] vhci_hcd: stop threads [ 53.573260][ T558] vhci_hcd: release socket [ 53.577768][ T558] vhci_hcd: disconnect device [ 53.583517][ T558] vhci_hcd: stop threads [ 53.587965][ T558] vhci_hcd: release socket [ 53.592436][ T558] vhci_hcd: disconnect device [ 53.655547][ T4404] __nla_validate_parse: 2 callbacks suppressed [ 53.655581][ T4404] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 53.670559][ T4404] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 53.803468][ T4407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.864534][ T4407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.934657][ T4407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.005231][ T4407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.079180][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.103513][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.123256][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.131669][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.303362][ T4423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.363367][ T4423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.443534][ T4423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.503211][ T4423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.533170][ T4409] syz.0.204 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 54.544260][ T4409] CPU: 1 UID: 0 PID: 4409 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.544284][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.544293][ T4409] Call Trace: [ 54.544299][ T4409] [ 54.544307][ T4409] __dump_stack+0x1d/0x30 [ 54.544407][ T4409] dump_stack_lvl+0xe8/0x140 [ 54.544426][ T4409] dump_stack+0x15/0x1b [ 54.544440][ T4409] dump_header+0x81/0x220 [ 54.544468][ T4409] oom_kill_process+0x342/0x400 [ 54.544500][ T4409] out_of_memory+0x979/0xb80 [ 54.544630][ T4409] try_charge_memcg+0x5e6/0x9e0 [ 54.544725][ T4409] charge_memcg+0x51/0xc0 [ 54.544742][ T4409] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 54.544762][ T4409] __read_swap_cache_async+0x1df/0x350 [ 54.544789][ T4409] swap_cluster_readahead+0x277/0x3e0 [ 54.544888][ T4409] swapin_readahead+0xde/0x6f0 [ 54.544914][ T4409] ? __filemap_get_folio+0x4f7/0x6b0 [ 54.544945][ T4409] ? swap_cache_get_folio+0x77/0x200 [ 54.545050][ T4409] do_swap_page+0x301/0x2430 [ 54.545073][ T4409] ? css_rstat_updated+0xb7/0x240 [ 54.545101][ T4409] ? __pfx_default_wake_function+0x10/0x10 [ 54.545123][ T4409] handle_mm_fault+0x9a5/0x2c20 [ 54.545150][ T4409] do_user_addr_fault+0x636/0x1090 [ 54.545239][ T4409] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 54.545318][ T4409] exc_page_fault+0x62/0xa0 [ 54.545342][ T4409] asm_exc_page_fault+0x26/0x30 [ 54.545415][ T4409] RIP: 0033:0x7fcd806deb46 [ 54.545429][ T4409] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 54.545486][ T4409] RSP: 002b:00007ffed27bedb0 EFLAGS: 00010246 [ 54.545503][ T4409] RAX: 000000000000d4e1 RBX: 00007fcd80905fa0 RCX: 000000000000d2f0 [ 54.545533][ T4409] RDX: 00000000000001f1 RSI: 0000000000000000 RDI: 00000000000003e8 [ 54.545546][ T4409] RBP: 00007fcd80907da0 R08: 000000001da25416 R09: 7fffffffffffffff [ 54.545558][ T4409] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000d50a [ 54.545568][ T4409] R13: 00007ffed27beed0 R14: ffffffffffffffff R15: 00007ffed27beef0 [ 54.545592][ T4409] [ 54.545599][ T4409] memory: usage 307200kB, limit 307200kB, failcnt 245 [ 54.761615][ T4409] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 54.769520][ T4409] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 54.776917][ T4409] Memory cgroup stats for /syz0: [ 54.778165][ T4409] cache 0 [ 54.786249][ T4409] rss 0 [ 54.788996][ T4409] shmem 0 [ 54.791955][ T4409] mapped_file 0 [ 54.795403][ T4409] dirty 0 [ 54.798375][ T4409] writeback 0 [ 54.801720][ T4409] workingset_refault_anon 15 [ 54.806292][ T4409] workingset_refault_file 385 [ 54.810973][ T4409] swap 528384 [ 54.814334][ T4409] swapcached 4096 [ 54.817960][ T4409] pgpgin 28151 [ 54.821317][ T4409] pgpgout 28150 [ 54.821784][ T2220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.824800][ T4409] pgfault 34203 [ 54.833503][ T2220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.836583][ T4409] pgmajfault 12 [ 54.836591][ T4409] inactive_anon 0 [ 54.836597][ T4409] active_anon 4096 [ 54.836604][ T4409] inactive_file 0 [ 54.846133][ T2220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.848180][ T4409] active_file 0 [ 54.848188][ T4409] unevictable 0 [ 54.848195][ T4409] hierarchical_memory_limit 314572800 [ 54.852077][ T2220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.855536][ T4409] hierarchical_memsw_limit 9223372036854771712 [ 54.855545][ T4409] total_cache 0 [ 54.855552][ T4409] total_rss 0 [ 54.901337][ T4409] total_shmem 0 [ 54.905020][ T4409] total_mapped_file 0 [ 54.909090][ T4409] total_dirty 0 [ 54.912588][ T4409] total_writeback 0 [ 54.915403][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 54.916379][ T4409] total_workingset_refault_anon 15 [ 54.916389][ T4409] total_workingset_refault_file 385 [ 54.916397][ T4409] total_swap 528384 [ 54.939442][ T4409] total_swapcached 4096 [ 54.943628][ T4409] total_pgpgin 28151 [ 54.947587][ T4409] total_pgpgout 28150 [ 54.951570][ T4409] total_pgfault 34203 [ 54.955637][ T4409] total_pgmajfault 12 [ 54.959615][ T4409] total_inactive_anon 0 [ 54.963853][ T4409] total_active_anon 4096 [ 54.968082][ T4409] total_inactive_file 0 [ 54.972244][ T4409] total_active_file 0 [ 54.976209][ T4409] total_unevictable 0 [ 54.980245][ T4409] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.204,pid=4409,uid=0 [ 54.994939][ T4409] Memory cgroup out of memory: Killed process 4409 (syz.0.204) total-vm:95944kB, anon-rss:1072kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 55.159256][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 55.168547][ T4415] syz.0.204 (4415) used greatest stack depth: 6376 bytes left [ 55.197725][ T4438] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 55.201409][ T3397] IPVS: starting estimator thread 0... [ 55.301674][ T4444] IPVS: using max 3072 ests per chain, 153600 per kthread [ 55.348514][ T4453] netlink: 'syz.4.214': attribute type 10 has an invalid length. [ 55.651032][ T4459] C: renamed from team_slave_0 [ 55.666059][ T4459] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 55.673860][ T4459] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 55.705882][ T4458] can0: slcan on ttyS3. [ 55.761725][ T4458] can0 (unregistered): slcan off ttyS3. [ 55.778864][ T4459] can0: slcan on ttyS3. [ 55.799195][ T4458] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 55.806900][ T4458] netlink: 224 bytes leftover after parsing attributes in process `syz.2.215'. [ 55.871958][ T4457] can0 (unregistered): slcan off ttyS3. [ 56.130694][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 57.525393][ T4501] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 57.532127][ T4501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.539899][ T4501] vhci_hcd vhci_hcd.0: Device attached [ 57.548584][ T4501] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 57.555214][ T4501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.562952][ T4501] vhci_hcd vhci_hcd.0: Device attached [ 57.593233][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 57.595994][ T4501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.638412][ T4501] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 57.645084][ T4501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.652700][ T4501] vhci_hcd vhci_hcd.0: Device attached [ 57.660064][ T4501] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 57.664233][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 57.666943][ T4501] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.667071][ T4501] vhci_hcd vhci_hcd.0: Device attached [ 57.668960][ T4501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.706099][ T4501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.714960][ T4501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.732550][ T4507] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 57.732550][ T4507] program syz.0.234 not setting count and/or reply_len properly [ 57.749998][ T4501] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(29) [ 57.756698][ T4501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.764323][ T4501] vhci_hcd vhci_hcd.0: Device attached [ 57.782835][ T4517] vhci_hcd: connection closed [ 57.783213][ T4508] vhci_hcd: connection closed [ 57.785539][ T4524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.788529][ T4525] vhci_hcd: connection closed [ 57.792848][ T4520] vhci_hcd: connection closed [ 57.800897][ T4503] vhci_hcd: connection closed [ 57.805712][ T9] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 57.823269][ T558] vhci_hcd: stop threads [ 57.827611][ T558] vhci_hcd: release socket [ 57.832230][ T558] vhci_hcd: disconnect device [ 57.837045][ T4524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.837070][ T4504] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 57.858679][ T558] vhci_hcd: stop threads [ 57.862954][ T558] vhci_hcd: release socket [ 57.863875][ T29] kauditd_printk_skb: 3628 callbacks suppressed [ 57.863944][ T29] audit: type=1400 audit(1755887332.968:9889): avc: denied { create } for pid=4523 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 57.867483][ T558] vhci_hcd: disconnect device [ 57.901577][ T558] vhci_hcd: stop threads [ 57.905882][ T558] vhci_hcd: release socket [ 57.910497][ T558] vhci_hcd: disconnect device [ 57.923730][ T4524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 57.931813][ T558] vhci_hcd: stop threads [ 57.932859][ T4524] netlink: 108 bytes leftover after parsing attributes in process `syz.2.227'. [ 57.937019][ T558] vhci_hcd: release socket [ 57.950500][ T558] vhci_hcd: disconnect device [ 57.955759][ T558] vhci_hcd: stop threads [ 57.960054][ T558] vhci_hcd: release socket [ 57.964582][ T558] vhci_hcd: disconnect device [ 58.052556][ T4543] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 58.116380][ T4542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.129797][ T4543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.164540][ T4542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.213880][ T4542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.274461][ T4542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.317072][ T377] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.327988][ T377] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.339804][ T377] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.350929][ T377] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.531693][ T2957] usb 5-1: enqueue for inactive port 0 [ 58.537255][ T2957] usb 5-1: enqueue for inactive port 0 [ 58.614498][ T2957] vhci_hcd: vhci_device speed not set [ 58.887911][ T4555] __nla_validate_parse: 3 callbacks suppressed [ 58.887927][ T4555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 58.903329][ T4555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 58.951961][ T4551] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 58.992809][ T29] audit: type=1400 audit(1755887334.098:9890): avc: denied { map_create } for pid=4549 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.339680][ T4564] $Hÿ: renamed from bond0 (while UP) [ 59.407877][ T4564] $Hÿ: entered promiscuous mode [ 59.413392][ T4564] bond_slave_0: entered promiscuous mode [ 59.458867][ T4564] dummy0: entered promiscuous mode [ 59.492267][ T29] audit: type=1400 audit(1755887334.168:9891): avc: denied { prog_load } for pid=4547 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.511283][ T29] audit: type=1400 audit(1755887334.168:9892): avc: denied { bpf } for pid=4547 comm="syz.4.235" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.531906][ T29] audit: type=1400 audit(1755887334.168:9893): avc: denied { perfmon } for pid=4547 comm="syz.4.235" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.552724][ T29] audit: type=1400 audit(1755887334.168:9894): avc: denied { map_read map_write } for pid=4547 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.572513][ T29] audit: type=1400 audit(1755887334.168:9895): avc: denied { prog_run } for pid=4547 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.591585][ T29] audit: type=1400 audit(1755887334.278:9896): avc: denied { create } for pid=4547 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.611953][ T29] audit: type=1400 audit(1755887334.288:9897): avc: denied { write } for pid=4547 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.632287][ T29] audit: type=1400 audit(1755887334.288:9898): avc: denied { read } for pid=4547 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.754539][ T4567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 59.834726][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 59.889357][ T4582] netlink: 'syz.3.241': attribute type 21 has an invalid length. [ 59.897466][ T4582] netlink: 'syz.3.241': attribute type 4 has an invalid length. [ 59.911450][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 59.962275][ T4587] random: crng reseeded on system resumption [ 59.976614][ T4582] Restarting kernel threads ... [ 59.982042][ T4582] Done restarting kernel threads. [ 59.988819][ T4589] netlink: 'syz.2.246': attribute type 11 has an invalid length. [ 60.036650][ T4578] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 60.043222][ T4578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.050805][ T4578] vhci_hcd vhci_hcd.0: Device attached [ 60.688871][ T4591] vhci_hcd: connection closed [ 60.689207][ T2220] vhci_hcd: stop threads [ 60.698310][ T2220] vhci_hcd: release socket [ 60.702834][ T2220] vhci_hcd: disconnect device [ 60.922986][ T4604] netlink: 'syz.3.258': attribute type 298 has an invalid length. [ 61.383567][ T4609] process 'syz.4.249' launched '/dev/fd/10' with NULL argv: empty string added [ 61.485311][ T4609] netlink: 'syz.4.249': attribute type 21 has an invalid length. [ 62.057207][ T10] usb usb6-port1: attempt power cycle [ 62.126742][ T4628] bond1: entered promiscuous mode [ 62.131915][ T4628] bond1: entered allmulticast mode [ 62.152890][ T4628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.163804][ T4628] bond1 (unregistering): Released all slaves [ 62.545088][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 62.632925][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 62.817472][ T4651] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 62.957144][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 62.957160][ T29] audit: type=1400 audit(1755887338.058:10467): avc: denied { bind } for pid=4652 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.049411][ T9] usb 9-1: enqueue for inactive port 0 [ 63.055421][ T9] usb 9-1: enqueue for inactive port 0 [ 63.121588][ T9] vhci_hcd: vhci_device speed not set [ 63.229075][ T4657] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 63.238288][ T29] audit: type=1326 audit(1755887338.338:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdeea9e5ba7 code=0x7ffc0000 [ 63.261796][ T29] audit: type=1326 audit(1755887338.338:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdeea98ade9 code=0x7ffc0000 [ 63.285211][ T29] audit: type=1326 audit(1755887338.338:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdeea9e5ba7 code=0x7ffc0000 [ 63.289879][ T4658] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.308709][ T29] audit: type=1326 audit(1755887338.338:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdeea98ade9 code=0x7ffc0000 [ 63.308740][ T29] audit: type=1326 audit(1755887338.338:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdeea9e5ba7 code=0x7ffc0000 [ 63.308769][ T29] audit: type=1326 audit(1755887338.338:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdeea98ade9 code=0x7ffc0000 [ 63.308790][ T29] audit: type=1326 audit(1755887338.338:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdeea9e5ba7 code=0x7ffc0000 [ 63.308815][ T29] audit: type=1326 audit(1755887338.338:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdeea98ade9 code=0x7ffc0000 [ 63.644081][ T4664] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 63.657544][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 63.912719][ T4668] block device autoloading is deprecated and will be removed. [ 63.927790][ T4668] netlink: 256 bytes leftover after parsing attributes in process `syz.2.267'. [ 64.125803][ T4681] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 64.169953][ T4683] C: renamed from team_slave_0 (while UP) [ 64.177661][ T4684] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 64.188825][ T4683] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 64.198191][ T4675] netlink: 'syz.3.269': attribute type 27 has an invalid length. [ 64.212467][ T4683] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 64.252968][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.260321][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.295756][ T4675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.305376][ T4675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.332109][ T4694] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 64.339895][ T4694] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 64.366192][ T4681] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.374400][ T4681] bond0: (slave team0): Enslaving as an active interface with an up link [ 64.392061][ T10] usb usb6-port1: unable to enumerate USB device [ 64.401166][ T4706] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 64.408951][ T4706] netlink: 224 bytes leftover after parsing attributes in process `syz.0.270'. [ 64.410455][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 64.421971][ T4684] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 64.437061][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 64.448211][ T4685] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.456438][ T4705] random: crng reseeded on system resumption [ 64.469271][ T4679] can0: slcan on ttyS3. [ 64.475260][ T4685] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.479731][ T4705] Restarting kernel threads ... [ 64.494495][ T4705] Done restarting kernel threads. [ 64.515354][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.524564][ T4678] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.534087][ T4678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.558780][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.569903][ T4702] vlan0: entered promiscuous mode [ 64.575012][ T4702] bond0: entered promiscuous mode [ 64.580042][ T4702] bond_slave_0: entered promiscuous mode [ 64.585933][ T4702] bond_slave_1: entered promiscuous mode [ 64.591871][ T4683] can0 (unregistered): slcan off ttyS3. [ 64.601586][ T4702] dummy0: entered promiscuous mode [ 64.621784][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.632141][ T4699] can0: slcan on ttyS3. [ 64.642059][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.669565][ T4718] vlan2: entered promiscuous mode [ 64.674855][ T4718] vlan2: entered allmulticast mode [ 64.680005][ T4718] hsr_slave_1: entered allmulticast mode [ 64.687919][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 64.688392][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.710881][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 64.740438][ T4724] loop4: detected capacity change from 0 to 1024 [ 64.747135][ T4677] can0 (unregistered): slcan off ttyS3. [ 64.762241][ T4724] EXT4-fs: Ignoring removed orlov option [ 64.767927][ T4724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.784139][ T4724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.355441][ T4747] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 65.420871][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 65.534450][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.667199][ T4757] loop4: detected capacity change from 0 to 512 [ 65.681132][ T4757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.693587][ T4757] EXT4-fs (loop4): 1 truncate cleaned up [ 65.699812][ T4757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.787429][ T4750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.796958][ T4750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.111803][ T3542] usb usb10-port1: attempt power cycle [ 66.700069][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.350151][ T4775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4775 comm=syz.0.296 [ 67.374538][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 67.407688][ T4775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.423219][ T4776] @: renamed from vlan0 [ 67.453309][ T4775] macvlan2: entered promiscuous mode [ 67.458630][ T4775] macvlan2: entered allmulticast mode [ 67.476677][ T4775] bond1: entered promiscuous mode [ 67.487913][ T4775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.500387][ T4775] bond1: left promiscuous mode [ 68.154884][ T29] kauditd_printk_skb: 4740 callbacks suppressed [ 68.154900][ T29] audit: type=1400 audit(1755887342.888:15199): avc: denied { ioctl } for pid=4796 comm="syz.3.292" path="socket:[9174]" dev="sockfs" ino=9174 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.255337][ T4803] loop4: detected capacity change from 0 to 512 [ 68.264896][ T4803] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 68.301573][ T4803] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.309359][ T4803] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm wÞ£ÿ: Block bitmap for bg 0 marked uninitialized [ 68.323539][ T4803] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 68.333122][ T4803] EXT4-fs (loop4): 1 orphan inode deleted [ 68.339484][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.556497][ T3542] usb usb10-port1: unable to enumerate USB device [ 69.206382][ T4815] block device autoloading is deprecated and will be removed. [ 69.263686][ T4816] syz.3.298(4816): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 69.477746][ T29] audit: type=1326 audit(1755887344.568:15200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.501414][ T29] audit: type=1326 audit(1755887344.568:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.525033][ T29] audit: type=1326 audit(1755887344.568:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.548591][ T29] audit: type=1326 audit(1755887344.568:15203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.572097][ T29] audit: type=1326 audit(1755887344.568:15204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.595579][ T29] audit: type=1400 audit(1755887344.568:15205): avc: denied { create } for pid=4812 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.615310][ T29] audit: type=1326 audit(1755887344.568:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.638937][ T29] audit: type=1326 audit(1755887344.568:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.662461][ T29] audit: type=1326 audit(1755887344.568:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 69.708452][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.718699][ T4820] syzkaller1: entered promiscuous mode [ 69.724336][ T4820] syzkaller1: entered allmulticast mode [ 70.506930][ T4845] netlink: 96 bytes leftover after parsing attributes in process `syz.2.304'. [ 70.654844][ T4872] netlink: 'syz.0.306': attribute type 21 has an invalid length. [ 70.662656][ T4872] netlink: 'syz.0.306': attribute type 4 has an invalid length. [ 70.699640][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 70.728776][ T4878] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.307'. [ 70.739033][ T4872] random: crng reseeded on system resumption [ 70.759698][ T4878] netlink: 14 bytes leftover after parsing attributes in process `syz.3.307'. [ 70.789668][ T4878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.794433][ T4872] Restarting kernel threads ... [ 70.822265][ T4872] Done restarting kernel threads. [ 70.822231][ T4878] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 70.844239][ T4878] bond0 (unregistering): Released all slaves [ 70.936692][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.948891][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.992120][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 71.027480][ T4909] C: renamed from team_slave_0 [ 71.098904][ T4909] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 71.106682][ T4909] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 71.131795][ T4916] can0: slcan on ttyS3. [ 72.941023][ T4910] can0 (unregistered): slcan off ttyS3. [ 73.483859][ T4899] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 73.491556][ T4899] netlink: 224 bytes leftover after parsing attributes in process `syz.3.308'. [ 73.570396][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 73.570409][ T29] audit: type=1326 audit(1755887348.668:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.653632][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 73.663036][ T29] audit: type=1326 audit(1755887348.708:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.686740][ T29] audit: type=1326 audit(1755887348.708:15636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.710646][ T29] audit: type=1326 audit(1755887348.708:15637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.734311][ T29] audit: type=1326 audit(1755887348.718:15638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.757830][ T29] audit: type=1326 audit(1755887348.718:15639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.781391][ T29] audit: type=1326 audit(1755887348.718:15640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.804957][ T29] audit: type=1326 audit(1755887348.718:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.828400][ T29] audit: type=1326 audit(1755887348.718:15642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 73.851797][ T29] audit: type=1326 audit(1755887348.728:15643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 74.059009][ T4967] loop4: detected capacity change from 0 to 128 [ 74.136433][ T4967] 9pnet_fd: Insufficient options for proto=fd [ 74.201378][ T4967] loop4: detected capacity change from 0 to 1024 [ 74.250416][ T4967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.548512][ T4989] netlink: 'syz.0.327': attribute type 10 has an invalid length. [ 74.573596][ T4989] bond0: (slave dummy0): Releasing backup interface [ 74.604249][ T4989] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 74.628024][ T4989] team0: Failed to send options change via netlink (err -105) [ 74.635620][ T4989] team0: Port device dummy0 added [ 74.849810][ T5009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.331'. [ 74.871897][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.917550][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 74.942885][ T5021] sch_fq: defrate 4294967295 ignored. [ 74.997982][ T5016] pimreg: entered allmulticast mode [ 75.024965][ T5016] pimreg: left allmulticast mode [ 75.037831][ T5023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'. [ 75.069153][ T3411] IPVS: starting estimator thread 0... [ 75.161675][ T5029] IPVS: using max 3072 ests per chain, 153600 per kthread [ 75.174818][ T5034] sd 0:0:1:0: device reset [ 75.203967][ T5035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 75.210570][ T5035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.218133][ T5035] vhci_hcd vhci_hcd.0: Device attached [ 75.239275][ T5035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.248510][ T5035] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 75.255293][ T5035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.263069][ T5035] vhci_hcd vhci_hcd.0: Device attached [ 75.270188][ T5035] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 75.276906][ T5035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.284432][ T5035] vhci_hcd vhci_hcd.0: Device attached [ 75.295834][ T5035] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 75.302764][ T5035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.310381][ T5035] vhci_hcd vhci_hcd.0: Device attached [ 75.344361][ T5035] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 75.351031][ T5035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.358685][ T5035] vhci_hcd vhci_hcd.0: Device attached [ 75.461591][ T36] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 76.202107][ T5036] vhci_hcd: connection reset by peer [ 76.208429][ T5049] vhci_hcd: connection closed [ 76.208506][ T5047] vhci_hcd: connection closed [ 76.231641][ T5040] vhci_hcd: connection closed [ 76.236579][ T5043] vhci_hcd: connection closed [ 76.621789][ T377] vhci_hcd: stop threads [ 76.630836][ T377] vhci_hcd: release socket [ 76.635287][ T377] vhci_hcd: disconnect device [ 76.978692][ T5073] loop4: detected capacity change from 0 to 164 [ 77.176907][ T5081] __nla_validate_parse: 1 callbacks suppressed [ 77.176923][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 77.192052][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 77.417768][ T377] vhci_hcd: stop threads [ 77.422115][ T377] vhci_hcd: release socket [ 77.426597][ T377] vhci_hcd: disconnect device [ 77.446679][ T377] vhci_hcd: stop threads [ 77.451566][ T377] vhci_hcd: release socket [ 77.456036][ T377] vhci_hcd: disconnect device [ 77.581746][ T377] vhci_hcd: stop threads [ 77.586134][ T377] vhci_hcd: release socket [ 77.590600][ T377] vhci_hcd: disconnect device [ 77.643559][ T5097] loop0: detected capacity change from 0 to 1024 [ 77.673064][ T377] vhci_hcd: stop threads [ 77.677329][ T377] vhci_hcd: release socket [ 77.681861][ T377] vhci_hcd: disconnect device [ 77.695936][ T5097] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.762551][ T5097] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.355: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.788506][ T5097] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.355: Failed to acquire dquot type 0 [ 77.827960][ T5102] netlink: 'syz.3.356': attribute type 4 has an invalid length. [ 77.844035][ T5097] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.355: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.868917][ T5102] netlink: 'syz.3.356': attribute type 4 has an invalid length. [ 77.884531][ T5097] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.355: Invalid inode bitmap blk 0 in block_group 0 [ 77.903396][ T558] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.922354][ T5097] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 77.932558][ T558] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 77.973530][ T5097] EXT4-fs (loop0): 1 orphan inode deleted [ 78.043311][ T5097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.572214][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 78.572231][ T29] audit: type=1326 audit(1755887353.648:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 78.607779][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.635446][ T5112] netlink: 14 bytes leftover after parsing attributes in process `syz.1.346'. [ 78.645473][ T29] audit: type=1400 audit(1755887353.708:16419): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.667136][ T5112] hsr_slave_0: left promiscuous mode [ 78.673048][ T5112] hsr_slave_1: left promiscuous mode [ 78.688094][ T29] audit: type=1326 audit(1755887353.788:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 78.734475][ T29] audit: type=1326 audit(1755887353.828:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 78.758142][ T29] audit: type=1326 audit(1755887353.828:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 78.781780][ T29] audit: type=1326 audit(1755887353.828:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 78.805304][ T29] audit: type=1326 audit(1755887353.828:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdeea9ed550 code=0x7ffc0000 [ 78.828874][ T29] audit: type=1326 audit(1755887353.828:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 78.852764][ T29] audit: type=1326 audit(1755887353.828:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 78.876243][ T29] audit: type=1326 audit(1755887353.838:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 79.038493][ T5122] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 79.089607][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 79.098593][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 79.293370][ T5134] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 79.310886][ T5134] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 79.334485][ T5136] can0: slcan on ttyS3. [ 79.411606][ T5129] can0 (unregistered): slcan off ttyS3. [ 79.426324][ T5134] can0: slcan on ttyS3. [ 79.461946][ T5129] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 79.469711][ T5129] netlink: 224 bytes leftover after parsing attributes in process `syz.0.364'. [ 79.582983][ T5128] can0 (unregistered): slcan off ttyS3. [ 79.731688][ T5158] netlink: 'syz.0.368': attribute type 6 has an invalid length. [ 79.861941][ T5169] loop0: detected capacity change from 0 to 128 [ 79.938465][ T5169] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.071428][ T5169] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.531598][ T36] usb 5-1: enqueue for inactive port 0 [ 80.537122][ T36] usb 5-1: enqueue for inactive port 0 [ 80.611585][ T36] vhci_hcd: vhci_device speed not set [ 80.683505][ T558] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.742159][ T5191] netlink: 240 bytes leftover after parsing attributes in process `syz.0.380'. [ 80.812974][ T5191] block device autoloading is deprecated and will be removed. [ 80.836770][ T5194] syzkaller0: entered promiscuous mode [ 80.842280][ T5194] syzkaller0: entered allmulticast mode [ 80.858610][ T5191] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.873114][ T5200] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 80.893137][ T5191] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.966200][ T5203] loop1: detected capacity change from 0 to 1024 [ 80.998733][ T5205] random: crng reseeded on system resumption [ 81.042287][ T5203] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.072438][ T5203] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.080633][ T5203] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.087502][ T5203] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.102291][ T5203] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 81.109427][ T5203] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.371: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.124967][ T5203] EXT4-fs (loop1): 1 orphan inode deleted [ 81.131231][ T5203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.153172][ T5203] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.371: iget: bad extended attribute block 6 [ 81.286092][ T5191] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.364721][ T5191] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.479137][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.525843][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.558553][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.624895][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.643924][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.350155][ T5229] netlink: 'syz.0.378': attribute type 5 has an invalid length. [ 82.639930][ T5233] loop1: detected capacity change from 0 to 2048 [ 82.704647][ T5233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.820253][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 82.841048][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.956933][ T5245] loop1: detected capacity change from 0 to 512 [ 83.049376][ T5245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.077078][ T5251] loop0: detected capacity change from 0 to 1024 [ 83.118770][ T5245] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.137380][ T5251] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.196031][ T5251] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.383: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.225932][ T5251] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.383: Failed to acquire dquot type 0 [ 83.249676][ T5251] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.383: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.301768][ T5251] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.383: Invalid inode bitmap blk 0 in block_group 0 [ 83.319944][ T5251] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 83.328844][ T377] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.363245][ T5251] EXT4-fs (loop0): 1 orphan inode deleted [ 83.389789][ T5251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.471195][ T377] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 83.500894][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.510128][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.707912][ T29] kauditd_printk_skb: 2585 callbacks suppressed [ 83.707928][ T29] audit: type=1326 audit(1755887358.668:19009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 83.738125][ T29] audit: type=1326 audit(1755887358.798:19010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 83.810533][ T5266] openvswitch: netlink: Message has 6 unknown bytes. [ 83.843754][ T29] audit: type=1326 audit(1755887358.868:19011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 83.867325][ T29] audit: type=1326 audit(1755887358.868:19012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 83.890717][ T29] audit: type=1326 audit(1755887358.868:19013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 83.914295][ T29] audit: type=1400 audit(1755887358.908:19014): avc: denied { write } for pid=5265 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.933793][ T29] audit: type=1326 audit(1755887358.908:19015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 83.957212][ T29] audit: type=1326 audit(1755887358.908:19016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 83.980841][ T29] audit: type=1326 audit(1755887358.908:19017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 84.004351][ T29] audit: type=1326 audit(1755887358.908:19018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ba278ebe9 code=0x7ffc0000 [ 84.100816][ T5276] netlink: 'syz.4.392': attribute type 10 has an invalid length. [ 84.151545][ T5271] loop1: detected capacity change from 0 to 512 [ 84.187249][ T5283] loop4: detected capacity change from 0 to 512 [ 84.194556][ T5271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.217003][ T5271] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.229053][ T5283] lo speed is unknown, defaulting to 1000 [ 84.235947][ T5283] lo speed is unknown, defaulting to 1000 [ 84.242440][ T5271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.252027][ T5283] lo speed is unknown, defaulting to 1000 [ 84.258428][ T5283] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.270136][ T5283] lo speed is unknown, defaulting to 1000 [ 84.276227][ T5283] lo speed is unknown, defaulting to 1000 [ 84.293029][ T5286] loop4: detected capacity change from 0 to 164 [ 84.306704][ T5271] random: crng reseeded on system resumption [ 84.335031][ T5271] Restarting kernel threads ... [ 84.340336][ T5271] Done restarting kernel threads. [ 84.346864][ T5283] lo speed is unknown, defaulting to 1000 [ 84.358338][ T5283] lo speed is unknown, defaulting to 1000 [ 84.383057][ T5283] lo speed is unknown, defaulting to 1000 [ 84.393968][ T5273] loop0: detected capacity change from 0 to 1024 [ 84.412275][ T5273] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.439200][ T5292] netlink: 'syz.1.396': attribute type 21 has an invalid length. [ 84.441537][ T5273] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.447433][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 84.487895][ T5273] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #32: comm syz.0.389: iget: special inode unallocated [ 84.506813][ T5273] EXT4-fs (loop0): no journal found [ 84.578439][ T5296] netlink: 208 bytes leftover after parsing attributes in process `syz.2.397'. [ 84.587716][ T5296] unsupported nla_type 8573 [ 84.669421][ T5292] team0 (unregistering): Port device C removed [ 84.684281][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 84.718786][ T5300] loop0: detected capacity change from 0 to 1024 [ 84.728278][ T5300] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.739199][ T5300] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 84.749603][ T5300] JBD2: no valid journal superblock found [ 84.755420][ T5300] EXT4-fs (loop0): Could not load journal inode [ 84.786533][ T5300] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 84.817191][ T5300] random: crng reseeded on system resumption [ 84.835924][ T5305] netlink: 8 bytes leftover after parsing attributes in process `,&#^%'. [ 84.925343][ T5309] lo speed is unknown, defaulting to 1000 [ 84.934044][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 84.962946][ T5312] loop0: detected capacity change from 0 to 1024 [ 84.995593][ T5312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.028147][ T5312] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.066209][ T5309] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm ,&#^%: lblock 1 mapped to illegal pblock 1 (length 15) [ 85.080477][ T5309] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 85.092935][ T5309] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.092935][ T5309] [ 85.100831][ T5320] pim6reg1: entered promiscuous mode [ 85.103625][ T5309] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 85.169185][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.218719][ T5329] netlink: 'syz.4.408': attribute type 21 has an invalid length. [ 85.249009][ T5328] team0: Port device dummy0 removed [ 85.283424][ T5328] bond0: (slave bond_slave_0): Releasing backup interface [ 85.300755][ T5328] team0: Port device C removed [ 85.310236][ T5328] team0: Port device team_slave_1 removed [ 85.317181][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.324729][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.335534][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.343078][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.367046][ T5329] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 85.374751][ T5329] netlink: 144 bytes leftover after parsing attributes in process `syz.4.408'. [ 85.383984][ T5330] netlink: 168 bytes leftover after parsing attributes in process `syz.4.408'. [ 85.423973][ T5335] pim6reg: entered allmulticast mode [ 85.431566][ T5340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 85.461244][ T5328] team0: Mode changed to "activebackup" [ 85.479225][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 85.501606][ T5343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.517469][ T5343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.539925][ T5347] netlink: 'syz.0.415': attribute type 13 has an invalid length. [ 85.651256][ T5356] netlink: 60 bytes leftover after parsing attributes in process `syz.1.418'. [ 85.746528][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.774207][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.805752][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.845007][ T5360] loop0: detected capacity change from 0 to 512 [ 85.845919][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.875957][ T5360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.892169][ T5361] loop1: detected capacity change from 0 to 2048 [ 85.902625][ T5360] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.420: corrupted in-inode xattr: overlapping e_value [ 85.952993][ T5361] EXT4-fs (loop1): failed to initialize system zone (-117) [ 85.970439][ T5361] EXT4-fs (loop1): mount failed [ 85.976515][ T5360] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.420: couldn't read orphan inode 15 (err -117) [ 86.023569][ T5360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.033814][ T5356] lo speed is unknown, defaulting to 1000 [ 86.143399][ T5366] serio: Serial port ptm0 [ 86.284268][ T5369] netlink: 'syz.3.421': attribute type 30 has an invalid length. [ 86.378841][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.408165][ T5380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.414042][ T5374] lo speed is unknown, defaulting to 1000 [ 86.497900][ T5384] ref_ctr_offset mismatch. inode: 0x1d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 87.035953][ T5401] lo speed is unknown, defaulting to 1000 [ 87.555759][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.566305][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.646707][ T5428] fido_id[5428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.724579][ T5431] Driver unsupported XDP return value 0 on prog (id 339) dev N/A, expect packet loss! [ 88.346127][ T5448] loop4: detected capacity change from 0 to 128 [ 88.369107][ T5444] __nla_validate_parse: 11 callbacks suppressed [ 88.369122][ T5444] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.442'. [ 88.634825][ T5454] lo speed is unknown, defaulting to 1000 [ 88.781132][ T5454] lo speed is unknown, defaulting to 1000 [ 89.369676][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 89.369689][ T29] audit: type=1400 audit(1755887363.868:19502): avc: denied { create } for pid=5449 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.791083][ T5459] loop0: detected capacity change from 0 to 128 [ 89.850672][ T5459] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.908142][ T5459] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.977356][ T29] audit: type=1400 audit(1755887364.888:19503): avc: denied { create } for pid=5458 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.989060][ T5459] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.997568][ T29] audit: type=1400 audit(1755887364.888:19504): avc: denied { write } for pid=5458 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.997657][ T29] audit: type=1400 audit(1755887364.888:19505): avc: denied { nlmsg_read } for pid=5458 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.997678][ T29] audit: type=1400 audit(1755887364.938:19506): avc: denied { create } for pid=5460 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.997697][ T29] audit: type=1400 audit(1755887364.938:19507): avc: denied { mounton } for pid=5458 comm="syz.0.445" path="/90/file1" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.090118][ T29] audit: type=1400 audit(1755887364.948:19508): avc: denied { name_bind } for pid=5460 comm="syz.3.446" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.112013][ T29] audit: type=1400 audit(1755887364.948:19509): avc: denied { node_bind } for pid=5460 comm="syz.3.446" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.134709][ T29] audit: type=1400 audit(1755887365.008:19510): avc: denied { mount } for pid=5458 comm="syz.0.445" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.156795][ T29] audit: type=1326 audit(1755887365.038:19511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fbbebe9 code=0x7ffc0000 [ 90.222486][ T5459] SELinux: security policydb version 17 (MLS) not backwards compatible [ 90.249227][ T5459] SELinux: failed to load policy [ 90.262884][ T5466] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 90.269458][ T5466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.277072][ T5466] vhci_hcd vhci_hcd.0: Device attached [ 90.287254][ T5473] vhci_hcd: unknown pdu 2 [ 90.307211][ T377] vhci_hcd: stop threads [ 90.311693][ T377] vhci_hcd: release socket [ 90.316255][ T377] vhci_hcd: disconnect device [ 90.457398][ T5482] loop0: detected capacity change from 0 to 512 [ 90.470638][ T5482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.475891][ T5485] loop1: detected capacity change from 0 to 128 [ 90.493960][ T5482] EXT4-fs (loop0): 1 truncate cleaned up [ 90.514541][ T5482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.563917][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.603078][ T5490] lo speed is unknown, defaulting to 1000 [ 90.650723][ T5498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.674182][ T5498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.733568][ T5498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.773573][ T5498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.821282][ T164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.851464][ T164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893573][ T164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.909536][ T5527] loop4: detected capacity change from 0 to 164 [ 90.935025][ T164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.942431][ T5527] iso9660: Unknown parameter '' [ 91.023275][ T5535] loop1: detected capacity change from 0 to 1024 [ 91.034938][ T5535] EXT4-fs: inline encryption not supported [ 91.040800][ T5535] EXT4-fs: Ignoring removed i_version option [ 91.065709][ T5535] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.082957][ T5535] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.458: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.102210][ T5535] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.458: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.117482][ T5535] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.458: Failed to acquire dquot type 0 [ 91.129996][ T5535] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.140627][ T5535] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.458: mark_inode_dirty error [ 91.161747][ T5535] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 91.172259][ T5535] EXT4-fs (loop1): 1 orphan inode deleted [ 91.178834][ T5535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.192775][ T377] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.207854][ T377] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 91.221438][ T5535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.231204][ T5535] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.458: Invalid inode table block 1 in block_group 0 [ 91.245020][ T5535] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.255218][ T5535] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.458: mark_inode_dirty error [ 91.290525][ T5531] siw: device registration error -23 [ 91.432627][ T5556] SELinux: security_context_str_to_sid () failed with errno=-22 [ 91.561168][ T5556] netlink: 'syz.4.461': attribute type 21 has an invalid length. [ 91.595488][ T5556] 9pnet_fd: Insufficient options for proto=fd [ 91.624733][ T5577] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 91.632618][ T5577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'. [ 91.678444][ T5577] bond0: (slave dummy0): Releasing backup interface [ 91.753436][ T5577] bridge0: port 3(dummy0) entered blocking state [ 91.759906][ T5577] bridge0: port 3(dummy0) entered disabled state [ 91.866035][ T5577] dummy0: entered allmulticast mode [ 91.915396][ T5580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'. [ 91.964756][ T5580] loop0: detected capacity change from 0 to 512 [ 91.991988][ T5580] EXT4-fs: Ignoring removed nobh option [ 92.020854][ T5580] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.464: corrupted inode contents [ 92.064341][ T5580] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.464: mark_inode_dirty error [ 92.079160][ T5580] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.464: corrupted inode contents [ 92.091437][ T5580] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.464: mark_inode_dirty error [ 92.108262][ T5580] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.464: Failed to acquire dquot type 0 [ 92.120157][ T5580] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.464: corrupted inode contents [ 92.133708][ T5580] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.464: mark_inode_dirty error [ 92.145351][ T5580] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.464: corrupted inode contents [ 92.158481][ T5580] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.464: mark_inode_dirty error [ 92.170316][ T5580] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.464: corrupted inode contents [ 92.183123][ T5580] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 92.203370][ T5580] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.464: corrupted inode contents [ 92.215929][ T5580] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.464: mark_inode_dirty error [ 92.254090][ T5580] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 92.278417][ T5580] EXT4-fs (loop0): 1 truncate cleaned up [ 92.291895][ T5580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.324823][ T5580] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.357451][ T5580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.429783][ T4714] udevd[4714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 92.468555][ T5600] netlink: '+}[@': attribute type 13 has an invalid length. [ 92.474813][ T4714] udevd[4714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 92.530747][ T4714] udevd[4714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 92.744388][ T5621] wireguard0: entered promiscuous mode [ 92.750036][ T5621] wireguard0: entered allmulticast mode [ 92.769046][ T5623] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.475'. [ 92.876566][ T5626] loop4: detected capacity change from 0 to 512 [ 92.909485][ T5626] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.476: bg 0: block 393: padding at end of block bitmap is not set [ 92.931105][ T5626] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 92.952398][ T5626] EXT4-fs (loop4): 2 truncates cleaned up [ 92.959723][ T5626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.252724][ T5636] lo speed is unknown, defaulting to 1000 [ 93.591970][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.684796][ T5645] lo speed is unknown, defaulting to 1000 [ 94.303146][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 94.340272][ T5647] loop4: detected capacity change from 0 to 512 [ 94.424301][ T29] kauditd_printk_skb: 1552 callbacks suppressed [ 94.430641][ T29] audit: type=1400 audit(1755887369.508:21059): avc: denied { setopt } for pid=5658 comm="syz.1.485" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.512099][ T5647] EXT4-fs: Ignoring removed nobh option [ 94.811780][ T29] audit: type=1400 audit(1755887369.798:21060): avc: denied { nlmsg_write } for pid=5675 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.832733][ T29] audit: type=1326 audit(1755887369.848:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.856407][ T29] audit: type=1326 audit(1755887369.848:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.880153][ T29] audit: type=1326 audit(1755887369.848:21063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.903663][ T29] audit: type=1326 audit(1755887369.848:21064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.927165][ T29] audit: type=1326 audit(1755887369.848:21065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.950624][ T29] audit: type=1326 audit(1755887369.858:21066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.974235][ T29] audit: type=1326 audit(1755887369.858:21067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 94.997649][ T29] audit: type=1326 audit(1755887369.858:21068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeea9eebe9 code=0x7ffc0000 [ 95.310165][ T5684] loop1: detected capacity change from 0 to 2048 [ 95.899222][ T5643] syz.4.480 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 95.913484][ T5643] CPU: 1 UID: 0 PID: 5643 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.913567][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.913578][ T5643] Call Trace: [ 95.913584][ T5643] [ 95.913591][ T5643] __dump_stack+0x1d/0x30 [ 95.913610][ T5643] dump_stack_lvl+0xe8/0x140 [ 95.913626][ T5643] dump_stack+0x15/0x1b [ 95.913644][ T5643] dump_header+0x81/0x220 [ 95.913708][ T5643] oom_kill_process+0x342/0x400 [ 95.913759][ T5643] out_of_memory+0x979/0xb80 [ 95.913790][ T5643] try_charge_memcg+0x5e6/0x9e0 [ 95.913819][ T5643] obj_cgroup_charge_pages+0xa6/0x150 [ 95.913925][ T5643] __memcg_kmem_charge_page+0x9f/0x170 [ 95.913957][ T5643] __alloc_frozen_pages_noprof+0x188/0x360 [ 95.914051][ T5643] alloc_pages_mpol+0xb3/0x250 [ 95.914152][ T5643] alloc_pages_noprof+0x90/0x130 [ 95.914182][ T5643] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 95.914216][ T5643] __kvmalloc_node_noprof+0x30f/0x4e0 [ 95.914259][ T5643] ? ip_set_alloc+0x1f/0x30 [ 95.914355][ T5643] ? ip_set_alloc+0x1f/0x30 [ 95.914407][ T5643] ? __kmalloc_cache_noprof+0x189/0x320 [ 95.914432][ T5643] ip_set_alloc+0x1f/0x30 [ 95.914456][ T5643] hash_netiface_create+0x282/0x740 [ 95.914490][ T5643] ? __pfx_hash_netiface_create+0x10/0x10 [ 95.914560][ T5643] ip_set_create+0x3cc/0x960 [ 95.914608][ T5643] ? __nla_parse+0x40/0x60 [ 95.914637][ T5643] nfnetlink_rcv_msg+0x4c3/0x590 [ 95.914739][ T5643] netlink_rcv_skb+0x123/0x220 [ 95.914760][ T5643] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 95.914792][ T5643] nfnetlink_rcv+0x16b/0x1690 [ 95.914891][ T5643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.914913][ T5643] ? kernel_text_address+0x94/0xb0 [ 95.914943][ T5643] ? __kernel_text_address+0xd/0x40 [ 95.914963][ T5643] ? unwind_get_return_address+0x16/0x40 [ 95.914995][ T5643] ? perf_callchain_kernel+0x301/0x330 [ 95.915111][ T5643] ? get_perf_callchain+0x456/0x530 [ 95.915136][ T5643] ? __bpf_get_stack+0x5ff/0x630 [ 95.915232][ T5643] ? should_fail_ex+0x30/0x280 [ 95.915275][ T5643] ? selinux_nlmsg_lookup+0x99/0x890 [ 95.915306][ T5643] ? __rcu_read_unlock+0x34/0x70 [ 95.915328][ T5643] ? __netlink_lookup+0x266/0x2a0 [ 95.915355][ T5643] netlink_unicast+0x5bd/0x690 [ 95.915401][ T5643] netlink_sendmsg+0x58b/0x6b0 [ 95.915424][ T5643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.915471][ T5643] __sock_sendmsg+0x145/0x180 [ 95.915611][ T5643] ____sys_sendmsg+0x31e/0x4e0 [ 95.915633][ T5643] ___sys_sendmsg+0x17b/0x1d0 [ 95.915660][ T5643] __x64_sys_sendmsg+0xd4/0x160 [ 95.915687][ T5643] x64_sys_call+0x191e/0x2ff0 [ 95.915765][ T5643] do_syscall_64+0xd2/0x200 [ 95.915794][ T5643] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.915834][ T5643] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.915854][ T5643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.915919][ T5643] RIP: 0033:0x7f1ba278ebe9 [ 95.915941][ T5643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.915958][ T5643] RSP: 002b:00007f1ba11f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.915981][ T5643] RAX: ffffffffffffffda RBX: 00007f1ba29b5fa0 RCX: 00007f1ba278ebe9 [ 95.915992][ T5643] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 95.916003][ T5643] RBP: 00007f1ba2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.916016][ T5643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.916029][ T5643] R13: 00007f1ba29b6038 R14: 00007f1ba29b5fa0 R15: 00007ffd0ca61d18 [ 95.916048][ T5643] [ 95.916160][ T5643] memory: usage 307200kB, limit 307200kB, failcnt 277 [ 96.174546][ T5684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.178323][ T5643] memory+swap: usage 307608kB, limit 9007199254740988kB, failcnt 0 [ 96.281204][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.480: corrupted inode contents [ 96.285444][ T5643] kmem: usage 295496kB, limit 9007199254740988kB, failcnt 0 [ 96.285466][ T5643] Memory cgroup stats for /syz4: [ 96.285966][ T5643] cache 53248 [ 96.294368][ T5647] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.480: mark_inode_dirty error [ 96.305119][ T5643] rss 11759616 [ 96.305130][ T5643] shmem 16384 [ 96.313630][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.480: corrupted inode contents [ 96.317408][ T5643] mapped_file 4096 [ 96.317417][ T5643] dirty 4096 [ 96.320807][ T5647] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.480: mark_inode_dirty error [ 96.331828][ T5643] writeback 0 [ 96.341863][ T5647] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.480: Failed to acquire dquot type 0 [ 96.350269][ T5643] workingset_refault_anon 1137 [ 96.356361][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.480: corrupted inode contents [ 96.357253][ T5643] workingset_refault_file 63 [ 96.368640][ T5647] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.480: mark_inode_dirty error [ 96.371704][ T5643] swap 557056 [ 96.371712][ T5643] swapcached 53248 [ 96.371718][ T5643] pgpgin 79420 [ 96.371768][ T5643] pgpgout 76524 [ 96.371773][ T5643] pgfault 92074 [ 96.371843][ T5643] pgmajfault 172 [ 96.384942][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.480: corrupted inode contents [ 96.387645][ T5643] inactive_anon 69632 [ 96.387654][ T5643] active_anon 0 [ 96.400181][ T5647] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.480: mark_inode_dirty error [ 96.403969][ T5643] inactive_file 11784192 [ 96.403977][ T5643] active_file 8192 [ 96.403984][ T5643] unevictable 0 [ 96.403991][ T5643] hierarchical_memory_limit 314572800 [ 96.416284][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.480: corrupted inode contents [ 96.418547][ T5643] hierarchical_memsw_limit 9223372036854771712 [ 96.422342][ T5647] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 96.425642][ T5643] total_cache 53248 [ 96.425650][ T5643] total_rss 11759616 [ 96.425657][ T5643] total_shmem 16384 [ 96.429282][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.480: corrupted inode contents [ 96.432560][ T5643] total_mapped_file 4096 [ 96.432569][ T5643] total_dirty 4096 [ 96.436982][ T5647] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.480: mark_inode_dirty error [ 96.448051][ T5643] total_writeback 0 [ 96.448058][ T5643] total_workingset_refault_anon 1137 [ 96.448065][ T5643] total_workingset_refault_file 63 [ 96.448072][ T5643] total_swap 557056 [ 96.448078][ T5643] total_swapcached 53248 [ 96.448086][ T5643] total_pgpgin 79420 [ 96.454418][ T5647] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 96.455566][ T5643] total_pgpgout 76524 [ 96.471001][ T5647] EXT4-fs (loop4): 1 truncate cleaned up [ 96.474687][ T5643] total_pgfault 92074 [ 96.474700][ T5643] total_pgmajfault 172 [ 96.474708][ T5643] total_inactive_anon 69632 [ 96.479272][ T5647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.483510][ T5643] total_active_anon 0 [ 96.483518][ T5643] total_inactive_file 11784192 [ 96.483525][ T5643] total_active_file 8192 [ 96.483532][ T5643] total_unevictable 0 [ 96.483538][ T5643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0 [ 96.496911][ T5647] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.501670][ T5643] ,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.480,pid=5642,uid=0 [ 96.666400][ T5643] Memory cgroup out of memory: Killed process 5642 (syz.4.480) total-vm:95944kB, anon-rss:12592kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 96.684723][ T5684] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.741057][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'. [ 96.762115][ T5702] 9pnet_fd: Insufficient options for proto=fd [ 96.859546][ T5713] netlink: 'syz.3.497': attribute type 3 has an invalid length. [ 96.881953][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.917647][ T5713] usb usb1: check_ctrlrecip: process 5713 (syz.3.497) requesting ep 01 but needs 81 [ 96.929982][ T5713] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 96.968972][ T5716] siw: device registration error -23 [ 97.047530][ T5726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5726 comm=syz.3.501 [ 97.083872][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 97.092914][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 97.121166][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 97.235110][ T5741] pim6reg1: entered allmulticast mode [ 97.493532][ T5752] lo speed is unknown, defaulting to 1000 [ 97.542695][ T5762] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 97.550397][ T5762] netlink: 224 bytes leftover after parsing attributes in process `syz.0.509'. [ 97.561204][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 97.562948][ T5765] loop4: detected capacity change from 0 to 256 [ 97.584790][ T9] Process accounting resumed [ 97.791268][ T5774] lo speed is unknown, defaulting to 1000 [ 97.865123][ T5773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=5773 comm=syz.4.513 [ 98.208232][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 98.224174][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 98.353589][ T5790] pim6reg: left allmulticast mode [ 98.508189][ T5788] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.638798][ T3383] usb usb6-port1: attempt power cycle [ 98.647344][ T5804] loop4: detected capacity change from 0 to 512 [ 98.657613][ T5804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.683643][ T5804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.696416][ T5804] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.825877][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.856127][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 98.869823][ T5813] hsr_slave_1 (unregistering): left promiscuous mode [ 99.316659][ T5833] netlink: 'syz.3.530': attribute type 21 has an invalid length. [ 99.324502][ T5833] netlink: 156 bytes leftover after parsing attributes in process `syz.3.530'. [ 99.443237][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 99.443252][ T29] audit: type=1400 audit(1755887374.548:21773): avc: denied { read } for pid=5834 comm="syz.0.532" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.472761][ T29] audit: type=1400 audit(1755887374.548:21774): avc: denied { open } for pid=5834 comm="syz.0.532" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.504142][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 99.593584][ T29] audit: type=1400 audit(1755887374.648:21775): avc: denied { read } for pid=5834 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 99.613036][ T29] audit: type=1326 audit(1755887374.688:21776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.636683][ T29] audit: type=1326 audit(1755887374.688:21777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.636780][ T29] audit: type=1326 audit(1755887374.688:21778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.636804][ T29] audit: type=1326 audit(1755887374.688:21779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.636822][ T29] audit: type=1326 audit(1755887374.688:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.636840][ T29] audit: type=1326 audit(1755887374.688:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.636890][ T29] audit: type=1326 audit(1755887374.688:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd806debe9 code=0x7ffc0000 [ 99.812331][ T1036] Process accounting resumed [ 100.168891][ T5855] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 100.176759][ T5855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.538'. [ 100.207015][ T5855] team0: Port device geneve1 added [ 100.219030][ T164] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.239596][ T164] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.287233][ T5857] ================================================================== [ 100.288144][ T5858] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 100.295465][ T5857] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 100.295512][ T5857] [ 100.295518][ T5857] read to 0xffff888103d90620 of 4 bytes by task 5858 on cpu 0: [ 100.295530][ T5857] selinux_inode_permission+0x334/0x740 [ 100.295560][ T5857] security_inode_permission+0x6d/0xb0 [ 100.326179][ T5858] SELinux: failed to load policy [ 100.330277][ T5857] inode_permission+0x106/0x310 [ 100.345556][ T5857] link_path_walk+0x162/0x900 [ 100.350253][ T5857] path_openat+0x1de/0x2170 [ 100.354877][ T5857] do_filp_open+0x109/0x230 [ 100.359561][ T5857] do_sys_openat2+0xa6/0x110 [ 100.364253][ T5857] __x64_sys_openat+0xf2/0x120 [ 100.369109][ T5857] x64_sys_call+0x2e9c/0x2ff0 [ 100.373849][ T5857] do_syscall_64+0xd2/0x200 [ 100.378470][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.384375][ T5857] [ 100.386694][ T5857] write to 0xffff888103d90620 of 4 bytes by task 5857 on cpu 1: [ 100.394309][ T5857] selinux_inode_permission+0x3ac/0x740 [ 100.399956][ T5857] security_inode_permission+0x6d/0xb0 [ 100.405450][ T5857] inode_permission+0x106/0x310 [ 100.410311][ T5857] link_path_walk+0x162/0x900 [ 100.414986][ T5857] path_openat+0x1de/0x2170 [ 100.419516][ T5857] do_filp_open+0x109/0x230 [ 100.424014][ T5857] io_openat2+0x272/0x390 [ 100.428346][ T5857] io_openat+0x1b/0x30 [ 100.432496][ T5857] __io_issue_sqe+0xfb/0x2e0 [ 100.437251][ T5857] io_issue_sqe+0x53/0x970 [ 100.441742][ T5857] io_submit_sqes+0x675/0x1060 [ 100.446505][ T5857] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 100.452054][ T5857] __x64_sys_io_uring_enter+0x78/0x90 [ 100.457451][ T5857] x64_sys_call+0x2de1/0x2ff0 [ 100.462323][ T5857] do_syscall_64+0xd2/0x200 [ 100.466930][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.472838][ T5857] [ 100.475253][ T5857] value changed: 0x00000000 -> 0x00000001 [ 100.480978][ T5857] [ 100.483290][ T5857] Reported by Kernel Concurrency Sanitizer on: [ 100.489440][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz.4.539 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.499152][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.509204][ T5857] ================================================================== [ 100.518889][ T5854] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.604973][ T5854] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.667497][ T2220] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.684611][ T2220] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.701475][ T2220] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.711576][ T2220] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.731964][ T3383] usb usb6-port1: unable to enumerate USB device [ 100.745751][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.