last executing test programs: 2m25.076348487s ago: executing program 4 (id=313): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0xfffffffa, 0x0, 0x3}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x6}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x8000, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3d8f}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x3}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x4d7}], [{0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 2m24.802991398s ago: executing program 4 (id=320): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d66642cff6686", @ANYRESHEX, @ANYRESHEX]) r1 = gettid() r2 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x73}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x2, 0x100}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 2m23.890935312s ago: executing program 4 (id=337): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m23.810746302s ago: executing program 4 (id=339): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO56JrfIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyURIgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyO4nEZDWaXXfizecDk5nJvDe/N+x8324zuwEa60KSS0laSWaSdJIUhxvcXS0X9ndXpzavJb3eEz8Vg3bVfuWg3/kkK0keSrJRFnmpnSytP7Pzy9Zj97252Ln3/fWnpyZ6kft2d7Yf33vvyhsfXX5w6YuvfrhS5FK6f7qu8SuG/K9dJLf8F8XOiKJd9wj4J66+9uHX/dzfmuSeQf47KVO9eG8t3LDRyQPv/lXft3/88vZJjhUYv16v038PXOkBjVMm6aYoZ5NU22U5O1t9hv+mNV2+PL/w6syL84tzL9Q9UwHj0k22H/3k3Mfnj+T/+1aVf+B/YPp03fr5f/Lq2rf97b3WmMcEnE13VKt+/meeW74/8g+NI//QXPIPzSX/0FzyD80l/9Bc8g/Xsc7fH5Z/aC75h+aSf2iuw/kHAJqld67uJ5CButQ9/wAAAAAAAAAAAAAAAAAAAMetTm1eO1gmVfOzd5LdR5K0h9VvDX6POLlx8Hf656Lf7A9F1W0kz9414glG9EHNT1/f9F299T+/s976y3PJyutJLrbbx++/Yv/+O72bTzjeeX7EAv9ScWT/4acmW/+o39bqrX95K/m0P/9cHDb/lLltsB4+/3RP/orlE73y64gnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGJ+DwAA//8NTG1W") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x9}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xe, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) lstat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, 0x0, 0x0) 2m23.202086014s ago: executing program 4 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$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") r3 = gettid() rt_sigqueueinfo(r3, 0x20, &(0x7f0000000180)={0x7, 0x3, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xca, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x7}, @in6={0xa, 0x4e23, 0xf8, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x3}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000300)={r8, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m22.802663336s ago: executing program 4 (id=350): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x18) vmsplice(r0, 0x0, 0x0, 0x0) 2m22.802534796s ago: executing program 32 (id=350): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x18) vmsplice(r0, 0x0, 0x0, 0x0) 6.197669346s ago: executing program 5 (id=2518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 6.137091747s ago: executing program 5 (id=2520): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x103b01) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000006c0)='rss_stat\x00', r3, 0x0, 0x2}, 0x18) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 3.660588776s ago: executing program 0 (id=2551): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x5, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="e22748e31ffc", 'vlan1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) sendfile(r2, r1, 0x0, 0x8) 3.572968656s ago: executing program 0 (id=2552): r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0xfffffffa, 0x0, 0x3}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x6}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x8000, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3d8f}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x3}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x4d7}], [{0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 3.382757787s ago: executing program 0 (id=2556): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffff}}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x40, "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"}) 3.364362917s ago: executing program 0 (id=2557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 3.336448377s ago: executing program 0 (id=2559): openat$tun(0xffffffffffffff9c, 0x0, 0x4a000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x65, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x30, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0a", 0x0}, 0x50) 3.006678778s ago: executing program 0 (id=2560): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fffffffffffffffc0000000000000000000000000876a75452f393533593f279508060a2793f7864fbd282f4065182ba2cfe6fd7903d16d8e8a699c07995361a11c9c8675eeaab0d3ebaa3c9107dbb6f962f89fc1383850335aff0b2d144ec98b383ae88d10969ef06003b6db826a232d37703a2cf7559eb96c28c74ead3de3779943a75fef5d03569a5226cfbfad35c14e8136304d033d295f3819f01ff644f2e62dafb2968ac4dffbbb7a5eb3fafcf6ddc16eca39c925cc335af83b2c556c035cf34895b4fbdf36ddafdacf8aaa21bdd68239d73b7742d9f9fc15aabf1ab0b9361c1a5f5e9408a9fce171269ee1c217a066055bb1a5d3f006118ee3a8a6fc3268050c3d7de24cc2b79a7fda61ee489d090b9ebb56710c25de6c537e98df8350d4853", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x2) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) r7 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="580020e745a912fe05b95815235436e2f40a0000", @ANYRES16=r7, @ANYBLOB="01002abd7000fcd3df250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004100}, 0x24040840) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x63, 0x6, 0x50704, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x5, @void, @value, @value=r3}, 0x50) 2.868706079s ago: executing program 2 (id=2564): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0xfffffffa, 0x0, 0x3}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x6}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x8000, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3d8f}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x3}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x4d7}], [{0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 2.60705294s ago: executing program 3 (id=2567): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0xc}}], [{@flag='nomand'}]}}) connect(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000240)={0x6, 'virt_wifi0\x00', {0x2}, 0x400}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x300}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x4c98, 0x3, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x64, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast2}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r6}, 0x18) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001400), 0x8080, 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x18) openat(r8, &(0x7f0000000200)='./file0\x00', 0x42201, 0x90) pread64(r7, 0x0, 0x0, 0x4) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', r10, 0x1, 0x8000, 0x0, 0x8, {{0x25, 0x4, 0x3, 0x23, 0x94, 0x64, 0x0, 0xfb, 0x0, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x3f, 0x1, 0x8, [{@multicast2, 0x5}, {@local, 0x10000}, {@rand_addr=0x64010101, 0x8}, {@local}, {@loopback, 0x3}, {@private=0xa010102, 0x8}, {@loopback}]}, @timestamp_prespec={0x44, 0x1c, 0x12, 0x3, 0x1, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @rr={0x7, 0xf, 0x5a, [@local, @remote, @loopback]}, @ssrr={0x89, 0x17, 0xc9, [@empty, @private=0xa010100, @loopback, @local, @empty]}]}}}}}) 2.563400681s ago: executing program 3 (id=2569): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0xffffffffffffffac, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x60) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600"], 0x0) fadvise64(r1, 0x807f, 0x1000000, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb70300000a000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000640), 0x20000000, 0x0) 1.921205753s ago: executing program 5 (id=2574): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001680)=""/228, 0xe4}], 0x1}, 0x6}], 0x1, 0x10120, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000400"/14], 0x14}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xffffdffffffffffe}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0xde, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x7}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setreuid(0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315f0ff3b000000ff070000800b0001006d61637365ffffffffffff4936005a2661da8df5b1ae7e67ac17c6e184a0e077daa38db939ff0962282a4d"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20030004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$caif_stream(0x25, 0x1, 0x4) flistxattr(r9, &(0x7f0000000700)=""/109, 0x6d) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000003c0)={0x1, 0x2, "db1805", 0x1, 0x40}) socket(0x11, 0x3, 0x0) epoll_create1(0x80000) syz_io_uring_setup(0x3139, &(0x7f00000004c0)={0x0, 0xb431, 0x4000, 0x3, 0x4f, 0x0, r3}, 0x0, 0x0) 1.917522333s ago: executing program 2 (id=2575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x88, 0x0, @remote, @local, {[], {0x0, 0x0, 0x2, 0x0, @gue={{0x2}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 1.854726163s ago: executing program 1 (id=2577): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x5, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="e22748e31ffc", 'vlan1\x00'}}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000}, 0x18) sendfile(r2, r1, 0x0, 0x8) 1.845569943s ago: executing program 1 (id=2578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x8140) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f00000000c0)="646c42f0964c27b0a2075e9b2ecd4385658b8e929822dfe3", &(0x7f0000000c00)=""/4096, &(0x7f00000003c0)="140249104b2857765b39774a1676acdc0b4122fc5434d1919161784901e72f9ed36324876e5e8735bf66c146c10c5dc36d4578b1630d7a2949b970936be593cf9a8b0539acb28ce0742029fcfa7858161a961fbeffb2f9605f72c5fecc56b286042367f28565205b421c11c6e309b706cc49", &(0x7f0000000240)="37addee31826418f88af1696b2d80ead8dd2daac8f09f49c", 0x100, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) 1.763669813s ago: executing program 3 (id=2579): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) 1.763436913s ago: executing program 5 (id=2580): r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0xfffffffa, 0x0, 0x3}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x6}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x8000, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3d8f}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x3}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x4d7}], [{0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1.342041225s ago: executing program 5 (id=2581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 1.319384745s ago: executing program 2 (id=2582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffff}}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x40, "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"}) 1.258376185s ago: executing program 2 (id=2583): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000100)={0x0, 0x7, 0x41b, {0x1}, 0x7, 0x4}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 1.231052976s ago: executing program 3 (id=2585): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[], 0x79) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 1.208582985s ago: executing program 5 (id=2586): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x103b01) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000006c0)='rss_stat\x00', r3, 0x0, 0x2}, 0x18) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.191274576s ago: executing program 2 (id=2587): sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = timerfd_create(0x8, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @qipcrtr={0x2a, 0x2, 0x4000}, @tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}}}, @nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x529, 0x3, 0x400}) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/177) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aebf00b321000000000000000000000377df768cff18ffcd83b1343f22750000000000000000"], 0x48) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000200)=0x8, 0x4) sendto$inet(r8, &(0x7f0000000140), 0x0, 0x4040810, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c2c0760008004500005800000000002f9078000000e0e000c800b48065580000000010000800000086dd080088be000000f41000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800655800000000992f7b4941"], 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) 1.174550756s ago: executing program 3 (id=2588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x8140) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000680), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f00000000c0)="646c42f0964c27b0a2075e9b2ecd4385658b8e929822dfe3", &(0x7f0000000c00)=""/4096, &(0x7f00000003c0)="140249104b2857765b39774a1676acdc0b4122fc5434d1919161784901e72f9ed36324876e5e8735bf66c146c10c5dc36d4578b1630d7a2949b970936be593cf9a8b0539acb28ce0742029fcfa7858161a961fbeffb2f9605f72c5fecc56b286042367f28565205b421c11c6e309b706cc49", &(0x7f0000000240)="37addee31826418f88af1696b2d80ead8dd2daac8f09f49c", 0x100, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0xd) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) 953.088026ms ago: executing program 1 (id=2589): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0xfffffffa, 0x0, 0x3}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x6}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x8000, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3d8f}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x3}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x4d7}], [{0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 795.217197ms ago: executing program 1 (id=2590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x34, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 742.897787ms ago: executing program 1 (id=2591): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0xffffffffffffffac, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x60) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600"], 0x0) fadvise64(r1, 0x807f, 0x1000000, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a608004500ac1414bba1aaeb98ddf51d548dbd8b9418740f93718c0920a6ea4d0ceaf112d7995c21265de284e3d43bffbaedcb9ca46a8395d90c0bb84505144b82b03124f1"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb70300000a000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000640), 0x20000000, 0x0) 311.847339ms ago: executing program 2 (id=2592): r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0xfffffffa, 0x0, 0x3}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x6}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x8000, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3d8f}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x3}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x4d7}], [{0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 279.918329ms ago: executing program 3 (id=2593): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x88, 0x0, @remote, @local, {[], {0x0, 0x0, 0x2, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 0s ago: executing program 1 (id=2594): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0xffffffffffffffac, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x60) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600"], 0x0) fadvise64(r1, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb70300000a000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000640), 0x20000000, 0x0) kernel console output (not intermixed with test programs): Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 144.564367][ T8558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.580070][ T8558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.628859][ T8565] netlink: 'syz.5.1770': attribute type 1 has an invalid length. [ 144.637399][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1770'. [ 144.703882][ T8574] loop2: detected capacity change from 0 to 128 [ 144.720781][ T8574] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 144.857981][ T8585] lo speed is unknown, defaulting to 1000 [ 144.864214][ T8585] lo speed is unknown, defaulting to 1000 [ 145.563084][ T8599] netlink: 'syz.5.1784': attribute type 1 has an invalid length. [ 145.571392][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1784'. [ 145.654993][ T8607] lo speed is unknown, defaulting to 1000 [ 145.661120][ T8607] lo speed is unknown, defaulting to 1000 [ 145.724251][ T8612] loop2: detected capacity change from 0 to 512 [ 145.744922][ T8612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.757743][ T8612] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.817759][ T8619] lo speed is unknown, defaulting to 1000 [ 145.824397][ T8619] lo speed is unknown, defaulting to 1000 [ 145.896149][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 145.896165][ T29] audit: type=1404 audit(2000000078.390:11871): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 145.948454][ T29] audit: type=1400 audit(2000000078.390:11872): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.972989][ T29] audit: type=1404 audit(2000000078.420:11873): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 145.988387][ T29] audit: type=1326 audit(2000000078.420:11874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 146.012063][ T29] audit: type=1400 audit(2000000078.420:11875): avc: denied { write } for pid=8621 comm="syz.1.1792" name="rt_acct" dev="proc" ino=4026532538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 146.035228][ T29] audit: type=1400 audit(2000000078.420:11876): avc: denied { create } for pid=8621 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.055020][ T29] audit: type=1400 audit(2000000078.420:11877): avc: denied { connect } for pid=8621 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.068330][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1796'. [ 146.074881][ T29] audit: type=1400 audit(2000000078.420:11878): avc: denied { map_create } for pid=8621 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.074918][ T29] audit: type=1326 audit(2000000078.420:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 146.074952][ T29] audit: type=1400 audit(2000000078.420:11880): avc: denied { prog_load } for pid=8621 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.127539][ T8628] loop1: detected capacity change from 0 to 128 [ 146.171008][ T8628] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 146.283900][ T8638] lo speed is unknown, defaulting to 1000 [ 146.296901][ T8638] lo speed is unknown, defaulting to 1000 [ 146.354883][ T8644] lo speed is unknown, defaulting to 1000 [ 146.361043][ T8644] lo speed is unknown, defaulting to 1000 [ 146.445477][ T36] IPVS: starting estimator thread 0... [ 146.499724][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.502482][ T8655] lo speed is unknown, defaulting to 1000 [ 146.515364][ T8655] lo speed is unknown, defaulting to 1000 [ 146.532137][ T8652] IPVS: using max 2400 ests per chain, 120000 per kthread [ 146.572368][ T3400] usb usb8-port1: unable to enumerate USB device [ 146.742649][ T8673] lo speed is unknown, defaulting to 1000 [ 146.748774][ T8673] lo speed is unknown, defaulting to 1000 [ 146.769541][ T8680] FAULT_INJECTION: forcing a failure. [ 146.769541][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 146.782391][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.0.1815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.782429][ T8680] Tainted: [W]=WARN [ 146.782437][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.782460][ T8680] Call Trace: [ 146.782465][ T8680] [ 146.782472][ T8680] __dump_stack+0x1d/0x30 [ 146.782498][ T8680] dump_stack_lvl+0xe8/0x140 [ 146.782524][ T8680] dump_stack+0x15/0x1b [ 146.782574][ T8680] should_fail_ex+0x265/0x280 [ 146.782593][ T8680] should_failslab+0x8c/0xb0 [ 146.782623][ T8680] kmem_cache_alloc_noprof+0x50/0x480 [ 146.782714][ T8680] ? audit_log_start+0x342/0x720 [ 146.782741][ T8680] audit_log_start+0x342/0x720 [ 146.782769][ T8680] audit_seccomp+0x48/0x100 [ 146.782843][ T8680] ? __seccomp_filter+0x82d/0x1250 [ 146.782870][ T8680] __seccomp_filter+0x83e/0x1250 [ 146.782905][ T8680] ? trace_save_cmdline+0x1c4/0x1f0 [ 146.782939][ T8680] ? _raw_spin_unlock+0x26/0x50 [ 146.782968][ T8680] __secure_computing+0x82/0x150 [ 146.783005][ T8680] syscall_trace_enter+0xcf/0x1e0 [ 146.783034][ T8680] do_syscall_64+0xac/0x200 [ 146.783051][ T8680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.783123][ T8680] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.783161][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.783254][ T8680] RIP: 0033:0x7fd384a1d9dc [ 146.783273][ T8680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.783295][ T8680] RSP: 002b:00007fd38347f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.783318][ T8680] RAX: ffffffffffffffda RBX: 00007fd384c75fa0 RCX: 00007fd384a1d9dc [ 146.783376][ T8680] RDX: 000000000000000f RSI: 00007fd38347f0a0 RDI: 0000000000000005 [ 146.783393][ T8680] RBP: 00007fd38347f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.783407][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.783418][ T8680] R13: 00007fd384c76038 R14: 00007fd384c75fa0 R15: 00007ffc8f74a268 [ 146.783437][ T8680] [ 147.151304][ T8695] lo speed is unknown, defaulting to 1000 [ 147.159149][ T8695] lo speed is unknown, defaulting to 1000 [ 147.211550][ T8707] loop7: detected capacity change from 0 to 7 [ 147.219935][ C0] blk_print_req_error: 1 callbacks suppressed [ 147.219954][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.235234][ C0] buffer_io_error: 1 callbacks suppressed [ 147.235253][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.258302][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.267533][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.275482][ T3566] loop7: unable to read partition table [ 147.290613][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.299997][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.317977][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.327160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.335058][ T8707] loop7: unable to read partition table [ 147.342813][ T8707] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 147.394310][ T8713] loop5: detected capacity change from 0 to 128 [ 147.430399][ T8713] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 147.526286][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.535500][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.546279][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.555488][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.568174][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.577392][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.589964][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.599144][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.607652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.616809][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.790122][ T8728] lo speed is unknown, defaulting to 1000 [ 147.807828][ T8728] lo speed is unknown, defaulting to 1000 [ 147.953572][ T8740] loop7: detected capacity change from 0 to 7 [ 147.960283][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.969476][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.977748][ T8740] loop7: unable to read partition table [ 147.985645][ T8740] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 148.102702][ T8746] lo speed is unknown, defaulting to 1000 [ 148.109047][ T8746] lo speed is unknown, defaulting to 1000 [ 148.399312][ T8763] lo speed is unknown, defaulting to 1000 [ 148.413187][ T8763] lo speed is unknown, defaulting to 1000 [ 148.451548][ T8769] loop7: detected capacity change from 0 to 7 [ 148.460737][ T8769] loop7: unable to read partition table [ 148.467089][ T8769] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 148.550594][ T8775] lo speed is unknown, defaulting to 1000 [ 148.567201][ T8775] lo speed is unknown, defaulting to 1000 [ 148.613248][ T8779] loop0: detected capacity change from 0 to 128 [ 148.633750][ T8779] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 149.127101][ T8804] lo speed is unknown, defaulting to 1000 [ 149.133324][ T8804] lo speed is unknown, defaulting to 1000 [ 149.182728][ T3400] usb usb8-port1: attempt power cycle [ 149.235851][ T8808] lo speed is unknown, defaulting to 1000 [ 149.242249][ T8808] lo speed is unknown, defaulting to 1000 [ 149.535035][ T8830] lo speed is unknown, defaulting to 1000 [ 149.541321][ T8830] lo speed is unknown, defaulting to 1000 [ 149.590513][ T8834] lo speed is unknown, defaulting to 1000 [ 149.597404][ T8834] lo speed is unknown, defaulting to 1000 [ 149.859891][ T8852] loop5: detected capacity change from 0 to 128 [ 149.900343][ T8852] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 150.119812][ T8863] lo speed is unknown, defaulting to 1000 [ 150.130573][ T8863] lo speed is unknown, defaulting to 1000 [ 150.337133][ T8869] lo speed is unknown, defaulting to 1000 [ 150.353396][ T8869] lo speed is unknown, defaulting to 1000 [ 150.710443][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'. [ 150.904328][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 150.904351][ T29] audit: type=1400 audit(2000000083.390:12649): avc: denied { create } for pid=8878 comm="syz.0.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.936530][ T8877] lo speed is unknown, defaulting to 1000 [ 150.944266][ T8877] lo speed is unknown, defaulting to 1000 [ 150.981001][ T29] audit: type=1400 audit(2000000083.420:12650): avc: denied { write } for pid=8878 comm="syz.0.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.014693][ T3400] usb usb8-port1: unable to enumerate USB device [ 151.044921][ T29] audit: type=1404 audit(2000000083.540:12651): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 151.089640][ T29] audit: type=1404 audit(2000000083.550:12652): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 151.104798][ T29] audit: type=1400 audit(2000000083.560:12653): avc: denied { write } for pid=8882 comm="syz.0.1893" name="rt_acct" dev="proc" ino=4026532760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 151.127809][ T29] audit: type=1400 audit(2000000083.560:12654): avc: denied { create } for pid=8882 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.147595][ T29] audit: type=1400 audit(2000000083.560:12655): avc: denied { connect } for pid=8882 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.167412][ T29] audit: type=1400 audit(2000000083.560:12656): avc: denied { map_create } for pid=8882 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.186621][ T29] audit: type=1400 audit(2000000083.560:12657): avc: denied { prog_load } for pid=8882 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.205800][ T29] audit: type=1400 audit(2000000083.560:12658): avc: denied { bpf } for pid=8882 comm="syz.0.1893" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.498502][ T8896] loop5: detected capacity change from 0 to 128 [ 151.519265][ T8896] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 152.201355][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1902'. [ 152.495058][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1913'. [ 152.529053][ T8934] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 152.535794][ T8934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.543348][ T8934] vhci_hcd vhci_hcd.0: Device attached [ 152.556291][ T8938] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 152.648114][ T8935] vhci_hcd: connection closed [ 152.660340][ T3490] vhci_hcd: stop threads [ 152.669417][ T3490] vhci_hcd: release socket [ 152.673878][ T3490] vhci_hcd: disconnect device [ 152.730792][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.738177][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.976638][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.990276][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.049616][ T8933] ip6gre1: left allmulticast mode [ 153.058466][ T36] lo speed is unknown, defaulting to 1000 [ 153.064310][ T36] syz2: Port: 1 Link DOWN [ 153.077219][ T4725] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.086906][ T4725] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.095725][ T4725] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.104407][ T4725] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.117073][ T8948] lo speed is unknown, defaulting to 1000 [ 153.124102][ T8948] lo speed is unknown, defaulting to 1000 [ 153.148097][ T8966] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 153.363932][ T8979] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 153.420767][ T8990] loop3: detected capacity change from 0 to 512 [ 153.429740][ T8990] EXT4-fs: dax option not supported [ 153.462947][ T8990] loop3: detected capacity change from 0 to 256 [ 153.478721][ T8990] vfat: Unknown parameter '1844674407370955161501777777777777777777777' [ 153.499110][ T8998] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.585899][ T8998] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.612364][ T3400] usb usb8-port1: attempt power cycle [ 153.634654][ T8998] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.695239][ T8998] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.760870][ T3490] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.773306][ T360] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.784964][ T360] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.796630][ T360] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.174529][ T9014] FAULT_INJECTION: forcing a failure. [ 154.174529][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 154.187233][ T9014] CPU: 0 UID: 0 PID: 9014 Comm: syz.2.1940 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.187267][ T9014] Tainted: [W]=WARN [ 154.187275][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.187291][ T9014] Call Trace: [ 154.187300][ T9014] [ 154.187359][ T9014] __dump_stack+0x1d/0x30 [ 154.187408][ T9014] dump_stack_lvl+0xe8/0x140 [ 154.187430][ T9014] dump_stack+0x15/0x1b [ 154.187482][ T9014] should_fail_ex+0x265/0x280 [ 154.187504][ T9014] ? rtnl_newlink+0x5c/0x12d0 [ 154.187583][ T9014] should_failslab+0x8c/0xb0 [ 154.187673][ T9014] __kmalloc_cache_noprof+0x4c/0x4a0 [ 154.187715][ T9014] rtnl_newlink+0x5c/0x12d0 [ 154.187741][ T9014] ? css_rstat_updated+0xb7/0x240 [ 154.187797][ T9014] ? __rcu_read_unlock+0x4f/0x70 [ 154.187838][ T9014] ? __rcu_read_unlock+0x4f/0x70 [ 154.187869][ T9014] ? refill_stock+0x32f/0x390 [ 154.187900][ T9014] ? __rcu_read_unlock+0x34/0x70 [ 154.187932][ T9014] ? bpf_get_current_ancestor_cgroup_id+0xd5/0xf0 [ 154.188052][ T9014] ? __rcu_read_unlock+0x34/0x70 [ 154.188084][ T9014] ? bpf_trace_run3+0x12c/0x1d0 [ 154.188132][ T9014] ? __memcg_slab_free_hook+0x135/0x230 [ 154.188155][ T9014] ? __rcu_read_unlock+0x4f/0x70 [ 154.188185][ T9014] ? avc_has_perm_noaudit+0x1b1/0x200 [ 154.188212][ T9014] ? cred_has_capability+0x210/0x280 [ 154.188254][ T9014] ? selinux_capable+0x31/0x40 [ 154.188297][ T9014] ? security_capable+0x83/0x90 [ 154.188394][ T9014] ? ns_capable+0x7d/0xb0 [ 154.188424][ T9014] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.188454][ T9014] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 154.188547][ T9014] netlink_rcv_skb+0x123/0x220 [ 154.188603][ T9014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.188640][ T9014] rtnetlink_rcv+0x1c/0x30 [ 154.188663][ T9014] netlink_unicast+0x5c0/0x690 [ 154.188817][ T9014] netlink_sendmsg+0x58b/0x6b0 [ 154.188838][ T9014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.188857][ T9014] __sock_sendmsg+0x145/0x180 [ 154.188927][ T9014] ____sys_sendmsg+0x31e/0x4e0 [ 154.188964][ T9014] ___sys_sendmsg+0x17b/0x1d0 [ 154.189024][ T9014] __x64_sys_sendmsg+0xd4/0x160 [ 154.189071][ T9014] x64_sys_call+0x191e/0x3000 [ 154.189116][ T9014] do_syscall_64+0xd2/0x200 [ 154.189139][ T9014] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.189174][ T9014] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.189238][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.189344][ T9014] RIP: 0033:0x7f46633defc9 [ 154.189364][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.189452][ T9014] RSP: 002b:00007f4661e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.189474][ T9014] RAX: ffffffffffffffda RBX: 00007f4663635fa0 RCX: 00007f46633defc9 [ 154.189564][ T9014] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000005 [ 154.189577][ T9014] RBP: 00007f4661e47090 R08: 0000000000000000 R09: 0000000000000000 [ 154.189588][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.189600][ T9014] R13: 00007f4663636038 R14: 00007f4663635fa0 R15: 00007ffcdb635f88 [ 154.189618][ T9014] [ 154.618994][ T9028] loop7: detected capacity change from 0 to 7 [ 154.625627][ C1] blk_print_req_error: 13 callbacks suppressed [ 154.625642][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.641200][ C1] buffer_io_error: 13 callbacks suppressed [ 154.641217][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.655033][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.664238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.672110][ T9028] loop7: unable to read partition table [ 154.677779][ T9028] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 154.679052][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.700524][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.713518][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.722725][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.742036][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.751229][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.759466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.768786][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.777293][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.786487][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.852862][ T9040] loop2: detected capacity change from 0 to 128 [ 154.866095][ T9040] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 155.042950][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1953'. [ 155.187588][ T9056] loop7: detected capacity change from 0 to 7 [ 155.194351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.203530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.211564][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.220735][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.228813][ T9056] loop7: unable to read partition table [ 155.234790][ T9056] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.236768][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.257536][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.275770][ T9058] loop0: detected capacity change from 0 to 164 [ 155.284818][ T9058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.296685][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'. [ 155.407265][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1964'. [ 155.432471][ T3400] usb usb8-port1: unable to enumerate USB device [ 155.742949][ T9083] loop7: detected capacity change from 0 to 7 [ 155.934997][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 155.935033][ T29] audit: type=1400 audit(2000000088.430:13336): avc: denied { create } for pid=9090 comm="syz.2.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.023815][ T29] audit: type=1400 audit(2000000088.470:13337): avc: denied { read write } for pid=9090 comm="syz.2.1975" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.026126][ T3566] loop7: unable to read partition table [ 156.047569][ T29] audit: type=1400 audit(2000000088.470:13338): avc: denied { open } for pid=9090 comm="syz.2.1975" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.077880][ T9083] loop7: unable to read partition table [ 156.081724][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1976'. [ 156.084261][ T9083] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 156.139022][ T29] audit: type=1400 audit(2000000088.630:13339): avc: denied { create } for pid=9095 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 156.171732][ T29] audit: type=1400 audit(2000000088.660:13340): avc: denied { read } for pid=9095 comm="syz.3.1977" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.172621][ T9098] FAULT_INJECTION: forcing a failure. [ 156.172621][ T9098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.193072][ T29] audit: type=1400 audit(2000000088.660:13341): avc: denied { open } for pid=9095 comm="syz.3.1977" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.206396][ T9098] CPU: 0 UID: 0 PID: 9098 Comm: syz.5.1978 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.206432][ T9098] Tainted: [W]=WARN [ 156.206441][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.206459][ T9098] Call Trace: [ 156.206467][ T9098] [ 156.206476][ T9098] __dump_stack+0x1d/0x30 [ 156.206561][ T9098] dump_stack_lvl+0xe8/0x140 [ 156.206657][ T9098] dump_stack+0x15/0x1b [ 156.206682][ T9098] should_fail_ex+0x265/0x280 [ 156.206709][ T9098] should_fail+0xb/0x20 [ 156.206730][ T9098] should_fail_usercopy+0x1a/0x20 [ 156.206760][ T9098] _copy_to_user+0x20/0xa0 [ 156.206810][ T9098] __se_sys_shmctl+0x1f3/0x420 [ 156.206847][ T9098] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 156.206974][ T9098] __x64_sys_shmctl+0x43/0x50 [ 156.207005][ T9098] x64_sys_call+0x18c9/0x3000 [ 156.207035][ T9098] do_syscall_64+0xd2/0x200 [ 156.207061][ T9098] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.207158][ T9098] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.207202][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.207230][ T9098] RIP: 0033:0x7fe8f425efc9 [ 156.207251][ T9098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.207301][ T9098] RSP: 002b:00007fe8f2cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 156.207327][ T9098] RAX: ffffffffffffffda RBX: 00007fe8f44b5fa0 RCX: 00007fe8f425efc9 [ 156.207344][ T9098] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 156.207361][ T9098] RBP: 00007fe8f2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.207378][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.207394][ T9098] R13: 00007fe8f44b6038 R14: 00007fe8f44b5fa0 R15: 00007ffd774777a8 [ 156.207421][ T9098] [ 156.350456][ T9104] lo speed is unknown, defaulting to 1000 [ 156.360335][ T29] audit: type=1400 audit(2000000088.660:13342): avc: denied { create } for pid=9095 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.437937][ T29] audit: type=1400 audit(2000000088.660:13343): avc: denied { write } for pid=9095 comm="syz.3.1977" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.452514][ T29] audit: type=1326 audit(2000000088.660:13344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 156.452556][ T29] audit: type=1326 audit(2000000088.660:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8f425d810 code=0x7ffc0000 [ 156.482332][ T9104] lo speed is unknown, defaulting to 1000 [ 156.525842][ T9111] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 156.624043][ T9120] FAULT_INJECTION: forcing a failure. [ 156.624043][ T9120] name failslab, interval 1, probability 0, space 0, times 0 [ 156.636806][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.0.1987 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.636842][ T9120] Tainted: [W]=WARN [ 156.636849][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.636865][ T9120] Call Trace: [ 156.636872][ T9120] [ 156.636881][ T9120] __dump_stack+0x1d/0x30 [ 156.636908][ T9120] dump_stack_lvl+0xe8/0x140 [ 156.636956][ T9120] dump_stack+0x15/0x1b [ 156.636977][ T9120] should_fail_ex+0x265/0x280 [ 156.637002][ T9120] should_failslab+0x8c/0xb0 [ 156.637092][ T9120] kmem_cache_alloc_noprof+0x50/0x480 [ 156.637129][ T9120] ? prepare_creds+0x37/0x4c0 [ 156.637334][ T9120] prepare_creds+0x37/0x4c0 [ 156.637367][ T9120] __sys_setreuid+0xdc/0x520 [ 156.637467][ T9120] ? trace_sys_enter+0xd0/0xf0 [ 156.637503][ T9120] __x64_sys_setreuid+0x2d/0x40 [ 156.637558][ T9120] x64_sys_call+0x2450/0x3000 [ 156.637587][ T9120] do_syscall_64+0xd2/0x200 [ 156.637610][ T9120] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.637645][ T9120] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.637725][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.637759][ T9120] RIP: 0033:0x7fd384a1efc9 [ 156.637778][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.637836][ T9120] RSP: 002b:00007fd38347f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 156.637861][ T9120] RAX: ffffffffffffffda RBX: 00007fd384c75fa0 RCX: 00007fd384a1efc9 [ 156.637876][ T9120] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 156.637891][ T9120] RBP: 00007fd38347f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.637906][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.637920][ T9120] R13: 00007fd384c76038 R14: 00007fd384c75fa0 R15: 00007ffc8f74a268 [ 156.637944][ T9120] [ 156.646225][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1989'. [ 156.979050][ T9146] loop2: detected capacity change from 0 to 128 [ 157.147306][ T9146] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 157.692782][ T9156] lo speed is unknown, defaulting to 1000 [ 157.699024][ T9156] lo speed is unknown, defaulting to 1000 [ 157.724033][ T9158] loop5: detected capacity change from 0 to 8192 [ 157.762887][ T9158] FAT-fs (loop5): bogus number of reserved sectors [ 157.769452][ T9158] FAT-fs (loop5): Can't find a valid FAT filesystem [ 157.848754][ T9167] loop7: detected capacity change from 0 to 7 [ 157.880414][ T9167] loop7: unable to read partition table [ 157.903143][ T9167] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 157.997693][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2014'. [ 158.009010][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2014'. [ 158.074080][ T9186] lo speed is unknown, defaulting to 1000 [ 158.085294][ T9190] loop1: detected capacity change from 0 to 1024 [ 158.096854][ T9190] ext4: Unknown parameter 'uid<00000000000000000000' [ 158.102807][ T9193] lo speed is unknown, defaulting to 1000 [ 158.105953][ T9186] lo speed is unknown, defaulting to 1000 [ 158.126048][ T9193] lo speed is unknown, defaulting to 1000 [ 158.191907][ T9200] loop1: detected capacity change from 0 to 128 [ 158.231682][ T9200] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 158.336924][ T9210] loop7: detected capacity change from 0 to 7 [ 158.353616][ T9210] loop7: unable to read partition table [ 158.359443][ T9210] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 158.373410][ T8959] usb usb8-port1: attempt power cycle [ 158.416140][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2026'. [ 158.431549][ T9214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2026'. [ 158.611625][ T9222] loop5: detected capacity change from 0 to 512 [ 158.635564][ T9222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.651542][ T9222] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 158.668015][ T9222] EXT4-fs (loop5): 1 truncate cleaned up [ 158.675558][ T9222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.700231][ T9222] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 158.724423][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.864755][ T9236] lo speed is unknown, defaulting to 1000 [ 158.870985][ T9236] lo speed is unknown, defaulting to 1000 [ 158.945842][ T9244] loop7: detected capacity change from 0 to 7 [ 158.957040][ T9244] loop7: unable to read partition table [ 158.962987][ T9244] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 159.044346][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2038'. [ 159.067286][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2038'. [ 159.107092][ T9258] FAULT_INJECTION: forcing a failure. [ 159.107092][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 159.119866][ T9258] CPU: 0 UID: 0 PID: 9258 Comm: syz.1.2043 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.120008][ T9258] Tainted: [W]=WARN [ 159.120015][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.120031][ T9258] Call Trace: [ 159.120038][ T9258] [ 159.120048][ T9258] __dump_stack+0x1d/0x30 [ 159.120148][ T9258] dump_stack_lvl+0xe8/0x140 [ 159.120189][ T9258] dump_stack+0x15/0x1b [ 159.120220][ T9258] should_fail_ex+0x265/0x280 [ 159.120242][ T9258] ? asymmetric_key_describe+0xc1/0x150 [ 159.120270][ T9258] should_failslab+0x8c/0xb0 [ 159.120298][ T9258] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 159.120415][ T9258] ? asymmetric_lookup_restriction+0x7b/0x370 [ 159.120447][ T9258] ? should_fail_ex+0xdb/0x280 [ 159.120468][ T9258] ? asymmetric_key_describe+0xc1/0x150 [ 159.120556][ T9258] kstrndup+0x80/0x130 [ 159.120617][ T9258] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 159.120644][ T9258] asymmetric_lookup_restriction+0x7b/0x370 [ 159.120681][ T9258] ? strcmp+0x22/0x50 [ 159.120701][ T9258] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 159.120760][ T9258] keyring_restrict+0xf7/0x280 [ 159.120788][ T9258] keyctl_restrict_keyring+0x107/0x1b0 [ 159.120877][ T9258] __se_sys_keyctl+0x1ed/0xb80 [ 159.120900][ T9258] ? bpf_trace_run2+0x124/0x1c0 [ 159.120937][ T9258] ? __rcu_read_unlock+0x4f/0x70 [ 159.120968][ T9258] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 159.120995][ T9258] ? __bpf_trace_sys_enter+0x10/0x30 [ 159.121027][ T9258] ? __traceiter_sys_enter+0x5c/0x80 [ 159.121131][ T9258] __x64_sys_keyctl+0x67/0x80 [ 159.121150][ T9258] x64_sys_call+0x2f7c/0x3000 [ 159.121172][ T9258] do_syscall_64+0xd2/0x200 [ 159.121190][ T9258] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.121298][ T9258] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.121374][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.121394][ T9258] RIP: 0033:0x7ff1ba37efc9 [ 159.121411][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.121511][ T9258] RSP: 002b:00007ff1b8de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 159.121536][ T9258] RAX: ffffffffffffffda RBX: 00007ff1ba5d5fa0 RCX: 00007ff1ba37efc9 [ 159.121552][ T9258] RDX: 0000200000000200 RSI: 0000000015176a8d RDI: 000000000000001d [ 159.121567][ T9258] RBP: 00007ff1b8de7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.121632][ T9258] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 159.121647][ T9258] R13: 00007ff1ba5d6038 R14: 00007ff1ba5d5fa0 R15: 00007ffcc43dffc8 [ 159.121679][ T9258] [ 159.421064][ T9262] lo speed is unknown, defaulting to 1000 [ 159.449248][ T9262] lo speed is unknown, defaulting to 1000 [ 159.522345][ T9271] loop7: detected capacity change from 0 to 7 [ 159.529457][ T9271] loop7: unable to read partition table [ 159.531582][ T9267] lo speed is unknown, defaulting to 1000 [ 159.538775][ T9271] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 159.586498][ T9267] lo speed is unknown, defaulting to 1000 [ 159.612332][ T9277] loop2: detected capacity change from 0 to 128 [ 159.629676][ T9277] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 159.785736][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'. [ 159.795392][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2056'. [ 160.326658][ T9306] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.374862][ T9306] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.434014][ T9306] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.474618][ T9311] lo speed is unknown, defaulting to 1000 [ 160.480756][ T9311] lo speed is unknown, defaulting to 1000 [ 160.493545][ T9306] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.523546][ T8959] usb usb8-port1: unable to enumerate USB device [ 160.592132][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.613329][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.626199][ T9315] lo speed is unknown, defaulting to 1000 [ 160.632894][ T9315] lo speed is unknown, defaulting to 1000 [ 160.681471][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.681706][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.739131][ T9324] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 160.739158][ T9324] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.739194][ T9324] vhci_hcd vhci_hcd.0: Device attached [ 160.740387][ T9327] vhci_hcd: connection closed [ 160.742606][ T52] vhci_hcd: stop threads [ 160.742620][ T52] vhci_hcd: release socket [ 160.742633][ T52] vhci_hcd: disconnect device [ 160.828668][ T9334] netlink: 'syz.5.2072': attribute type 3 has an invalid length. [ 160.881180][ T9338] loop5: detected capacity change from 0 to 2048 [ 160.902473][ T9338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.902691][ T9338] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.920997][ T9343] +: renamed from syzkaller0 [ 160.978818][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 160.978887][ T29] audit: type=1400 audit(2000000093.470:14094): avc: denied { open } for pid=9344 comm="syz.1.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.004524][ T29] audit: type=1400 audit(2000000093.470:14095): avc: denied { kernel } for pid=9344 comm="syz.1.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.026647][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.026834][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.044898][ T9347] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2074: bg 0: block 345: padding at end of block bitmap is not set [ 161.053259][ T29] audit: type=1400 audit(2000000093.520:14096): avc: denied { read write } for pid=9337 comm="syz.5.2074" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.098813][ T29] audit: type=1400 audit(2000000093.520:14097): avc: denied { open } for pid=9337 comm="syz.5.2074" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.098892][ T29] audit: type=1400 audit(2000000093.520:14098): avc: denied { ioctl } for pid=9337 comm="syz.5.2074" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.099021][ T29] audit: type=1400 audit(2000000093.530:14099): avc: denied { create } for pid=9346 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.099049][ T29] audit: type=1400 audit(2000000093.530:14100): avc: denied { create } for pid=9346 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.100301][ T9347] EXT4-fs (loop5): Remounting filesystem read-only [ 161.133823][ T9349] lo speed is unknown, defaulting to 1000 [ 161.201177][ T29] audit: type=1400 audit(2000000093.660:14101): avc: denied { read } for pid=9337 comm="syz.5.2074" dev="nsfs" ino=4026533166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.201212][ T29] audit: type=1400 audit(2000000093.660:14102): avc: denied { open } for pid=9337 comm="syz.5.2074" path="net:[4026533166]" dev="nsfs" ino=4026533166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.201236][ T29] audit: type=1326 audit(2000000093.660:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.5.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 161.278330][ T9349] lo speed is unknown, defaulting to 1000 [ 161.299784][ T9338] netlink: 'syz.5.2074': attribute type 1 has an invalid length. [ 161.307579][ T9338] __nla_validate_parse: 1 callbacks suppressed [ 161.307651][ T9338] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2074'. [ 161.473672][ T9360] loop1: detected capacity change from 0 to 128 [ 161.484638][ T9360] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 161.852612][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.072089][ T9370] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2081'. [ 162.519825][ T9375] lo speed is unknown, defaulting to 1000 [ 162.527237][ T9375] lo speed is unknown, defaulting to 1000 [ 162.587007][ T9385] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 162.593560][ T9385] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.601150][ T9385] vhci_hcd vhci_hcd.0: Device attached [ 162.607833][ T9386] vhci_hcd: connection closed [ 162.607946][ T37] vhci_hcd: stop threads [ 162.617063][ T37] vhci_hcd: release socket [ 162.621706][ T37] vhci_hcd: disconnect device [ 162.650366][ T9389] netlink: 'syz.1.2090': attribute type 3 has an invalid length. [ 162.773817][ T9395] loop5: detected capacity change from 0 to 2048 [ 162.804240][ T9395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.816679][ T9395] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.932994][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.941464][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.978794][ T9401] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2093: bg 0: block 345: padding at end of block bitmap is not set [ 162.993849][ T9401] EXT4-fs (loop5): Remounting filesystem read-only [ 163.157007][ T9405] loop0: detected capacity change from 0 to 128 [ 163.179819][ T9405] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.202660][ T8950] usb usb8-port1: attempt power cycle [ 163.335714][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 163.359034][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2096'. [ 163.544065][ T9421] netlink: 'syz.1.2102': attribute type 3 has an invalid length. [ 163.765375][ T9425] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2103'. [ 163.917020][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.144413][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2107'. [ 164.163539][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2107'. [ 164.288156][ T9447] netlink: 'syz.5.2113': attribute type 3 has an invalid length. [ 164.418035][ T9453] loop5: detected capacity change from 0 to 128 [ 164.431681][ T9453] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 164.484625][ T9455] loop1: detected capacity change from 0 to 2048 [ 164.513332][ T9455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.525795][ T9455] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.588840][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.597622][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.615381][ T9459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2117: bg 0: block 345: padding at end of block bitmap is not set [ 164.630225][ T9459] EXT4-fs (loop1): Remounting filesystem read-only [ 164.659965][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 164.683754][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2118'. [ 164.821158][ T9476] netlink: 'syz.2.2125': attribute type 3 has an invalid length. [ 164.865680][ T9479] lo speed is unknown, defaulting to 1000 [ 164.872388][ T9479] lo speed is unknown, defaulting to 1000 [ 164.931157][ T9482] lo speed is unknown, defaulting to 1000 [ 164.938021][ T9482] lo speed is unknown, defaulting to 1000 [ 164.977040][ T9486] +: renamed from syzkaller0 [ 165.213993][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.243286][ T8950] usb usb8-port1: unable to enumerate USB device [ 165.325317][ T9505] lo speed is unknown, defaulting to 1000 [ 165.331675][ T9505] lo speed is unknown, defaulting to 1000 [ 165.361758][ T9507] netlink: 'syz.5.2138': attribute type 3 has an invalid length. [ 165.464096][ T9514] lo speed is unknown, defaulting to 1000 [ 165.470414][ T9514] lo speed is unknown, defaulting to 1000 [ 165.491487][ T9517] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 165.498054][ T9517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.505643][ T9517] vhci_hcd vhci_hcd.0: Device attached [ 165.514859][ T9519] vhci_hcd: connection closed [ 165.515376][ T37] vhci_hcd: stop threads [ 165.524388][ T37] vhci_hcd: release socket [ 165.528819][ T37] vhci_hcd: disconnect device [ 165.558478][ T9523] +: renamed from syzkaller0 [ 165.642494][ T9527] loop1: detected capacity change from 0 to 128 [ 165.658992][ T9527] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 165.967099][ T9547] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 166.019989][ T9549] lo speed is unknown, defaulting to 1000 [ 166.030504][ T9549] lo speed is unknown, defaulting to 1000 [ 166.066412][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 166.066430][ T29] audit: type=1400 audit(2000000098.560:14628): avc: denied { read write } for pid=9552 comm="syz.3.2156" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.087913][ T9551] lo speed is unknown, defaulting to 1000 [ 166.097415][ T29] audit: type=1400 audit(2000000098.560:14629): avc: denied { open } for pid=9552 comm="syz.3.2156" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.120808][ T9551] lo speed is unknown, defaulting to 1000 [ 166.145620][ T29] audit: type=1400 audit(2000000098.640:14630): avc: denied { name_bind } for pid=9550 comm="syz.5.2155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 166.172551][ T29] audit: type=1400 audit(2000000098.640:14631): avc: denied { node_bind } for pid=9550 comm="syz.5.2155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 166.201919][ T29] audit: type=1404 audit(2000000098.690:14632): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 166.221574][ T29] audit: type=1404 audit(2000000098.710:14633): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 166.239632][ T29] audit: type=1400 audit(2000000098.710:14634): avc: denied { write } for pid=9558 comm="syz.0.2157" name="rt_acct" dev="proc" ino=4026532760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.262825][ T29] audit: type=1400 audit(2000000098.710:14635): avc: denied { create } for pid=9558 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.282594][ T29] audit: type=1400 audit(2000000098.710:14636): avc: denied { connect } for pid=9558 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.301948][ T9562] +: renamed from syzkaller0 [ 166.302575][ T29] audit: type=1400 audit(2000000098.710:14637): avc: denied { map_create } for pid=9558 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.509275][ T9576] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 166.515894][ T9576] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.523427][ T9576] vhci_hcd vhci_hcd.0: Device attached [ 166.532446][ T9580] netlink: 'syz.1.2166': attribute type 3 has an invalid length. [ 166.534468][ T9577] vhci_hcd: connection closed [ 166.540601][ T416] vhci_hcd: stop threads [ 166.549672][ T416] vhci_hcd: release socket [ 166.554132][ T416] vhci_hcd: disconnect device [ 166.576909][ T9582] lo speed is unknown, defaulting to 1000 [ 166.583168][ T9582] lo speed is unknown, defaulting to 1000 [ 166.701703][ T9589] lo speed is unknown, defaulting to 1000 [ 166.708174][ T9589] lo speed is unknown, defaulting to 1000 [ 166.744033][ T9591] +: renamed from syzkaller0 [ 166.955246][ T9605] netlink: 'syz.1.2177': attribute type 1 has an invalid length. [ 166.968651][ T9605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.980786][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2177'. [ 166.991862][ T9605] bond1 (unregistering): Released all slaves [ 167.090606][ T9610] lo speed is unknown, defaulting to 1000 [ 167.097121][ T9610] lo speed is unknown, defaulting to 1000 [ 167.199180][ T9619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.208263][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 167.219650][ T9619] bond1 (unregistering): Released all slaves [ 167.313314][ T9628] netlink: 'syz.0.2186': attribute type 3 has an invalid length. [ 167.365006][ T9634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 167.371592][ T9634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.379513][ T9634] vhci_hcd vhci_hcd.0: Device attached [ 167.387048][ T9635] vhci_hcd: connection closed [ 167.387363][ T3490] vhci_hcd: stop threads [ 167.396512][ T3490] vhci_hcd: release socket [ 167.400983][ T3490] vhci_hcd: disconnect device [ 167.409552][ T9638] lo speed is unknown, defaulting to 1000 [ 167.415791][ T9638] lo speed is unknown, defaulting to 1000 [ 167.488128][ T9642] lo speed is unknown, defaulting to 1000 [ 167.494428][ T9642] lo speed is unknown, defaulting to 1000 [ 167.562826][ T3388] usb usb8-port1: attempt power cycle [ 167.580552][ T9647] syz_tun: entered allmulticast mode [ 167.587382][ T9646] syz_tun: left allmulticast mode [ 167.698851][ T9658] netlink: 'syz.0.2199': attribute type 3 has an invalid length. [ 167.716313][ T9659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.729441][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2198'. [ 167.746038][ T9659] bond1 (unregistering): Released all slaves [ 167.803847][ T9666] lo speed is unknown, defaulting to 1000 [ 167.810035][ T9666] lo speed is unknown, defaulting to 1000 [ 167.849124][ T9668] lo speed is unknown, defaulting to 1000 [ 167.855919][ T9668] lo speed is unknown, defaulting to 1000 [ 167.951890][ T9674] syz_tun: entered allmulticast mode [ 167.962975][ T9673] syz_tun: left allmulticast mode [ 167.978696][ T9677] lo speed is unknown, defaulting to 1000 [ 167.986557][ T9677] lo speed is unknown, defaulting to 1000 [ 168.139657][ T9693] netlink: 'syz.1.2212': attribute type 3 has an invalid length. [ 168.226685][ T9698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.236311][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2214'. [ 168.247665][ T9698] bond1 (unregistering): Released all slaves [ 168.383055][ T9702] lo speed is unknown, defaulting to 1000 [ 168.389652][ T9702] lo speed is unknown, defaulting to 1000 [ 168.494325][ T9706] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 168.500876][ T9706] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.508531][ T9706] vhci_hcd vhci_hcd.0: Device attached [ 168.526690][ T9707] vhci_hcd: connection closed [ 168.527019][ T52] vhci_hcd: stop threads [ 168.536026][ T52] vhci_hcd: release socket [ 168.540477][ T52] vhci_hcd: disconnect device [ 168.588702][ T9710] loop1: detected capacity change from 0 to 2048 [ 168.604621][ T9710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.626613][ T9710] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.655047][ T9715] syz_tun: entered allmulticast mode [ 168.661697][ T9714] syz_tun: left allmulticast mode [ 168.697500][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.715486][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.730370][ T9717] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2217: bg 0: block 345: padding at end of block bitmap is not set [ 168.745790][ T9717] EXT4-fs (loop1): Remounting filesystem read-only [ 168.869775][ T9726] lo speed is unknown, defaulting to 1000 [ 168.876630][ T9726] lo speed is unknown, defaulting to 1000 [ 168.981735][ T9729] netlink: 'syz.5.2224': attribute type 3 has an invalid length. [ 169.044742][ T9733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.064222][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2226'. [ 169.085539][ T9733] bond1 (unregistering): Released all slaves [ 169.121513][ T9737] lo speed is unknown, defaulting to 1000 [ 169.128028][ T9737] lo speed is unknown, defaulting to 1000 [ 169.552391][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.578059][ T9746] syz_tun: entered allmulticast mode [ 169.584798][ T9745] syz_tun: left allmulticast mode [ 169.722229][ T3388] usb usb8-port1: unable to enumerate USB device [ 169.789854][ T9752] loop2: detected capacity change from 0 to 2048 [ 169.805200][ T9752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.817633][ T9752] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.891750][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.928621][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.052699][ T9757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2232: bg 0: block 345: padding at end of block bitmap is not set [ 170.068080][ T9757] EXT4-fs (loop2): Remounting filesystem read-only [ 170.103249][ T9764] lo speed is unknown, defaulting to 1000 [ 170.109636][ T9764] lo speed is unknown, defaulting to 1000 [ 170.166401][ T9752] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 170.174334][ T9752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2232'. [ 170.222369][ T9768] netlink: 'syz.3.2237': attribute type 3 has an invalid length. [ 170.370941][ T9778] syz_tun: entered allmulticast mode [ 170.378164][ T9777] syz_tun: left allmulticast mode [ 170.844536][ T9784] serio: Serial port ttyS3 [ 170.974758][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.006699][ T9787] +: renamed from syzkaller0 [ 171.142214][ T9796] netlink: 'syz.3.2248': attribute type 3 has an invalid length. [ 171.157574][ T9794] lo speed is unknown, defaulting to 1000 [ 171.183125][ T9794] lo speed is unknown, defaulting to 1000 [ 171.396575][ T9802] lo speed is unknown, defaulting to 1000 [ 171.473371][ T9802] lo speed is unknown, defaulting to 1000 [ 171.593827][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 171.593844][ T29] audit: type=1326 audit(2000000104.090:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.623654][ T29] audit: type=1326 audit(2000000104.090:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.653075][ T29] audit: type=1326 audit(2000000104.100:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.676689][ T29] audit: type=1326 audit(2000000104.100:15017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.700312][ T29] audit: type=1326 audit(2000000104.100:15018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.724022][ T29] audit: type=1326 audit(2000000104.100:15019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.747715][ T29] audit: type=1326 audit(2000000104.100:15020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.771394][ T29] audit: type=1326 audit(2000000104.100:15021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.795036][ T29] audit: type=1326 audit(2000000104.100:15022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.818733][ T29] audit: type=1326 audit(2000000104.100:15023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 171.843725][ T9810] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.945915][ T9810] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.034298][ T9810] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.114712][ T9810] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.176556][ T4725] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.210900][ T4725] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.219840][ T4725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.238694][ T4725] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.321840][ T9821] loop2: detected capacity change from 0 to 2048 [ 172.365625][ T9825] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 172.377182][ T9821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.387106][ T9825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.389653][ T9821] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.400379][ T9825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2256'. [ 172.426176][ T9825] bond2 (unregistering): Released all slaves [ 172.463067][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.471629][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.472559][ T3400] usb usb8-port1: attempt power cycle [ 172.490974][ T9830] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2254: bg 0: block 345: padding at end of block bitmap is not set [ 172.505969][ T9830] EXT4-fs (loop2): Remounting filesystem read-only [ 172.560089][ T9832] +: renamed from syzkaller0 [ 172.571550][ T9821] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 172.579685][ T9821] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2254'. [ 172.625851][ T9836] netlink: 'syz.0.2259': attribute type 3 has an invalid length. [ 172.666247][ T9840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 172.672819][ T9840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.680450][ T9840] vhci_hcd vhci_hcd.0: Device attached [ 172.686712][ T9841] vhci_hcd: connection closed [ 172.686880][ T52] vhci_hcd: stop threads [ 172.696086][ T52] vhci_hcd: release socket [ 172.700525][ T52] vhci_hcd: disconnect device [ 172.804481][ T9845] lo speed is unknown, defaulting to 1000 [ 172.810444][ T9845] lo speed is unknown, defaulting to 1000 [ 173.167759][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.311640][ T9852] lo speed is unknown, defaulting to 1000 [ 173.346541][ T9852] lo speed is unknown, defaulting to 1000 [ 173.470297][ T9859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.499516][ T9857] lo speed is unknown, defaulting to 1000 [ 173.516370][ T9857] lo speed is unknown, defaulting to 1000 [ 173.540026][ T9859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.557547][ T9866] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 173.581733][ T9866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.600760][ T9866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 173.618837][ T9859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.669079][ T9866] bond1 (unregistering): Released all slaves [ 173.684118][ T9859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.766927][ T9876] +: renamed from syzkaller0 [ 173.835097][ T9880] lo speed is unknown, defaulting to 1000 [ 173.841449][ T9880] lo speed is unknown, defaulting to 1000 [ 173.960925][ T9885] loop3: detected capacity change from 0 to 2048 [ 173.977186][ T9887] loop0: detected capacity change from 0 to 2048 [ 173.999810][ T9887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.047976][ T9887] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.106080][ T9885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.141678][ T9885] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.154050][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.189145][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.241412][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.260997][ T9893] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2274: bg 0: block 345: padding at end of block bitmap is not set [ 174.264694][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.284769][ T9893] EXT4-fs (loop0): Remounting filesystem read-only [ 174.315533][ T9894] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2275: bg 0: block 345: padding at end of block bitmap is not set [ 174.337194][ T9894] EXT4-fs (loop3): Remounting filesystem read-only [ 174.354334][ T3400] usb usb8-port1: unable to enumerate USB device [ 174.394821][ T9885] netlink: 'syz.3.2275': attribute type 1 has an invalid length. [ 174.402673][ T9885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2275'. [ 174.727244][ T9904] lo speed is unknown, defaulting to 1000 [ 174.733608][ T9904] lo speed is unknown, defaulting to 1000 [ 174.864846][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.932236][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.991304][ T9920] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.141162][ T9918] lo speed is unknown, defaulting to 1000 [ 175.148695][ T9918] lo speed is unknown, defaulting to 1000 [ 175.444520][ T9920] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.503980][ T9920] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.543673][ T9920] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.604307][ T416] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.616880][ T360] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.628402][ T360] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.641098][ T360] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.744302][ T9937] lo speed is unknown, defaulting to 1000 [ 175.750680][ T9937] lo speed is unknown, defaulting to 1000 [ 175.799413][ T9939] +: renamed from syzkaller0 [ 175.844139][ T9947] loop3: detected capacity change from 0 to 2048 [ 175.865511][ T9947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.891117][ T9953] netlink: 'syz.5.2297': attribute type 3 has an invalid length. [ 175.912299][ T9947] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.013342][ T9962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.028722][ T9962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.137602][ T9962] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2295: bg 0: block 345: padding at end of block bitmap is not set [ 176.152298][ T9962] EXT4-fs (loop3): Remounting filesystem read-only [ 176.169536][ T9947] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 176.177362][ T9947] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2295'. [ 176.818400][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.829931][ T3490] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.854067][ T3490] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.862410][ T3490] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.905197][ T9971] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 176.916103][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 176.916119][ T29] audit: type=1400 audit(2000000109.410:15265): avc: denied { create } for pid=9969 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.942724][ T29] audit: type=1400 audit(2000000109.410:15266): avc: denied { write } for pid=9969 comm="syz.2.2303" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.949956][ T9971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.974775][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2313'. [ 176.988999][ T29] audit: type=1404 audit(2000000109.480:15267): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 177.007460][ T9976] bond1 (unregistering): Released all slaves [ 177.013880][ T29] audit: type=1404 audit(2000000109.480:15268): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 177.029069][ T29] audit: type=1400 audit(2000000109.480:15269): avc: denied { write } for pid=9977 comm="syz.5.2305" name="rt_acct" dev="proc" ino=4026533385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 177.052162][ T29] audit: type=1400 audit(2000000109.500:15270): avc: denied { create } for pid=9977 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.068173][ T9980] loop5: detected capacity change from 0 to 512 [ 177.071930][ T29] audit: type=1400 audit(2000000109.500:15271): avc: denied { connect } for pid=9977 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.081096][ T9980] EXT4-fs: Ignoring removed nobh option [ 177.098038][ T29] audit: type=1400 audit(2000000109.500:15272): avc: denied { map_create } for pid=9977 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.122838][ T29] audit: type=1400 audit(2000000109.500:15273): avc: denied { map_read map_write } for pid=9977 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.140807][ T9980] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2306: iget: bad i_size value: 38620345925642 [ 177.142798][ T29] audit: type=1400 audit(2000000109.500:15274): avc: denied { prog_load } for pid=9977 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.175668][ T9980] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2306: couldn't read orphan inode 15 (err -117) [ 177.188595][ T9980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.211842][ T9980] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.2306: iget: bad i_size value: 38620345925642 [ 177.216327][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.229096][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2306'. [ 177.288160][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.288797][ T9984] +: renamed from syzkaller0 [ 177.343714][ T9985] lo speed is unknown, defaulting to 1000 [ 177.351512][ T9989] netlink: 'syz.5.2310': attribute type 3 has an invalid length. [ 177.359539][ T9985] lo speed is unknown, defaulting to 1000 [ 177.392245][ T8949] usb usb8-port1: attempt power cycle [ 177.558247][T10002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 177.567403][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.575292][T10002] vhci_hcd vhci_hcd.0: Device attached [ 177.584908][T10002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.594057][T10002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.602838][T10002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.611576][T10002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.620512][T10002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.629426][T10002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.638637][T10002] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(19) [ 177.645254][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.653362][T10002] vhci_hcd vhci_hcd.0: Device attached [ 178.342036][ T3415] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 178.383358][T10014] loop1: detected capacity change from 0 to 2048 [ 178.389898][T10006] vhci_hcd: connection closed [ 178.390111][T10003] vhci_hcd: connection reset by peer [ 178.400774][ T52] vhci_hcd: stop threads [ 178.405092][ T52] vhci_hcd: release socket [ 178.409525][ T52] vhci_hcd: disconnect device [ 178.420197][T10015] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2317'. [ 178.459393][T10014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.462429][ T52] vhci_hcd: stop threads [ 178.475751][ T52] vhci_hcd: release socket [ 178.480197][ T52] vhci_hcd: disconnect device [ 178.492508][T10014] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.563245][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.598119][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.653665][T10019] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2318: bg 0: block 345: padding at end of block bitmap is not set [ 178.668799][T10019] EXT4-fs (loop1): Remounting filesystem read-only [ 178.739668][T10014] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 178.747505][T10014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2318'. [ 179.313735][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.333268][T10033] +: renamed from syzkaller0 [ 179.350968][T10035] netlink: 'syz.1.2323': attribute type 3 has an invalid length. [ 179.557728][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2341'. [ 179.573627][T10050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10050 comm=syz.1.2341 [ 179.719880][T10059] lo speed is unknown, defaulting to 1000 [ 179.729854][T10055] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 179.736394][T10055] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.743890][T10055] vhci_hcd vhci_hcd.0: Device attached [ 179.771940][T10059] lo speed is unknown, defaulting to 1000 [ 179.817285][T10056] vhci_hcd: connection closed [ 179.817570][ T4725] vhci_hcd: stop threads [ 179.826700][ T4725] vhci_hcd: release socket [ 179.831133][ T4725] vhci_hcd: disconnect device [ 179.952749][ T8949] usb usb8-port1: unable to enumerate USB device [ 180.026514][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2335'. [ 180.035686][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2335'. [ 180.036102][T10063] loop0: detected capacity change from 0 to 2048 [ 180.063810][T10063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.076438][T10069] netlink: 'syz.5.2336': attribute type 3 has an invalid length. [ 180.076474][T10063] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.147407][T10073] +: renamed from syzkaller0 [ 180.153311][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.161821][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.184463][T10074] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2334: bg 0: block 345: padding at end of block bitmap is not set [ 180.199221][T10074] EXT4-fs (loop0): Remounting filesystem read-only [ 180.246023][T10076] loop7: detected capacity change from 0 to 7 [ 180.252709][ C0] blk_print_req_error: 41 callbacks suppressed [ 180.252727][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.268080][ C0] buffer_io_error: 41 callbacks suppressed [ 180.268096][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.275952][T10063] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 180.282843][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.289604][T10063] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2334'. [ 180.298725][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.299153][T10076] loop7: unable to read partition table [ 180.322472][T10076] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 180.338542][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.347735][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.356326][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.365500][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.373566][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.382729][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.394654][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.403944][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.412247][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.421392][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.422543][T10078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2340'. [ 180.523250][T10088] lo speed is unknown, defaulting to 1000 [ 180.529311][T10088] lo speed is unknown, defaulting to 1000 [ 180.650472][T10098] netlink: 'syz.1.2349': attribute type 3 has an invalid length. [ 180.721611][T10102] +: renamed from syzkaller0 [ 180.781494][T10104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 180.788028][T10104] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.795506][T10104] vhci_hcd vhci_hcd.0: Device attached [ 180.801471][T10105] vhci_hcd: connection closed [ 180.801692][ T360] vhci_hcd: stop threads [ 180.810717][ T360] vhci_hcd: release socket [ 180.815186][ T360] vhci_hcd: disconnect device [ 180.866740][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.200840][T10118] lo speed is unknown, defaulting to 1000 [ 181.208469][T10118] lo speed is unknown, defaulting to 1000 [ 181.866676][T10125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.889355][ T8949] usb usb8-port1: attempt power cycle [ 181.914966][T10125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.932987][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 181.933052][ T29] audit: type=1400 audit(2000000114.430:15627): avc: denied { setopt } for pid=10124 comm="syz.1.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.935118][T10131] netlink: 'syz.5.2361': attribute type 3 has an invalid length. [ 181.997399][ T29] audit: type=1400 audit(2000000114.490:15628): avc: denied { write } for pid=10124 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.021816][T10125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.039129][T10136] +: renamed from syzkaller0 [ 182.062425][ T29] audit: type=1400 audit(2000000114.560:15629): avc: denied { tracepoint } for pid=10138 comm="syz.0.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.085729][T10125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.146332][ T29] audit: type=1400 audit(2000000114.640:15630): avc: denied { read write } for pid=10142 comm="syz.0.2365" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.170195][ T29] audit: type=1400 audit(2000000114.640:15631): avc: denied { open } for pid=10142 comm="syz.0.2365" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.201070][ T360] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.214490][ T360] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.232902][ T360] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.242081][ T29] audit: type=1400 audit(2000000114.730:15632): avc: denied { execmem } for pid=10147 comm="syz.5.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 182.265280][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.328230][ T29] audit: type=1400 audit(2000000114.820:15633): avc: denied { create } for pid=10149 comm="syz.1.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.348236][ T29] audit: type=1400 audit(2000000114.820:15634): avc: denied { ioctl } for pid=10149 comm="syz.1.2369" path="socket:[34374]" dev="sockfs" ino=34374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.374417][ T29] audit: type=1400 audit(2000000114.820:15635): avc: denied { write } for pid=10149 comm="syz.1.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.829932][ T29] audit: type=1326 audit(2000000115.320:15636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384a1efc9 code=0x7ffc0000 [ 182.881039][T10156] loop0: detected capacity change from 0 to 128 [ 182.895126][T10156] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 182.908952][T10158] lo speed is unknown, defaulting to 1000 [ 182.915358][T10158] lo speed is unknown, defaulting to 1000 [ 183.016765][T10158] loop1: detected capacity change from 0 to 512 [ 183.040506][T10158] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 183.048842][T10158] EXT4-fs (loop1): orphan cleanup on readonly fs [ 183.056770][T10158] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2371: corrupted inode contents [ 183.068777][T10158] EXT4-fs (loop1): Remounting filesystem read-only [ 183.075489][T10158] EXT4-fs (loop1): 1 truncate cleaned up [ 183.122741][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.133635][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.144528][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 183.155565][T10158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.169781][T10158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.179392][T10166] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 183.185933][T10166] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.193543][T10166] vhci_hcd vhci_hcd.0: Device attached [ 183.199667][T10167] vhci_hcd: connection closed [ 183.212056][ T37] vhci_hcd: stop threads [ 183.221057][ T37] vhci_hcd: release socket [ 183.225706][ T37] vhci_hcd: disconnect device [ 183.336244][T10172] netlink: 'syz.1.2376': attribute type 3 has an invalid length. [ 183.361581][T10174] +: renamed from syzkaller0 [ 183.529918][ T3415] vhci_hcd: vhci_device speed not set [ 184.072380][ T8949] usb usb8-port1: unable to enumerate USB device [ 184.119707][T10188] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.154877][T10188] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.215349][T10188] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.264118][T10188] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.320708][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.348604][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.367632][ T4725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.393928][ T4725] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.490992][T10201] lo speed is unknown, defaulting to 1000 [ 184.504960][T10201] lo speed is unknown, defaulting to 1000 [ 184.514035][T10206] netlink: 'syz.0.2389': attribute type 3 has an invalid length. [ 184.707622][T10214] loop0: detected capacity change from 0 to 128 [ 184.746834][T10212] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 185.269563][T10225] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 185.276191][T10225] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.283659][T10225] vhci_hcd vhci_hcd.0: Device attached [ 185.290930][T10226] vhci_hcd: connection closed [ 185.291208][ T37] vhci_hcd: stop threads [ 185.300267][ T37] vhci_hcd: release socket [ 185.304801][ T37] vhci_hcd: disconnect device [ 185.501246][T10229] +: renamed from syzkaller0 [ 185.581261][T10237] netlink: 'syz.5.2401': attribute type 3 has an invalid length. [ 185.616923][T10241] loop5: detected capacity change from 0 to 2048 [ 185.631296][T10243] lo speed is unknown, defaulting to 1000 [ 185.637622][T10243] lo speed is unknown, defaulting to 1000 [ 185.647516][T10241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.660183][T10241] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.723822][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.755349][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.779197][T10249] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2404: bg 0: block 345: padding at end of block bitmap is not set [ 185.806872][T10249] EXT4-fs (loop5): Remounting filesystem read-only [ 185.837588][T10256] syz_tun: entered allmulticast mode [ 185.860626][T10258] loop1: detected capacity change from 0 to 128 [ 185.878767][T10241] netlink: 'syz.5.2404': attribute type 1 has an invalid length. [ 185.886673][T10241] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2404'. [ 185.918969][T10258] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 186.023364][T10261] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2407'. [ 186.192239][ T8949] usb usb8-port1: attempt power cycle [ 186.430017][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.463680][T10263] lo speed is unknown, defaulting to 1000 [ 186.469812][T10263] lo speed is unknown, defaulting to 1000 [ 186.615857][T10252] syz_tun: left allmulticast mode [ 186.643550][T10274] netlink: 'syz.5.2414': attribute type 3 has an invalid length. [ 186.665377][T10273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.727209][T10276] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.739730][T10283] loop5: detected capacity change from 0 to 128 [ 186.749827][T10283] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 186.784722][T10285] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 186.791301][T10285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.799011][T10285] vhci_hcd vhci_hcd.0: Device attached [ 186.800339][T10273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.806266][T10285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.824419][T10276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.828189][T10285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.845429][T10285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.861014][T10285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.872789][T10285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.874684][T10273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.881690][T10285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.902951][T10285] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(19) [ 186.904063][T10276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.909619][T10285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.927258][T10285] vhci_hcd vhci_hcd.0: Device attached [ 186.961522][T10273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.994142][T10276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.046011][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.065532][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.073995][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.082454][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.117197][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 187.117213][ T29] audit: type=1400 audit(2000000119.610:16025): avc: denied { allowed } for pid=10284 comm="syz.1.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.144911][ T29] audit: type=1400 audit(2000000119.610:16026): avc: denied { create } for pid=10284 comm="syz.1.2417" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.166380][ T29] audit: type=1400 audit(2000000119.610:16027): avc: denied { map } for pid=10284 comm="syz.1.2417" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.190793][ T29] audit: type=1400 audit(2000000119.610:16028): avc: denied { read write } for pid=10284 comm="syz.1.2417" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.215803][ T29] audit: type=1404 audit(2000000119.620:16029): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 187.230970][ T29] audit: type=1404 audit(2000000119.640:16030): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 187.246895][ T29] audit: type=1400 audit(2000000119.640:16031): avc: denied { write } for pid=10295 comm="syz.0.2418" name="rt_acct" dev="proc" ino=4026532760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 187.270329][ T29] audit: type=1400 audit(2000000119.640:16032): avc: denied { create } for pid=10295 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.290250][ T29] audit: type=1400 audit(2000000119.640:16033): avc: denied { connect } for pid=10295 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.310128][ T29] audit: type=1400 audit(2000000119.640:16034): avc: denied { map_create } for pid=10295 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.354862][T10300] lo speed is unknown, defaulting to 1000 [ 187.360940][T10300] lo speed is unknown, defaulting to 1000 [ 187.432245][T10303] loop0: detected capacity change from 0 to 2048 [ 187.445147][T10303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.457429][T10303] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.522418][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.531859][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.555551][T10306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2421: bg 0: block 345: padding at end of block bitmap is not set [ 187.570533][T10306] EXT4-fs (loop0): Remounting filesystem read-only [ 187.608789][T10292] vhci_hcd: connection closed [ 187.609076][T10288] vhci_hcd: connection closed [ 187.612719][ T52] vhci_hcd: stop threads [ 187.622833][ T52] vhci_hcd: release socket [ 187.627351][ T52] vhci_hcd: disconnect device [ 187.634456][ T52] vhci_hcd: stop threads [ 187.638734][ T52] vhci_hcd: release socket [ 187.643239][ T52] vhci_hcd: disconnect device [ 187.700538][T10311] syz_tun: entered allmulticast mode [ 188.092258][ T8949] usb usb8-port1: unable to enumerate USB device [ 188.244889][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.406012][T10323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2425'. [ 188.479321][T10309] syz_tun: left allmulticast mode [ 188.937503][T10328] loop0: detected capacity change from 0 to 128 [ 188.955611][T10328] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 189.065495][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.079351][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 189.084659][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.102266][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2431'. [ 189.105549][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.125549][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.166423][T10333] lo speed is unknown, defaulting to 1000 [ 189.181415][T10335] loop5: detected capacity change from 0 to 128 [ 189.186335][T10333] lo speed is unknown, defaulting to 1000 [ 189.209826][T10335] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 189.352828][ T8961] IPVS: starting estimator thread 0... [ 189.409632][T10354] +: renamed from syzkaller0 [ 189.462056][T10349] IPVS: using max 2400 ests per chain, 120000 per kthread [ 190.073923][T10371] netlink: 'syz.5.2447': attribute type 3 has an invalid length. [ 190.127465][T10375] lo speed is unknown, defaulting to 1000 [ 190.133582][T10375] lo speed is unknown, defaulting to 1000 [ 190.199774][T10378] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.234442][T10378] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.304166][T10378] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.325544][T10387] loop7: detected capacity change from 0 to 7 [ 190.332350][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.341757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.349755][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.358967][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.366960][T10387] loop7: unable to read partition table [ 190.372703][T10387] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.388003][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.397230][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.410080][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.419299][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.432835][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.432912][T10389] loop2: detected capacity change from 0 to 128 [ 190.442033][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.460000][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.469192][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.481121][T10389] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 190.491850][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.501019][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.541905][T10378] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.590643][ T4725] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.599169][T10395] loop1: detected capacity change from 0 to 2048 [ 190.603156][ T4725] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.618977][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.629260][T10395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.632206][ T4725] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.648448][T10395] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.714043][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.722682][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.740426][T10402] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2457: bg 0: block 345: padding at end of block bitmap is not set [ 190.741619][T10403] syz_tun: entered allmulticast mode [ 190.757199][T10402] EXT4-fs (loop1): Remounting filesystem read-only [ 191.100196][T10407] lo speed is unknown, defaulting to 1000 [ 191.106731][T10407] lo speed is unknown, defaulting to 1000 [ 191.290839][T10414] lo speed is unknown, defaulting to 1000 [ 191.297136][T10414] lo speed is unknown, defaulting to 1000 [ 191.315927][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.513794][T10400] syz_tun: left allmulticast mode [ 191.610878][T10424] netlink: 'syz.5.2466': attribute type 3 has an invalid length. [ 191.773408][ T3388] usb usb8-port1: attempt power cycle [ 191.797605][T10429] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 191.804150][T10429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.811899][T10429] vhci_hcd vhci_hcd.0: Device attached [ 191.819904][T10429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.829174][T10429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.838455][T10429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.847436][T10429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.856808][T10429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.874845][T10429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.885173][T10429] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(19) [ 191.887036][T10436] lo speed is unknown, defaulting to 1000 [ 191.891836][T10429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.899017][T10436] lo speed is unknown, defaulting to 1000 [ 191.905224][T10429] vhci_hcd vhci_hcd.0: Device attached [ 192.099998][T10447] loop5: detected capacity change from 0 to 128 [ 192.122829][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 192.122847][ T29] audit: type=1326 audit(2000000124.620:16460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.123296][T10447] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 192.129058][ T29] audit: type=1326 audit(2000000124.620:16461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.192393][ T29] audit: type=1326 audit(2000000124.620:16462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.215998][ T29] audit: type=1400 audit(2000000124.680:16463): avc: denied { create } for pid=10448 comm="syz.0.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.244301][ T29] audit: type=1326 audit(2000000124.690:16464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.268021][ T29] audit: type=1326 audit(2000000124.690:16465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.291624][ T29] audit: type=1400 audit(2000000124.690:16466): avc: denied { create } for pid=10444 comm="syz.5.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.311459][ T29] audit: type=1326 audit(2000000124.690:16467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.335270][ T29] audit: type=1326 audit(2000000124.690:16468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.358801][ T29] audit: type=1326 audit(2000000124.690:16469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f425efc9 code=0x7ffc0000 [ 192.390966][T10457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 192.397517][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.405087][T10457] vhci_hcd vhci_hcd.0: Device attached [ 192.412782][T10459] vhci_hcd: connection closed [ 192.413070][ T12] vhci_hcd: stop threads [ 192.422095][ T12] vhci_hcd: release socket [ 192.426549][ T12] vhci_hcd: disconnect device [ 192.620074][T10431] vhci_hcd: connection closed [ 192.652086][T10437] vhci_hcd: connection closed [ 192.657715][ T360] vhci_hcd: stop threads [ 192.666835][ T360] vhci_hcd: release socket [ 192.671404][ T360] vhci_hcd: disconnect device [ 192.677617][ T360] vhci_hcd: stop threads [ 192.681897][ T360] vhci_hcd: release socket [ 192.686409][ T360] vhci_hcd: disconnect device [ 192.964894][T10464] netlink: 'syz.5.2479': attribute type 3 has an invalid length. [ 193.030822][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 193.052454][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2481'. [ 193.080723][T10470] lo speed is unknown, defaulting to 1000 [ 193.092527][T10470] lo speed is unknown, defaulting to 1000 [ 193.485768][T10489] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 193.718732][T10494] netlink: 'syz.5.2492': attribute type 3 has an invalid length. [ 193.732351][T10496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 193.738894][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.746382][T10496] vhci_hcd vhci_hcd.0: Device attached [ 193.752547][T10497] vhci_hcd: connection closed [ 193.752780][ T4725] vhci_hcd: stop threads [ 193.753246][T10500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2494'. [ 193.757496][ T4725] vhci_hcd: release socket [ 193.762883][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2494'. [ 193.770766][ T4725] vhci_hcd: disconnect device [ 193.828711][T10508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 193.835327][T10508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.838035][T10506] lo speed is unknown, defaulting to 1000 [ 193.843124][T10508] vhci_hcd vhci_hcd.0: Device attached [ 193.849207][T10506] lo speed is unknown, defaulting to 1000 [ 193.856882][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.869438][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.878198][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.887083][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.896904][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.908916][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.918262][T10508] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 193.924955][T10508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.932662][T10508] vhci_hcd vhci_hcd.0: Device attached [ 193.939380][T10513] vhci_hcd: connection closed [ 193.939617][ T4725] vhci_hcd: stop threads [ 193.948641][ T4725] vhci_hcd: release socket [ 193.953264][ T4725] vhci_hcd: disconnect device [ 193.962647][T10509] vhci_hcd: connection closed [ 193.962810][ T360] vhci_hcd: stop threads [ 193.971956][ T360] vhci_hcd: release socket [ 193.976808][ T360] vhci_hcd: disconnect device [ 194.049568][T10520] lo speed is unknown, defaulting to 1000 [ 194.055700][T10520] lo speed is unknown, defaulting to 1000 [ 194.057401][T10522] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 194.173672][T10531] lo speed is unknown, defaulting to 1000 [ 194.179708][T10531] lo speed is unknown, defaulting to 1000 [ 194.258609][T10535] netlink: 'syz.5.2507': attribute type 3 has an invalid length. [ 194.294120][T10537] +: renamed from syzkaller0 [ 194.319007][T10539] lo speed is unknown, defaulting to 1000 [ 194.325580][T10539] lo speed is unknown, defaulting to 1000 [ 194.332267][ T3388] usb usb8-port1: unable to enumerate USB device [ 194.470350][T10545] lo speed is unknown, defaulting to 1000 [ 194.476510][T10545] lo speed is unknown, defaulting to 1000 [ 194.658272][T10555] loop2: detected capacity change from 0 to 128 [ 194.773031][T10555] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 195.004875][T10566] netlink: 'syz.5.2518': attribute type 3 has an invalid length. [ 195.035538][T10548] can: request_module (can-proto-3) failed. [ 195.044393][T10564] lo speed is unknown, defaulting to 1000 [ 195.050437][T10564] lo speed is unknown, defaulting to 1000 [ 195.094431][T10572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 195.101063][T10572] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.108536][T10572] vhci_hcd vhci_hcd.0: Device attached [ 195.120525][T10573] vhci_hcd: connection closed [ 195.120695][ T4725] vhci_hcd: stop threads [ 195.129895][ T4725] vhci_hcd: release socket [ 195.134391][ T4725] vhci_hcd: disconnect device [ 195.171774][T10577] lo speed is unknown, defaulting to 1000 [ 195.178711][T10577] lo speed is unknown, defaulting to 1000 [ 195.288782][T10584] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 195.295348][T10584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.303082][T10584] vhci_hcd vhci_hcd.0: Device attached [ 195.309677][T10584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.318522][T10584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.336602][T10584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.345344][T10584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.353971][T10584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.362919][T10584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.372432][T10584] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19) [ 195.379321][T10584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.386999][T10584] vhci_hcd vhci_hcd.0: Device attached [ 195.393796][T10589] vhci_hcd: connection closed [ 195.393980][ T4725] vhci_hcd: stop threads [ 195.394371][T10585] vhci_hcd: connection closed [ 195.398810][ T4725] vhci_hcd: release socket [ 195.412374][ T4725] vhci_hcd: disconnect device [ 195.417272][ T4725] vhci_hcd: stop threads [ 195.421636][ T4725] vhci_hcd: release socket [ 195.426158][ T4725] vhci_hcd: disconnect device [ 195.497487][T10593] loop2: detected capacity change from 0 to 2048 [ 195.513325][T10593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.525973][T10593] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.589248][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.598100][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.616761][T10597] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2525: bg 0: block 345: padding at end of block bitmap is not set [ 195.631310][T10597] EXT4-fs (loop2): Remounting filesystem read-only [ 195.663369][T10599] loop1: detected capacity change from 0 to 164 [ 195.672697][T10599] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.684974][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 195.745263][T10603] loop1: detected capacity change from 0 to 2048 [ 195.763629][T10603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.775879][T10603] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.839035][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.847867][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.866261][T10606] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2528: bg 0: block 345: padding at end of block bitmap is not set [ 195.880746][T10606] EXT4-fs (loop1): Remounting filesystem read-only [ 195.950589][T10610] netlink: 'syz.0.2530': attribute type 3 has an invalid length. [ 195.961492][T10603] netlink: 'syz.1.2528': attribute type 1 has an invalid length. [ 195.969427][T10603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2528'. [ 196.007409][T10612] lo speed is unknown, defaulting to 1000 [ 196.014077][T10612] lo speed is unknown, defaulting to 1000 [ 196.280086][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.575840][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.602628][T10622] lo speed is unknown, defaulting to 1000 [ 196.608786][T10622] lo speed is unknown, defaulting to 1000 [ 196.703453][T10632] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 196.710002][T10632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.717518][T10632] vhci_hcd vhci_hcd.0: Device attached [ 196.724448][T10633] vhci_hcd: connection closed [ 196.727731][ T4725] vhci_hcd: stop threads [ 196.736864][ T4725] vhci_hcd: release socket [ 196.741317][ T4725] vhci_hcd: disconnect device [ 196.940134][T10649] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.961761][T10651] loop3: detected capacity change from 0 to 2048 [ 196.974571][T10651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.987337][T10651] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.998994][T10649] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.043906][T10649] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.054964][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.064855][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.082444][T10657] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2546: bg 0: block 345: padding at end of block bitmap is not set [ 197.097324][T10657] EXT4-fs (loop3): Remounting filesystem read-only [ 197.104828][T10649] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.135521][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 197.135537][ T29] audit: type=1326 audit(2000000129.630:16941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.168602][T10651] netlink: 'syz.3.2546': attribute type 1 has an invalid length. [ 197.174910][ T29] audit: type=1326 audit(2000000129.630:16942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.176425][T10651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2546'. [ 197.200050][ T29] audit: type=1326 audit(2000000129.630:16943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.232811][ T29] audit: type=1326 audit(2000000129.630:16944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.256424][ T29] audit: type=1326 audit(2000000129.630:16945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.279989][ T29] audit: type=1326 audit(2000000129.630:16946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.303678][ T29] audit: type=1326 audit(2000000129.630:16947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.327297][ T29] audit: type=1326 audit(2000000129.630:16948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.350946][ T29] audit: type=1326 audit(2000000129.630:16949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.374617][ T29] audit: type=1326 audit(2000000129.630:16950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e232efc9 code=0x7ffc0000 [ 197.399842][ T3388] usb usb8-port1: attempt power cycle [ 197.437727][ T4725] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.446086][ T4725] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.468516][ T4725] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.476860][ T4725] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.485217][T10663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 197.491528][T10661] lo speed is unknown, defaulting to 1000 [ 197.491774][T10663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.491855][T10663] vhci_hcd vhci_hcd.0: Device attached [ 197.492652][T10663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.523164][T10663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.531957][T10661] lo speed is unknown, defaulting to 1000 [ 197.541083][T10663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.558104][T10663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.567322][T10663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.576172][T10663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.597562][T10663] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(19) [ 197.604200][T10663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.611888][T10663] vhci_hcd vhci_hcd.0: Device attached [ 197.618674][T10672] vhci_hcd: connection closed [ 197.618991][ T52] vhci_hcd: stop threads [ 197.619088][T10664] vhci_hcd: connection closed [ 197.623765][ T52] vhci_hcd: release socket [ 197.623778][ T52] vhci_hcd: disconnect device [ 197.642767][ T52] vhci_hcd: stop threads [ 197.647039][ T52] vhci_hcd: release socket [ 197.651487][ T52] vhci_hcd: disconnect device [ 197.674803][T10675] lo speed is unknown, defaulting to 1000 [ 197.683018][T10675] lo speed is unknown, defaulting to 1000 [ 197.854734][T10688] netlink: 'syz.0.2557': attribute type 3 has an invalid length. [ 197.863644][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.239486][T10699] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.314729][T10699] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.353909][T10699] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.374053][T10708] lo speed is unknown, defaulting to 1000 [ 198.380146][T10708] lo speed is unknown, defaulting to 1000 [ 198.398034][T10699] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.659151][T10718] lo speed is unknown, defaulting to 1000 [ 198.664019][T10720] loop3: detected capacity change from 0 to 2048 [ 198.678321][T10718] lo speed is unknown, defaulting to 1000 [ 198.696135][T10720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.719561][T10720] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.785647][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.794591][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.816672][T10728] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2569: bg 0: block 345: padding at end of block bitmap is not set [ 198.842080][T10728] EXT4-fs (loop3): Remounting filesystem read-only [ 198.895913][T10732] lo speed is unknown, defaulting to 1000 [ 198.902496][T10732] lo speed is unknown, defaulting to 1000 [ 198.914042][T10720] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 198.921862][T10720] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2569'. [ 199.272424][ T3388] usb usb8-port1: unable to enumerate USB device [ 199.318516][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2574'. [ 199.450080][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.481874][T10753] loop7: detected capacity change from 0 to 7 [ 199.483157][T10751] lo speed is unknown, defaulting to 1000 [ 199.488805][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.494515][T10751] lo speed is unknown, defaulting to 1000 [ 199.502894][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.578805][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.588061][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.596291][ T3566] loop7: unable to read partition table [ 199.632881][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.642167][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.650742][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.659960][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.669118][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.678304][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.687677][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.696897][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.706006][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.715196][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.905480][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 199.914706][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.928453][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 199.937653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.945615][T10753] loop7: unable to read partition table [ 199.951718][T10753] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 200.087585][T10772] syz_tun: entered allmulticast mode [ 200.313359][T10776] lo speed is unknown, defaulting to 1000 [ 200.319718][T10776] lo speed is unknown, defaulting to 1000 [ 200.435863][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2590'. [ 200.446570][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2590'. [ 200.493573][T10782] loop1: detected capacity change from 0 to 2048 [ 200.505494][T10782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.521115][T10782] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.585448][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.594354][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.612724][T10786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2591: bg 0: block 345: padding at end of block bitmap is not set [ 200.627323][T10786] EXT4-fs (loop1): Remounting filesystem read-only [ 200.668464][T10782] netlink: 'syz.1.2591': attribute type 1 has an invalid length. [ 200.676295][T10782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2591'. [ 200.862070][T10768] syz_tun: left allmulticast mode [ 200.917990][T10788] lo speed is unknown, defaulting to 1000 [ 200.924195][T10788] lo speed is unknown, defaulting to 1000 [ 201.210499][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.241599][T10795] loop1: detected capacity change from 0 to 2048 [ 201.273261][T10795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.285384][T10795] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.347867][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.362618][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.374829][T10798] ================================================================== [ 201.382947][T10798] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 201.390183][T10798] [ 201.392517][T10798] read-write to 0xffff88811a166d90 of 8 bytes by task 10795 on cpu 0: [ 201.400677][T10798] __xa_set_mark+0xd2/0x1a0 [ 201.405221][T10798] __folio_mark_dirty+0x384/0x4a0 [ 201.410284][T10798] mark_buffer_dirty+0x11e/0x210 [ 201.415249][T10798] folio_zero_new_buffers+0x28c/0x2e0 [ 201.420666][T10798] block_write_end+0x200/0x210 [ 201.425464][T10798] ext4_da_write_end+0x1d3/0x800 [ 201.430428][T10798] generic_perform_write+0x312/0x490 [ 201.435733][T10798] ext4_buffered_write_iter+0x1ee/0x3c0 [ 201.441308][T10798] ext4_file_write_iter+0x387/0xf60 [ 201.446533][T10798] vfs_write+0x52a/0x960 [ 201.450806][T10798] ksys_write+0xda/0x1a0 [ 201.455065][T10798] __x64_sys_write+0x40/0x50 [ 201.459674][T10798] x64_sys_call+0x2802/0x3000 [ 201.464385][T10798] do_syscall_64+0xd2/0x200 [ 201.468914][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.474837][T10798] [ 201.477186][T10798] read to 0xffff88811a166d90 of 8 bytes by task 10798 on cpu 1: [ 201.484837][T10798] xas_find_marked+0x218/0x620 [ 201.489627][T10798] find_get_entry+0x5d/0x380 [ 201.494255][T10798] filemap_get_folios_tag+0x13b/0x210 [ 201.499669][T10798] mpage_prepare_extent_to_map+0x320/0xc00 [ 201.505825][T10798] ext4_do_writepages+0xa05/0x2750 [ 201.510961][T10798] ext4_writepages+0x176/0x300 [ 201.515838][T10798] do_writepages+0x1c6/0x310 [ 201.520440][T10798] __filemap_fdatawrite_range+0xfb/0x140 [ 201.526094][T10798] generic_fadvise+0x312/0x430 [ 201.530887][T10798] __x64_sys_fadvise64+0xcb/0x110 [ 201.535913][T10798] x64_sys_call+0x29c5/0x3000 [ 201.540687][T10798] do_syscall_64+0xd2/0x200 [ 201.545196][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.551185][T10798] [ 201.553507][T10798] value changed: 0x07ffffffffffffff -> 0x1fffffffffffffff [ 201.560613][T10798] [ 201.562975][T10798] Reported by Kernel Concurrency Sanitizer on: [ 201.569139][T10798] CPU: 1 UID: 0 PID: 10798 Comm: syz.1.2594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.580529][T10798] Tainted: [W]=WARN [ 201.584339][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.594402][T10798] ================================================================== [ 201.612075][T10798] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2594: bg 0: block 345: padding at end of block bitmap is not set [ 201.641210][T10798] EXT4-fs (loop1): Remounting filesystem read-only [ 201.787545][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.798857][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.810517][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.821815][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.022218][ T8960] usb usb8-port1: attempt power cycle [ 202.230199][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.852284][ T8960] usb usb8-port1: unable to enumerate USB device