last executing test programs: 1m56.60943875s ago: executing program 3 (id=513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m56.364154682s ago: executing program 3 (id=514): r0 = creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1c000000, 0x2, 0xff, 0x8, 0x80, 0x5}, 0x20) setxattr$incfs_metadata(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f00000009c0)="631d2a92ff897e790ff08fbc7bdc31959be27fb043b12e7e3a97122ffe8b873e2588f0eb509afabdeabd5b11fdde4962cdaa2db5881bc50eb98d55e796170fc32eefea9b439cff64d2dfc4da6231b4f7f884da7d53b8750a2c940c2495356ccbd6e3034c8acedbc9cb8e0ab7a44c634197205a23f4c8d4707bee76ce70cf29699595aaf4f91fc211178f30cb5c1cdeeaa66d4c7cd7b99639e540f616c2c566730e80868cd1697e1f78acf9fa500fd3070d539cb51c564e5f2099eb70f449505e4044855b548484d99c91c1cfd48a5b8c43a3de3f0a7177", 0xd7, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 1m54.078200836s ago: executing program 3 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xbb85, @any, 0xe93d, 0x7d96e06cf188bf30}, 0xe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180036732d07886618d82daed6319f31daa617105840469bcd6fab60f7b11ee5196828a72f9f2e27d02afe620a87048026296701a3425b71b638cbefac2b9f0f2d7cf42174ad75ec48602fe7ecbe68319de4851d211c5668cc0dad736570a3ad6aed109362f0c8f6ac3e06cdc601f9dd436c035e8dc7794b0db23a50de8165994a840f8317011a48c9900c9fabf43655a3916720fbdd082f6895b359d67027bea9c8a7daec1dfebbc090e415a9a120ba4f12ea2f8e90"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) getitimer(0x0, &(0x7f00000003c0)) socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x200000, 0x200000}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x400110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0xfe, 0xa, 0x0, 0x25, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0x6, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) 1m51.982655395s ago: executing program 3 (id=520): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x3f}], 0x1, 0x0, 0x0) 1m51.835593224s ago: executing program 3 (id=525): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x800) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x40}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$sock(r1, &(0x7f0000000900)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000800)="e9483a2ae82897476d409f3c3b9b677cadb986a519ff874646d8263d24d3e437fa96ca18224b1a091c0cae0462fd3712d7bb44ec91da838ba3013d93f212715ba17c07543118469685144a09b4f077aa2df5475c91d1c88cb9bddd5a74caca160d9eecce390443ba39b68242d3030a7e927d9e3fd13d496647d25ebdf17d542bca631cee714254080c39af2ba583feba703569a2b345bf27602a63111b94539b4a12b555ddf6e27f83da96c20020e5576dae9ba9ddbc9ee5e848f7bbf271a3c1b052151f88a5417835de8275ed6ed1ea9ace510398ede7429b1b", 0xda}, {&(0x7f0000000440)="a12e2281b5b092689561789d01", 0xd}], 0x3}, 0x10) r5 = perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a82f00810004008902450e0028006400000706907864010100000000004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50260004907800e7"], 0x0) read(r0, 0x0, 0x0) 1m50.458732301s ago: executing program 3 (id=535): gettid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600e000c91895918c70b3b5cbb359447c9471d09c332389e2a1cfb3aa8fdb23a1fe67de33e84e05698173a4bdc1621f30c9d9dfa7ba3a1b8ce4cb2c101f07ffeb90a20000000000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r4 = creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1c000000, 0x2, 0xff, 0x8, 0x80, 0x5}, 0x20) setxattr$incfs_metadata(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f00000009c0)="631d2a92ff897e790ff08fbc7bdc31959be27fb043b12e7e3a97122ffe8b873e2588f0eb509afabdeabd5b11fdde4962cdaa2db5881bc50eb98d55e796170fc32eefea9b439cff64d2dfc4da6231b4f7f884da7d53b8750a2c940c2495356ccbd6e3034c8acedbc9cb8e0ab7a44c634197205a23f4c8d4707bee76ce70cf29699595aaf4f91fc211178f30cb5c1cdeeaa66d4c7cd7b99639e540f616c2c566730e80868cd1697e1f78acf9fa500fd3070d539cb51c564e5f2099eb70f449505e4044855b548484d99c91c1cfd48a5b8c43a3de3f0a7177", 0xd7, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0x401, 0xac100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 1m35.434237964s ago: executing program 32 (id=535): gettid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600e000c91895918c70b3b5cbb359447c9471d09c332389e2a1cfb3aa8fdb23a1fe67de33e84e05698173a4bdc1621f30c9d9dfa7ba3a1b8ce4cb2c101f07ffeb90a20000000000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r4 = creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1c000000, 0x2, 0xff, 0x8, 0x80, 0x5}, 0x20) setxattr$incfs_metadata(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f00000009c0)="631d2a92ff897e790ff08fbc7bdc31959be27fb043b12e7e3a97122ffe8b873e2588f0eb509afabdeabd5b11fdde4962cdaa2db5881bc50eb98d55e796170fc32eefea9b439cff64d2dfc4da6231b4f7f884da7d53b8750a2c940c2495356ccbd6e3034c8acedbc9cb8e0ab7a44c634197205a23f4c8d4707bee76ce70cf29699595aaf4f91fc211178f30cb5c1cdeeaa66d4c7cd7b99639e540f616c2c566730e80868cd1697e1f78acf9fa500fd3070d539cb51c564e5f2099eb70f449505e4044855b548484d99c91c1cfd48a5b8c43a3de3f0a7177", 0xd7, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0x401, 0xac100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 9.041064627s ago: executing program 2 (id=1239): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x7ffc0002}, {0x5, 0x40, 0x9, 0x4}, {0xb4, 0x0, 0x9, 0x9c}]}) modify_ldt$read(0x0, &(0x7f00000004c0)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x200000000000029c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x1}, 0x18) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') 8.771091372s ago: executing program 2 (id=1242): gettid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 7.789529628s ago: executing program 2 (id=1250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x0, 0x7ffc0006}]}) r0 = inotify_init() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) creat(&(0x7f00000003c0)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) 7.480368428s ago: executing program 2 (id=1255): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4107, 0x100b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r4, &(0x7f0000000000)={[0xed4e]}, 0x8) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x60, 0x31, 0x4, 0xcc4, 0xf3, 0x36, &(0x7f00000000c0)="6582fd44e7e0a4eb3e9a2826b2636d246d7b7a609cb81dba2ab6d72da1f77a00752411cd73b96252c9c2cd35cdee1161954917fa92ecf36a02b3c3fd0e6a493a697d24471742be3afffdb443126127af0258da59ed64d57af02a9aa83b5ebf0812b68b7b89c21f95fd45fe980b1be56dcbfde1a344f455da68a7665102e0e295b41dd4b0cd59ed5ed379a8c4ec574fc35ed8dc08b1b1e1f2c75ad8c96225ff35ac86528ed30d582cba6ea1d01ab72c05492cfa05fe59720109316d3086446f5b6998ef682a269ab8af6a9e38009cd629ed879837ddb68d20cfe35342426aa6ae787309914931174251eac71d6fb41fa7b2e922"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 6.29786336s ago: executing program 2 (id=1261): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x20, 0x40, 0xa6, 0x5, {{0x5, 0x4, 0x3, 0x11, 0x14, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @empty}}}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0xc55f96ecb99accb4}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000080000000000000000000000000000000000000000d1122ce5bcfc89ffaaa630f0d7a8063c6468b88ed4e7b9c67e897496482cb3b4b47396c87891c4c11fc17de80fa8334665d56026c5022b42e6020539cc56d4a08f10366b78f3f6079243dabfb2c335ce1ab9c89fa59c3896acafa35997764afa221dca81711325d516619f39c3a7424e9fd808f0ee364e5b29ecb3a7564c3e6bd43273586f7042ed1b540a598492a3162b2bb743cb083aeb6593a31a15b469"], 0x50) 6.122724692s ago: executing program 2 (id=1264): gettid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600e000c91895918c70b3b5cbb359447c9471d09c332389e2a1cfb3aa8fdb23a1fe67de33e84e05698173a4bdc1621f30c9d9dfa7ba3a1b8ce4cb2c101f07ffeb90a20000000000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1c000000, 0x2, 0xff, 0x8, 0x80, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 5.267084323s ago: executing program 1 (id=1266): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000800)="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", &(0x7f0000000140)=""/3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x11, 0xffffffffffffffff, &(0x7f00000002c0)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x1000000000000008}, 0x18) r7 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 4.259120872s ago: executing program 1 (id=1276): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x2000, 0x4, &(0x7f00000003c0)) 4.181634482s ago: executing program 1 (id=1277): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4107, 0x100b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r4, &(0x7f0000000000)={[0xed4e]}, 0x8) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x60, 0x31, 0x4, 0xcc4, 0xf3, 0x36, &(0x7f00000000c0)="6582fd44e7e0a4eb3e9a2826b2636d246d7b7a609cb81dba2ab6d72da1f77a00752411cd73b96252c9c2cd35cdee1161954917fa92ecf36a02b3c3fd0e6a493a697d24471742be3afffdb443126127af0258da59ed64d57af02a9aa83b5ebf0812b68b7b89c21f95fd45fe980b1be56dcbfde1a344f455da68a7665102e0e295b41dd4b0cd59ed5ed379a8c4ec574fc35ed8dc08b1b1e1f2c75ad8c96225ff35ac86528ed30d582cba6ea1d01ab72c05492cfa05fe59720109316d3086446f5b6998ef682a269ab8af6a9e38009cd629ed879837ddb68d20cfe35342426aa6ae787309914931174251eac71d6fb41fa7b2e922"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0, r8, 0x4000, r8}, 0x18) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 3.252119532s ago: executing program 1 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000000300)={[{@dioread_nolock}, {@nobarrier}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@bsdgroups}]}, 0x11, 0x56b, &(0x7f0000000c00)="$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") unlink(&(0x7f0000000440)='./file1\x00') r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="b9", 0x1}], 0x1, 0x2000, 0x0, 0x3) 3.119053239s ago: executing program 1 (id=1286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001cc0)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x29) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x0, 0x2, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0xf8c7, 0x6, 0x7}}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x8d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x1e, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x88, &(0x7f0000000400)=""/136, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x1, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x0, 0x10, 0xc}, 0x94) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 2.891246808s ago: executing program 0 (id=1290): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000480)=@nfc_llcp={0x27, r6, 0x0, 0x1, 0x6, 0x2, "b9ae968a6341dbd3f394214a831a4c2bed83ce1124340b121f8ee773877b996cc57ad44fb2a7edf19dde599dede912a09c649aed43be7e5296af8fd62c7643", 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)="fe5047ca2cfe8027b4fb9e87a39b76d2e3ca9b3223e98c43bfe6589ad80ea4d97f486b7d200cf2ad5c9c0f90cbc742cf6e0d8be15a7dfc0c061bb7f1a45a50292dc6323435c2", 0x46}, {&(0x7f0000000580)="62d91bedca8ed8208ee3c7daff067ea1c0cb69b9272ff44a9b083b7bb5f498696f03fa3aca709ea6fa0537793a23a6df6f26e6e5cb88c39364b4636869ed24af0a304b336e52ec469daa06969e73f9de62e00aab4834f94b524acf089a051156fc23e5c300102ae1dcddebd77caf8e8437427750a6cf3137096b3eb18b1292571fcb30c91d461692eb3d6d7cc7c24e407c02f2", 0x93}, {&(0x7f0000000200)="bafdf8b38421acddcaa76979f96b2e198d8c3b4195011efa6b96ea28711007d5d3df9a1df12e04a12e52e3bfffdf38b820cdb347f100f267bc1a1ed8bd89e99b", 0x40}, {&(0x7f0000000280)="1edc76cd1fee75bc4ab009d475c33f075f8a68d8a75a5abeb36352b4e6cd5c32", 0x20}, {&(0x7f0000000640)="a9bee8c7da10fd33572abf5d534715114f36150f56bb6a62f318313d8bd90bb4baecf5fa955c6fd173ea43354be1fac73f1588f00cea24e01aafa3ad424ff666c8b0b1a67ed0ed78439e7457e4449d55b54390007ca501f416f7630070b26cab0131824ac7cd12c88b3873c390f5f0deeffbd01e80533597317616b34ab5c68e43d11a3ad82cec0a7d08a230a6ddacb15b0632e479b3ef75059bacccde41726c417b51bcf32e51fa34c60beb6aee05f35369a9369b07337d360e856f515c89bd34ebb24d59c7336b1d77f3f79f8b", 0xce}, {&(0x7f0000000980)="b338b8b5249ad2d2cdd96a50ce931ced7535ce3f53e4cfa97883a86d9bb8483b48f43e286438a2a6b3cf602df1722a053c41489e7d32b6e96475a489a91a80bb81b4d8d7fae242739e290fa41d73149176eb10adde5f05d9c5fbfcd9befcf541feacdb5330347e764c6a8ba0c80106b9ed7125ff9db6ec23e91eb13924aa7463d5b6cc5d6f7548c86ccc3a89187a603de3d6f3d99892cb82ef17f1e3388c6cb17fd2431530873af780830ecccc70a5d388643f217a8dff08d01c10b8812e00b1e9b18961be11b792419c07e50a46169f80b53d14c5e65dc8f2e24a77e5d810e03a59b49cfed9992f", 0xe8}, {&(0x7f0000000a80)="7ad81f22ead49897d6da1afb936bdc57951e657b4e9109e96a6848a10dab1b1bb534ca142f736826043a09f3398c71eb2b31daae13472fd962f06bd2f146508867f253324b9c91dc5aa3cc7388ca1f829f29c99652f32daf44fb86e4b42ca3cbefed4658a67a689f8401fa253bb6cfefc693afbb5b78712a465aa8afab7d5f60afe8f7b06290305a4e3755550798804b8260fb59308132e215b9fd542bf253fce490da4263842181afc765d2a3f1a2532618e69bc98240f88e18fcaaa414391713cb", 0xc2}, {&(0x7f0000000b80)="fd48167cdb95e3dd7f56db1090989c975e840b735cf453c5b63e061a2b8cd630f8a9e0222dd0fc1b4edf6a60e610cecf3c8b65ea9f067541a391672b80267cd7be2cf3a47babb17fb4e29bcdcdc0d25aa389bd32a9ade7d5febcabeab20bdbb11cd05cce3911c024b519b7d3fd7012086d9bcc5ea6e1bcc39ab9635d563716ef5be6ac0b19d9cf", 0x87}], 0x8}, 0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x4040004) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000e00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x6c, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f0000475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a608004500ac1414bb"], 0x114}], 0x1, 0x0, 0x0, 0x20000041}, 0x0) 2.041196857s ago: executing program 0 (id=1295): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x6) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = socket$inet6(0xa, 0x1, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x33}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x7, 0x69, 0x4, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) unshare(0x28000600) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000000fe, 0x542b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x100002, 0x4000003, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x52c}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB='='], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19445b2ecf13000000006f4ee1e8d2eccbe0b864af002775bf3921cc29932fa7f915a2e0112372631976f3eb32dc1615f25caa0db1", @ANYBLOB="43c62cf188", @ANYRES32, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYRESHEX], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r8, 0x0, 0x1034}, 0x18) 1.306681432s ago: executing program 0 (id=1299): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x602942, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.208928635s ago: executing program 5 (id=1300): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x2000, 0x4, &(0x7f00000003c0)) 1.179353788s ago: executing program 4 (id=1301): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r4}, &(0x7f0000000680)={'enc=', 'oaep', ' hash=', {'sha224-generic\x00'}}, &(0x7f0000001080), &(0x7f0000000240)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x40000000, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5, 0x0, 0x3}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x553, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x7, 0x3, 0x3, 0x40}, 0x5b, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x6, [{0x49, &(0x7f0000000f00)=@string={0x49, 0x3, "96959cb2056d019b1ee9eb838288bb800caa0560c330a2f58e760853cd8ad95e186ee1b994c4e54e241542482510344cbe5df23822f41f786031ee9657d811e1775c6e7f10182c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x1, 0x1}, {0xfff2, 0xffff}}, [{0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000c00) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0xffff413d, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0xfffffffd}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x5, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xff7ffffc}, {0x55}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x200, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000, 0x0, 0xffffffff}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {0x3}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='t=fd,rfdno=\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) ptrace(0x10, r10) 1.171672949s ago: executing program 5 (id=1302): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x36}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 1.16652741s ago: executing program 0 (id=1303): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x800) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x40}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$sock(r1, &(0x7f0000000900)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000800)="e9483a2ae82897476d409f3c3b9b677cadb986a519ff874646d8263d24d3e437fa96ca18224b1a091c0cae0462fd3712d7bb44ec91da838ba3013d93f212715ba17c07543118469685144a09b4f077aa2df5475c91d1c88cb9bddd5a74caca160d9eecce390443ba39b68242d3030a7e927d9e3fd13d496647d25ebdf17d542bca631cee714254080c39af2ba583feba703569a2b345bf27602a63111b94539b4a12b555ddf6e27f83da96c20020e5576dae9ba9ddbc9ee5e848f7bbf271a3c1b052151f88a5417835de8275ed6ed1ea9ace510398ede7429b1b", 0xda}, {&(0x7f0000000440)="a12e2281b5b092689561789d01", 0xd}], 0x3}, 0x10) r5 = perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a82f00810004008902450e0028006400000706907864010100000000004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50260004907800e7"], 0x0) read(r0, 0x0, 0x0) 1.061176234s ago: executing program 5 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xbb85, @any, 0xe93d, 0x7d96e06cf188bf30}, 0xe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180036732d07886618d82daed6319f31daa617105840469bcd6fab60f7b11ee5196828a72f9f2e27d02afe620a87048026296701a3425b71b638cbefac2b9f0f2d7cf42174ad75ec48602fe7ecbe68319de4851d211c5668cc0dad736570a3ad6aed109362f0c8f6ac3e06cdc601f9dd436c035e8dc7794b0db23a50de8165994a840f8317011a48c9900c9fabf43655a3916720fbdd082f6895b359d67027bea9c8a7daec1dfebbc090e415a9a120ba4f12ea2f8e90"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) getitimer(0x0, &(0x7f00000003c0)) socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x200000, 0x200000}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x400110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0xfe, 0xa, 0x0, 0x25, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0x6, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r7, 0x5608) exit(0xffff) syz_open_procfs(r4, &(0x7f0000000800)='net/raw6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 914.115123ms ago: executing program 0 (id=1305): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000480)=@nfc_llcp={0x27, r6, 0x0, 0x1, 0x6, 0x2, "b9ae968a6341dbd3f394214a831a4c2bed83ce1124340b121f8ee773877b996cc57ad44fb2a7edf19dde599dede912a09c649aed43be7e5296af8fd62c7643", 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)="fe5047ca2cfe8027b4fb9e87a39b76d2e3ca9b3223e98c43bfe6589ad80ea4d97f486b7d200cf2ad5c9c0f90cbc742cf6e0d8be15a7dfc0c061bb7f1a45a50292dc6323435c2", 0x46}, {&(0x7f0000000580)="62d91bedca8ed8208ee3c7daff067ea1c0cb69b9272ff44a9b083b7bb5f498696f03fa3aca709ea6fa0537793a23a6df6f26e6e5cb88c39364b4636869ed24af0a304b336e52ec469daa06969e73f9de62e00aab4834f94b524acf089a051156fc23e5c300102ae1dcddebd77caf8e8437427750a6cf3137096b3eb18b1292571fcb30c91d461692eb3d6d7cc7c24e407c02f2", 0x93}, {&(0x7f0000000200)="bafdf8b38421acddcaa76979f96b2e198d8c3b4195011efa6b96ea28711007d5d3df9a1df12e04a12e52e3bfffdf38b820cdb347f100f267bc1a1ed8bd89e99b", 0x40}, {&(0x7f0000000280)="1edc76cd1fee75bc4ab009d475c33f075f8a68d8a75a5abeb36352b4e6cd5c32", 0x20}, {&(0x7f0000000640)="a9bee8c7da10fd33572abf5d534715114f36150f56bb6a62f318313d8bd90bb4baecf5fa955c6fd173ea43354be1fac73f1588f00cea24e01aafa3ad424ff666c8b0b1a67ed0ed78439e7457e4449d55b54390007ca501f416f7630070b26cab0131824ac7cd12c88b3873c390f5f0deeffbd01e80533597317616b34ab5c68e43d11a3ad82cec0a7d08a230a6ddacb15b0632e479b3ef75059bacccde41726c417b51bcf32e51fa34c60beb6aee05f35369a9369b07337d360e856f515c89bd34ebb24d59c7336b1d77f3f79f8b", 0xce}, {&(0x7f0000000980)="b338b8b5249ad2d2cdd96a50ce931ced7535ce3f53e4cfa97883a86d9bb8483b48f43e286438a2a6b3cf602df1722a053c41489e7d32b6e96475a489a91a80bb81b4d8d7fae242739e290fa41d73149176eb10adde5f05d9c5fbfcd9befcf541feacdb5330347e764c6a8ba0c80106b9ed7125ff9db6ec23e91eb13924aa7463d5b6cc5d6f7548c86ccc3a89187a603de3d6f3d99892cb82ef17f1e3388c6cb17fd2431530873af780830ecccc70a5d388643f217a8dff08d01c10b8812e00b1e9b18961be11b792419c07e50a46169f80b53d14c5e65dc8f2e24a77e5d810e03a59b49cfed9992f", 0xe8}, {0x0}, {&(0x7f0000000a80)="7ad81f22ead49897d6da1afb936bdc57951e657b4e9109e96a6848a10dab1b1bb534ca142f736826043a09f3398c71eb2b31daae13472fd962f06bd2f146508867f253324b9c91dc5aa3cc7388ca1f829f29c99652f32daf44fb86e4b42ca3cbefed4658a67a689f8401fa253bb6cfefc693afbb5b78712a465aa8afab7d5f60afe8f7b06290305a4e3755550798804b8260fb59308132e215b9fd542bf253fce490da4263842181afc765d2a3f1a2532618e69bc98240f88e18fcaaa414391713cb", 0xc2}, {&(0x7f0000000b80)="fd48167cdb95e3dd7f56db1090989c975e840b735cf453c5b63e061a2b8cd630f8a9e0222dd0fc1b4edf6a60e610cecf3c8b65ea9f067541a391672b80267cd7be2cf3a47babb17fb4e29bcdcdc0d25aa389bd32a9ade7d5febcabeab20bdbb11cd05cce3911c024b519b7d3fd7012086d9bcc5ea6e1bcc39ab9635d563716ef5be6ac0b19d9cf", 0x87}], 0x9}, 0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x4040004) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000e00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x6c, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20000041}, 0x0) 812.565406ms ago: executing program 1 (id=1306): gettid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) r2 = creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1c000000, 0x2, 0xff, 0x8, 0x80, 0x5}, 0x20) syz_open_dev$hidraw(&(0x7f0000000000), 0x401, 0xac100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 505.756575ms ago: executing program 4 (id=1307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x7ffc0002}, {0x5, 0x40, 0x9, 0x4}, {0xb4, 0x0, 0x9, 0x9c}]}) modify_ldt$read(0x0, &(0x7f00000004c0)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 442.584933ms ago: executing program 4 (id=1308): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 390.62757ms ago: executing program 0 (id=1309): gettid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 283.494414ms ago: executing program 4 (id=1310): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) futex_waitv(&(0x7f0000001740)=[{0xf, &(0x7f0000001380)=0xfffffffffffeffff, 0x6}], 0x1, 0x0, 0x0, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r7, 0x120f, 0xde6, 0x1}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r8, 0x1}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53", 0xdc}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d88", 0x79}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac44", 0xd1}], 0x3}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc", 0x1}], 0x1}}], 0x3, 0x2090) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 207.369003ms ago: executing program 4 (id=1311): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x48990}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0xffffffffffffffe8) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r5, 0x0, 0xbf5, 0x2000402) socket$nl_route(0x10, 0x3, 0x0) pwrite64(r5, &(0x7f00000005c0)="0e38565edc7c3ff2ff4010bb4f4cae088c6cfd3b52698a77e2878ec2ff6427cbf5f75ccbccf465d1f05550ff611455f4e378d281f74c36242aa17d69037b080305a39a72fe0d32b3687062545476607d132c51cebd3afd7c2e9b6bccb7bd9aa00f07be60ae4e3a63c09a1efa9367597877b7b2fe608cd61ae7e25d6af31e1a67b50e47aaa8336f97237bd2ae886446f9af8cd8e0f4c11ce65b7be0a17b311d4c9d672bc9a5fabd326042a56edc38", 0xae, 0xa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x7f, 0x5, 0x49, @dev={0xfe, 0x80, '\x00', 0x30}, @private1, 0x10, 0x7828, 0x81, 0x7}}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 196.881674ms ago: executing program 5 (id=1312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003e9000600850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x7ffe) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002400)=ANY=[@ANYBLOB="500000000102030000000000000000000a0000073c0001802c00018014000300fc00000000000000004400000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 69.791971ms ago: executing program 5 (id=1313): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x602942, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.135847ms ago: executing program 5 (id=1314): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 0s ago: executing program 4 (id=1315): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) fsync(r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T5818] __secure_computing+0x82/0x150 [ 156.279319][ T5818] syscall_trace_enter+0xcf/0x1e0 [ 156.279431][ T5818] do_syscall_64+0xa4/0x2b0 [ 156.279457][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.279477][ T5818] RIP: 0033:0x7f0d5c67f749 [ 156.279493][ T5818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.279571][ T5818] RSP: 002b:00007f0d5b0df038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 156.279604][ T5818] RAX: ffffffffffffffda RBX: 00007f0d5c8d5fa0 RCX: 00007f0d5c67f749 [ 156.279619][ T5818] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 156.279634][ T5818] RBP: 00007f0d5b0df090 R08: 0000000000000000 R09: 0000000000000000 [ 156.279650][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.279665][ T5818] R13: 00007f0d5c8d6038 R14: 00007f0d5c8d5fa0 R15: 00007fff85727808 [ 156.279737][ T5818] [ 157.025976][ T5813] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.535339][ T5813] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.510429][ T5813] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.575931][ T5816] loop1: detected capacity change from 0 to 128 [ 158.620937][ T5816] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.634722][ T5816] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.669037][ T5816] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.877249][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 158.877268][ T29] audit: type=1326 audit(1768540324.511:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.011913][ T5835] loop0: detected capacity change from 0 to 1024 [ 159.155594][ T29] audit: type=1326 audit(1768540324.541:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.178990][ T29] audit: type=1326 audit(1768540324.551:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.202529][ T29] audit: type=1326 audit(1768540324.551:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.225930][ T29] audit: type=1326 audit(1768540324.551:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.249402][ T29] audit: type=1326 audit(1768540324.551:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.272815][ T29] audit: type=1326 audit(1768540324.551:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 159.296261][ T29] audit: type=1326 audit(1768540324.551:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 159.319688][ T29] audit: type=1326 audit(1768540324.581:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 159.343061][ T29] audit: type=1326 audit(1768540324.581:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 159.385985][ T5835] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.733: bad orphan inode 134217728 [ 159.411028][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.559347][ T5847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5847 comm=syz.5.734 [ 159.607803][ T5845] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.672456][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 159.925603][ T5856] random: crng reseeded on system resumption [ 159.937546][ T5840] netlink: 'syz.5.734': attribute type 1 has an invalid length. [ 159.945258][ T5840] netlink: 224 bytes leftover after parsing attributes in process `syz.5.734'. [ 160.082485][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.650623][ T5867] loop2: detected capacity change from 0 to 1024 [ 160.965776][ T5870] loop0: detected capacity change from 0 to 128 [ 160.989171][ T5870] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.001584][ T5870] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.035002][ T5870] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.218552][ T5867] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.746: bad orphan inode 134217728 [ 161.392199][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.451104][ T4608] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.653619][ T5881] sctp: [Deprecated]: syz.4.748 (pid 5881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.653619][ T5881] Use struct sctp_sack_info instead [ 161.845493][ T5888] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 162.014673][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.613836][ T5893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.752'. [ 162.625056][ T5894] wireguard0: entered promiscuous mode [ 162.630604][ T5894] wireguard0: entered allmulticast mode [ 162.664759][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 162.719221][ T5899] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.726551][ T5899] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.733728][ T5899] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.740976][ T5899] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.748538][ T5899] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.755883][ T5899] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.019108][ T5903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5903 comm=syz.2.756 [ 163.046463][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 163.160230][ T5904] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 163.168052][ T5904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.756'. [ 163.183559][ T5908] random: crng reseeded on system resumption [ 163.306973][ T4592] Bluetooth: hci1: Frame reassembly failed (-84) [ 163.465352][ T3574] Bluetooth: hci0: command 0x1003 tx timeout [ 163.471597][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.667410][ T5914] loop1: detected capacity change from 0 to 128 [ 163.675930][ T5914] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.689207][ T5914] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.723499][ T5914] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.445856][ T5932] loop0: detected capacity change from 0 to 128 [ 164.490648][ T5932] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.503317][ T5932] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.537736][ T5932] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.567787][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.649111][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.802627][ T5931] 9p: Bad value for 'rfdno' [ 165.022443][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 165.022456][ T29] audit: type=1326 audit(1768540330.651:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152382][ T29] audit: type=1326 audit(1768540330.681:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152483][ T29] audit: type=1326 audit(1768540330.681:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152518][ T29] audit: type=1326 audit(1768540330.681:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152570][ T29] audit: type=1326 audit(1768540330.681:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152603][ T29] audit: type=1326 audit(1768540330.681:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152653][ T29] audit: type=1326 audit(1768540330.681:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152756][ T29] audit: type=1326 audit(1768540330.691:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152781][ T29] audit: type=1326 audit(1768540330.691:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.152807][ T29] audit: type=1326 audit(1768540330.691:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 165.412296][ T3574] Bluetooth: hci1: command 0x1003 tx timeout [ 165.412611][ T3739] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 165.776122][ T5959] loop2: detected capacity change from 0 to 1024 [ 165.776695][ T5959] EXT4-fs: inline encryption not supported [ 165.796905][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.841935][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.110452][ T5968] loop4: detected capacity change from 0 to 1024 [ 166.148688][ T5968] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.778: bad orphan inode 134217728 [ 166.197977][ T5968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.228774][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.255883][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.388883][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 166.555508][ T5974] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 167.628240][ T5978] loop5: detected capacity change from 0 to 128 [ 167.719125][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.777079][ T5978] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.789999][ T5978] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.829687][ T4570] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.845121][ T5984] loop0: detected capacity change from 0 to 1024 [ 167.857899][ T5984] EXT4-fs: inline encryption not supported [ 167.921415][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.943281][ T5989] random: crng reseeded on system resumption [ 168.111496][ T5993] loop1: detected capacity change from 0 to 1024 [ 168.130133][ T5993] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.788: bad orphan inode 134217728 [ 168.174584][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.592941][ T5978] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.629492][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.949700][ T6001] loop0: detected capacity change from 0 to 1024 [ 169.019019][ T6001] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.787: bad orphan inode 134217728 [ 169.030499][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.045933][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.139565][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 169.158758][ T6003] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 169.253542][ T6005] loop4: detected capacity change from 0 to 1024 [ 169.275580][ T6005] EXT4-fs: inline encryption not supported [ 169.306948][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.865292][ T3574] Bluetooth: hci0: command 0x1003 tx timeout [ 169.871567][ T3739] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.897132][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.910650][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.963938][ T6011] random: crng reseeded on system resumption [ 170.041150][ T6013] loop4: detected capacity change from 0 to 1024 [ 170.096029][ T6013] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.792: bad orphan inode 134217728 [ 170.148925][ T6013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.225899][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.303944][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.340998][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 170.341012][ T29] audit: type=1326 audit(1768540335.971:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.410024][ T6025] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.472454][ T29] audit: type=1326 audit(1768540336.001:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.495864][ T29] audit: type=1326 audit(1768540336.001:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.519212][ T29] audit: type=1326 audit(1768540336.001:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.542556][ T29] audit: type=1326 audit(1768540336.001:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.565881][ T29] audit: type=1326 audit(1768540336.001:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.589198][ T29] audit: type=1326 audit(1768540336.001:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 170.612699][ T29] audit: type=1326 audit(1768540336.001:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e3c0d1667 code=0x7ffc0000 [ 170.636019][ T29] audit: type=1326 audit(1768540336.001:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8e3c0d15dc code=0x7ffc0000 [ 170.659374][ T29] audit: type=1326 audit(1768540336.001:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8e3c0d1514 code=0x7ffc0000 [ 170.913124][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.093837][ T850] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.182363][ T6037] loop4: detected capacity change from 0 to 128 [ 174.005310][ T3574] Bluetooth: hci0: command 0x1003 tx timeout [ 174.015580][ T3739] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.285539][ T6037] EXT4-fs: error -4 creating inode table initialization thread [ 174.293316][ T6037] EXT4-fs (loop4): mount failed [ 174.496280][ T6051] loop5: detected capacity change from 0 to 128 [ 174.528333][ T6051] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.540843][ T6051] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.573831][ T6051] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.665479][ T6055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6055 comm=syz.1.809 [ 174.690324][ T6061] loop0: detected capacity change from 0 to 1024 [ 174.762262][ T6061] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.810: bad orphan inode 134217728 [ 174.781240][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 174.826102][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.974929][ T6056] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 174.982689][ T6056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.809'. [ 175.858349][ T6073] loop2: detected capacity change from 0 to 1024 [ 175.909281][ T6073] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.814: bad orphan inode 134217728 [ 175.973828][ T6073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.017654][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.057523][ T6077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6077 comm=syz.1.815 [ 176.103047][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 176.136664][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 176.158995][ T6078] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 176.257942][ T6081] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 176.264524][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.272332][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 176.347998][ T6082] vhci_hcd: connection closed [ 176.348311][ T4569] vhci_hcd vhci_hcd.4: stop threads [ 176.358329][ T4569] vhci_hcd vhci_hcd.4: release socket [ 176.363795][ T4569] vhci_hcd vhci_hcd.4: disconnect device [ 176.417024][ T6077] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 176.424794][ T6077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.815'. [ 176.574807][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.805947][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 176.805965][ T29] audit: type=1326 audit(1768540342.441:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 176.965396][ T29] audit: type=1326 audit(1768540342.481:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 176.988932][ T29] audit: type=1326 audit(1768540342.481:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.012391][ T29] audit: type=1326 audit(1768540342.481:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.035901][ T29] audit: type=1326 audit(1768540342.481:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.059296][ T29] audit: type=1326 audit(1768540342.481:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.082717][ T29] audit: type=1326 audit(1768540342.481:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.106092][ T29] audit: type=1326 audit(1768540342.481:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.129495][ T29] audit: type=1326 audit(1768540342.481:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.152926][ T29] audit: type=1326 audit(1768540342.481:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 177.219588][ T6114] loop2: detected capacity change from 0 to 1024 [ 177.229179][ T6114] EXT4-fs: inline encryption not supported [ 177.267196][ T6114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.329575][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.474873][ T6124] loop1: detected capacity change from 0 to 1024 [ 177.481550][ T6119] loop2: detected capacity change from 0 to 4096 [ 177.490763][ T6124] EXT4-fs: inline encryption not supported [ 177.498115][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.526727][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.583806][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.635181][ T6130] loop1: detected capacity change from 0 to 1024 [ 177.687707][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.704560][ T6139] FAULT_INJECTION: forcing a failure. [ 177.704560][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 177.719224][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.4.836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.719259][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.719337][ T6139] Call Trace: [ 177.719364][ T6139] [ 177.719373][ T6139] __dump_stack+0x1d/0x30 [ 177.719454][ T6139] dump_stack_lvl+0x95/0xd0 [ 177.719509][ T6139] dump_stack+0x15/0x1b [ 177.719527][ T6139] should_fail_ex+0x265/0x280 [ 177.719551][ T6139] should_failslab+0x8c/0xb0 [ 177.719633][ T6139] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 177.719665][ T6139] ? __alloc_skb+0x2ff/0x4b0 [ 177.719699][ T6139] __alloc_skb+0x2ff/0x4b0 [ 177.719729][ T6139] ? __alloc_skb+0x228/0x4b0 [ 177.719757][ T6139] audit_log_start+0x3a0/0x720 [ 177.719931][ T6139] ? kstrtouint+0x76/0xc0 [ 177.719956][ T6139] audit_seccomp+0x48/0x100 [ 177.719986][ T6139] ? __seccomp_filter+0x832/0x1260 [ 177.720013][ T6139] __seccomp_filter+0x843/0x1260 [ 177.720104][ T6139] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.720141][ T6139] ? vfs_write+0x7e8/0x960 [ 177.720164][ T6139] ? __rcu_read_unlock+0x4f/0x70 [ 177.720255][ T6139] ? __fget_files+0x184/0x1c0 [ 177.720280][ T6139] __secure_computing+0x82/0x150 [ 177.720314][ T6139] syscall_trace_enter+0xcf/0x1e0 [ 177.720346][ T6139] do_syscall_64+0xa4/0x2b0 [ 177.720367][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.720388][ T6139] RIP: 0033:0x7efce5d1f749 [ 177.720495][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.720519][ T6139] RSP: 002b:00007efce4787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 177.720590][ T6139] RAX: ffffffffffffffda RBX: 00007efce5f75fa0 RCX: 00007efce5d1f749 [ 177.720607][ T6139] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 177.720668][ T6139] RBP: 00007efce4787090 R08: 0000000000000005 R09: 0000000000000000 [ 177.720685][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.720700][ T6139] R13: 00007efce5f76038 R14: 00007efce5f75fa0 R15: 00007ffc16e75718 [ 177.720746][ T6139] [ 177.953698][ T6130] bridge: RTM_NEWNEIGH with invalid ether address [ 177.997133][ T6130] EXT4-fs (loop1): shut down requested (1) [ 178.000327][ T6141] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 178.009508][ T6141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 178.017136][ T6141] vhci_hcd vhci_hcd.0: Device attached [ 178.024406][ T6130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 178.034816][ T6130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 178.050342][ T6147] netlink: 72 bytes leftover after parsing attributes in process `syz.0.839'. [ 178.059986][ T6142] vhci_hcd: connection closed [ 178.060245][ T4613] vhci_hcd vhci_hcd.5: stop threads [ 178.070304][ T4613] vhci_hcd vhci_hcd.5: release socket [ 178.075769][ T4613] vhci_hcd vhci_hcd.5: disconnect device [ 178.081786][ T6130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 178.084236][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.103723][ T6147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.839'. [ 178.152260][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.152321][ T6151] loop2: detected capacity change from 0 to 1024 [ 178.184788][ T6151] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.840: bad orphan inode 134217728 [ 178.207859][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.281753][ T6163] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 178.339667][ T6164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6164 comm=syz.0.845 [ 178.468819][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 178.490112][ T6168] xt_TCPMSS: Only works on TCP SYN packets [ 178.510443][ T6168] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 178.616572][ T6164] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 178.624265][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz.0.845'. [ 178.691730][ T6181] FAULT_INJECTION: forcing a failure. [ 178.691730][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 178.704573][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.5.850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.704671][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.704688][ T6181] Call Trace: [ 178.704696][ T6181] [ 178.704705][ T6181] __dump_stack+0x1d/0x30 [ 178.704740][ T6181] dump_stack_lvl+0x95/0xd0 [ 178.704769][ T6181] dump_stack+0x15/0x1b [ 178.704794][ T6181] should_fail_ex+0x265/0x280 [ 178.704824][ T6181] should_failslab+0x8c/0xb0 [ 178.704852][ T6181] kmem_cache_alloc_noprof+0x69/0x4b0 [ 178.704921][ T6181] ? skb_clone+0x151/0x1f0 [ 178.704960][ T6181] skb_clone+0x151/0x1f0 [ 178.704997][ T6181] __netlink_deliver_tap+0x2c9/0x500 [ 178.705123][ T6181] netlink_unicast+0x66b/0x690 [ 178.705162][ T6181] netlink_sendmsg+0x58b/0x6b0 [ 178.705207][ T6181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.705291][ T6181] __sock_sendmsg+0x145/0x180 [ 178.705312][ T6181] ____sys_sendmsg+0x31e/0x4a0 [ 178.705393][ T6181] ___sys_sendmsg+0x17b/0x1d0 [ 178.705488][ T6181] __x64_sys_sendmsg+0xd4/0x160 [ 178.705531][ T6181] x64_sys_call+0x17ba/0x3000 [ 178.705629][ T6181] do_syscall_64+0xca/0x2b0 [ 178.705656][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.705684][ T6181] RIP: 0033:0x7f5061a7f749 [ 178.705704][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.705754][ T6181] RSP: 002b:00007f50604e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.705780][ T6181] RAX: ffffffffffffffda RBX: 00007f5061cd5fa0 RCX: 00007f5061a7f749 [ 178.705796][ T6181] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 178.705812][ T6181] RBP: 00007f50604e7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.705831][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.705848][ T6181] R13: 00007f5061cd6038 R14: 00007f5061cd5fa0 R15: 00007ffe96a1bc48 [ 178.705869][ T6181] [ 178.934218][ T6186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.853'. [ 178.970743][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.022065][ T4580] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.038670][ T6196] FAULT_INJECTION: forcing a failure. [ 179.038670][ T6196] name failslab, interval 1, probability 0, space 0, times 0 [ 179.051466][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.4.858 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.051574][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.051590][ T6196] Call Trace: [ 179.051599][ T6196] [ 179.051615][ T6196] __dump_stack+0x1d/0x30 [ 179.051645][ T6196] dump_stack_lvl+0x95/0xd0 [ 179.051692][ T6196] dump_stack+0x15/0x1b [ 179.051717][ T6196] should_fail_ex+0x265/0x280 [ 179.051748][ T6196] should_failslab+0x8c/0xb0 [ 179.051776][ T6196] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 179.051806][ T6196] ? __alloc_skb+0x2ff/0x4b0 [ 179.051860][ T6196] __alloc_skb+0x2ff/0x4b0 [ 179.051887][ T6196] ? __alloc_skb+0x228/0x4b0 [ 179.051919][ T6196] netlink_alloc_large_skb+0xbf/0xf0 [ 179.051995][ T6196] netlink_sendmsg+0x3cf/0x6b0 [ 179.052044][ T6196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.052149][ T6196] __sock_sendmsg+0x145/0x180 [ 179.052177][ T6196] ____sys_sendmsg+0x31e/0x4a0 [ 179.052215][ T6196] ___sys_sendmsg+0x17b/0x1d0 [ 179.052256][ T6196] __x64_sys_sendmsg+0xd4/0x160 [ 179.052371][ T6196] x64_sys_call+0x17ba/0x3000 [ 179.052395][ T6196] do_syscall_64+0xca/0x2b0 [ 179.052418][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.052460][ T6196] RIP: 0033:0x7efce5d1f749 [ 179.052505][ T6196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.052526][ T6196] RSP: 002b:00007efce4787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.052577][ T6196] RAX: ffffffffffffffda RBX: 00007efce5f75fa0 RCX: 00007efce5d1f749 [ 179.052592][ T6196] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000006 [ 179.052615][ T6196] RBP: 00007efce4787090 R08: 0000000000000000 R09: 0000000000000000 [ 179.052632][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.052647][ T6196] R13: 00007efce5f76038 R14: 00007efce5f75fa0 R15: 00007ffc16e75718 [ 179.052668][ T6196] [ 179.271137][ T6198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 179.277712][ T6198] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.285453][ T6198] vhci_hcd vhci_hcd.0: Device attached [ 179.292020][ T6199] vhci_hcd: connection closed [ 179.292095][ T4593] vhci_hcd vhci_hcd.2: stop threads [ 179.302104][ T4593] vhci_hcd vhci_hcd.2: release socket [ 179.307619][ T4593] vhci_hcd vhci_hcd.2: disconnect device [ 179.648420][ T4593] Bluetooth: hci1: Frame reassembly failed (-84) [ 179.903385][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.914201][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.956018][ T6223] 9p: Bad value for 'rfdno' [ 180.279275][ T6239] __nla_validate_parse: 3 callbacks suppressed [ 180.279298][ T6239] netlink: 72 bytes leftover after parsing attributes in process `syz.4.876'. [ 180.294963][ T6239] netlink: 64 bytes leftover after parsing attributes in process `syz.4.876'. [ 180.320865][ T6241] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 180.327452][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 180.335098][ T6241] vhci_hcd vhci_hcd.0: Device attached [ 180.341051][ T6242] vhci_hcd: connection closed [ 180.341341][ T4569] vhci_hcd vhci_hcd.4: stop threads [ 180.351406][ T4569] vhci_hcd vhci_hcd.4: release socket [ 180.356951][ T4569] vhci_hcd vhci_hcd.4: disconnect device [ 180.601647][ T6258] bridge0: port 3(macsec0) entered blocking state [ 180.608242][ T6258] bridge0: port 3(macsec0) entered disabled state [ 180.615282][ T6258] macsec0: entered allmulticast mode [ 180.620647][ T6258] bridge0: entered allmulticast mode [ 180.641927][ T6258] macsec0: left allmulticast mode [ 180.647045][ T6258] bridge0: left allmulticast mode [ 180.665618][ T6259] loop0: detected capacity change from 0 to 128 [ 180.803921][ T6259] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.816430][ T6259] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.851010][ T6259] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.986801][ T6265] loop2: detected capacity change from 0 to 512 [ 180.997252][ T6265] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.038569][ T6265] EXT4-fs (loop2): 1 truncate cleaned up [ 181.048903][ T6265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.063900][ T6265] FAULT_INJECTION: forcing a failure. [ 181.063900][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 181.076654][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.2.885 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.076733][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.076746][ T6265] Call Trace: [ 181.076753][ T6265] [ 181.076763][ T6265] __dump_stack+0x1d/0x30 [ 181.076814][ T6265] dump_stack_lvl+0x95/0xd0 [ 181.076842][ T6265] dump_stack+0x15/0x1b [ 181.076867][ T6265] should_fail_ex+0x265/0x280 [ 181.076922][ T6265] should_failslab+0x8c/0xb0 [ 181.076950][ T6265] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 181.077032][ T6265] ? __alloc_skb+0x2ff/0x4b0 [ 181.077063][ T6265] __alloc_skb+0x2ff/0x4b0 [ 181.077086][ T6265] ? __alloc_skb+0x228/0x4b0 [ 181.077175][ T6265] audit_log_start+0x3a0/0x720 [ 181.077201][ T6265] ? __rcu_read_unlock+0x4f/0x70 [ 181.077228][ T6265] audit_seccomp+0x48/0x100 [ 181.077367][ T6265] ? __seccomp_filter+0x832/0x1260 [ 181.077398][ T6265] __seccomp_filter+0x843/0x1260 [ 181.077433][ T6265] ? __schedule+0x85f/0xcd0 [ 181.077508][ T6265] __secure_computing+0x82/0x150 [ 181.077539][ T6265] syscall_trace_enter+0xcf/0x1e0 [ 181.077570][ T6265] do_syscall_64+0xa4/0x2b0 [ 181.077600][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.077620][ T6265] RIP: 0033:0x7f0d5c67f749 [ 181.077635][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.077653][ T6265] RSP: 002b:00007f0d5b0df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 181.077724][ T6265] RAX: ffffffffffffffda RBX: 00007f0d5c8d5fa0 RCX: 00007f0d5c67f749 [ 181.077740][ T6265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 181.077803][ T6265] RBP: 00007f0d5b0df090 R08: 0000000000001000 R09: 0000000000000000 [ 181.077818][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.077830][ T6265] R13: 00007f0d5c8d6038 R14: 00007f0d5c8d5fa0 R15: 00007fff85727808 [ 181.077906][ T6265] [ 181.079111][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 181.280896][ T3739] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.365834][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.538410][ T6274] sctp: [Deprecated]: syz.1.889 (pid 6274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.538410][ T6274] Use struct sctp_sack_info instead [ 181.670104][ T6276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.887'. [ 181.719292][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 181.725406][ T3574] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 181.776477][ T6276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.887'. [ 181.840317][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 181.840335][ T29] audit: type=1400 audit(1768540347.471:3646): avc: denied { create } for pid=6281 comm="syz.5.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.867482][ T29] audit: type=1400 audit(1768540347.501:3647): avc: denied { read } for pid=6281 comm="syz.5.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.919503][ T29] audit: type=1400 audit(1768540347.551:3648): avc: denied { write } for pid=6281 comm="syz.5.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.015159][ T6290] sctp: [Deprecated]: syz.1.895 (pid 6290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.015159][ T6290] Use struct sctp_sack_info instead [ 182.068840][ T4569] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.146372][ T6297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.184535][ T6301] loop4: detected capacity change from 0 to 1024 [ 182.193391][ T29] audit: type=1400 audit(1768540347.821:3649): avc: denied { setopt } for pid=6296 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.228757][ T6301] EXT4-fs: inline encryption not supported [ 182.258370][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.316651][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.789072][ T6297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.812338][ T6289] syz.5.892 (6289) used greatest stack depth: 6192 bytes left [ 182.880370][ T6297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.901161][ T29] audit: type=1326 audit(1768540348.501:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 183.026992][ T6297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.039294][ T29] audit: type=1326 audit(1768540348.561:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 183.062749][ T29] audit: type=1326 audit(1768540348.561:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 183.086006][ T29] audit: type=1326 audit(1768540348.561:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 183.109338][ T29] audit: type=1326 audit(1768540348.561:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 183.132679][ T29] audit: type=1326 audit(1768540348.561:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 183.168571][ T6315] ref_ctr increment failed for inode: 0x415 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812e042f40 [ 183.196112][ T6312] wireguard0: entered promiscuous mode [ 183.201733][ T6312] wireguard0: entered allmulticast mode [ 183.265405][ T4580] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.280081][ T4580] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.313043][ T4580] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.367169][ T4580] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.409911][ T6325] loop4: detected capacity change from 0 to 128 [ 183.463299][ T6325] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.570786][ T6324] delete_channel: no stack [ 183.581415][ T6332] wireguard0: entered promiscuous mode [ 183.587124][ T6332] wireguard0: entered allmulticast mode [ 183.756251][ T6338] ref_ctr increment failed for inode: 0x114 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812e042f40 [ 184.115263][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.317590][ T6340] loop4: detected capacity change from 0 to 128 [ 184.353480][ T6342] loop2: detected capacity change from 0 to 1024 [ 184.368598][ T6340] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.381152][ T6340] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.413944][ T6340] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.475210][ T6342] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.912: bad orphan inode 134217728 [ 184.577326][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.618369][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.714599][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.828335][ T6352] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 185.012286][ T6345] 9p: Bad value for 'rfdno' [ 185.485444][ T6362] wireguard0: entered promiscuous mode [ 185.491003][ T6362] wireguard0: entered allmulticast mode [ 185.526644][ T6366] ref_ctr increment failed for inode: 0x11a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812e042880 [ 185.675562][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.772425][ T6379] loop5: detected capacity change from 0 to 1024 [ 185.789226][ T6379] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.926: bad orphan inode 134217728 [ 185.801491][ T6379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.874335][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.926'. [ 185.897426][ T6381] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 185.912580][ T6373] loop2: detected capacity change from 0 to 1024 [ 185.964697][ T6373] EXT4-fs: inline encryption not supported [ 186.006760][ T6373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.062041][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.130998][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.319057][ T4580] Bluetooth: hci1: Frame reassembly failed (-84) [ 186.618681][ T6398] loop2: detected capacity change from 0 to 1024 [ 186.631342][ T6398] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.932: bad orphan inode 134217728 [ 186.652566][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.726685][ T6401] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.912397][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.005326][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.027525][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.072248][ T6406] loop5: detected capacity change from 0 to 1024 [ 187.095787][ T6406] EXT4-fs: inline encryption not supported [ 187.130185][ T6403] 9p: Bad value for 'rfdno' [ 187.138881][ T6406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.166518][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.543381][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 187.543399][ T29] audit: type=1326 audit(1768540353.171:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.574734][ T29] audit: type=1326 audit(1768540353.171:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.598267][ T29] audit: type=1326 audit(1768540353.181:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.621753][ T29] audit: type=1326 audit(1768540353.201:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.645798][ T29] audit: type=1326 audit(1768540353.211:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.669091][ T29] audit: type=1326 audit(1768540353.211:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.692577][ T29] audit: type=1326 audit(1768540353.211:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.715954][ T29] audit: type=1326 audit(1768540353.211:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.721738][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.739338][ T29] audit: type=1326 audit(1768540353.211:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.768847][ T29] audit: type=1326 audit(1768540353.281:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5d1f749 code=0x7ffc0000 [ 187.813352][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.822332][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.919243][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.928298][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.946741][ T6429] 9p: Bad value for 'rfdno' [ 188.083660][ T6432] random: crng reseeded on system resumption [ 188.137349][ T6436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.165371][ T6438] sctp: [Deprecated]: syz.4.945 (pid 6438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.165371][ T6438] Use struct sctp_sack_info instead [ 188.190961][ T6436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.232838][ T4593] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.250141][ T6436] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.299278][ T6436] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.345298][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 188.349177][ T3574] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 188.395711][ T4588] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.403968][ T4588] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.414041][ T4588] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.433604][ T4588] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.523670][ T6455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 188.530245][ T6455] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.537969][ T6455] vhci_hcd vhci_hcd.0: Device attached [ 188.562555][ T6460] vhci_hcd: connection closed [ 188.562772][ T4593] vhci_hcd vhci_hcd.2: stop threads [ 188.572832][ T4593] vhci_hcd vhci_hcd.2: release socket [ 188.578312][ T4593] vhci_hcd vhci_hcd.2: disconnect device [ 189.081297][ T6473] FAULT_INJECTION: forcing a failure. [ 189.081297][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.094467][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.2.959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.094524][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.094540][ T6473] Call Trace: [ 189.094549][ T6473] [ 189.094556][ T6473] __dump_stack+0x1d/0x30 [ 189.094659][ T6473] dump_stack_lvl+0x95/0xd0 [ 189.094688][ T6473] dump_stack+0x15/0x1b [ 189.094781][ T6473] should_fail_ex+0x265/0x280 [ 189.094810][ T6473] should_fail+0xb/0x20 [ 189.094834][ T6473] should_fail_usercopy+0x1a/0x20 [ 189.094891][ T6473] _copy_from_iter+0xcf/0xe70 [ 189.094914][ T6473] ? __alloc_skb+0x396/0x4b0 [ 189.094935][ T6473] ? __alloc_skb+0x228/0x4b0 [ 189.094958][ T6473] netlink_sendmsg+0x471/0x6b0 [ 189.095052][ T6473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.095080][ T6473] __sock_sendmsg+0x145/0x180 [ 189.095098][ T6473] ____sys_sendmsg+0x31e/0x4a0 [ 189.095171][ T6473] ___sys_sendmsg+0x17b/0x1d0 [ 189.095318][ T6473] __x64_sys_sendmsg+0xd4/0x160 [ 189.095373][ T6473] x64_sys_call+0x17ba/0x3000 [ 189.095401][ T6473] do_syscall_64+0xca/0x2b0 [ 189.095449][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.095543][ T6473] RIP: 0033:0x7f0d5c67f749 [ 189.095562][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.095586][ T6473] RSP: 002b:00007f0d5b0df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.095643][ T6473] RAX: ffffffffffffffda RBX: 00007f0d5c8d5fa0 RCX: 00007f0d5c67f749 [ 189.095689][ T6473] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 189.095701][ T6473] RBP: 00007f0d5b0df090 R08: 0000000000000000 R09: 0000000000000000 [ 189.095713][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.095724][ T6473] R13: 00007f0d5c8d6038 R14: 00007f0d5c8d5fa0 R15: 00007fff85727808 [ 189.095750][ T6473] [ 189.310103][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.324251][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.341527][ T6475] 9p: Bad value for 'rfdno' [ 189.404300][ T4588] Bluetooth: hci1: Frame reassembly failed (-84) [ 189.467450][ T6481] netlink: 72 bytes leftover after parsing attributes in process `syz.0.962'. [ 189.477081][ T6481] netlink: 64 bytes leftover after parsing attributes in process `syz.0.962'. [ 189.529923][ T6485] wireguard0: entered promiscuous mode [ 189.535485][ T6485] wireguard0: entered allmulticast mode [ 189.579366][ T6487] ref_ctr increment failed for inode: 0x39b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a093cc0 [ 189.659640][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.668209][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.681766][ T6489] 9p: Bad value for 'rfdno' [ 189.908675][ T6498] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.920752][ T6498] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 189.936863][ T6498] IPv6: Can't replace route, no match found [ 189.981278][ T6502] sctp: [Deprecated]: syz.0.969 (pid 6502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.981278][ T6502] Use struct sctp_sack_info instead [ 190.014597][ T6504] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.037357][ T6506] netlink: 72 bytes leftover after parsing attributes in process `syz.0.973'. [ 190.046985][ T6506] netlink: 64 bytes leftover after parsing attributes in process `syz.0.973'. [ 190.058629][ T6504] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.108105][ T6504] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.167610][ T6504] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.240855][ T4593] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.265294][ T3739] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.284785][ T4593] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.302335][ T4593] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.310881][ T4593] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.394421][ T6520] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 190.401003][ T6520] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.408666][ T6520] vhci_hcd vhci_hcd.0: Device attached [ 190.444058][ T6521] vhci_hcd: connection closed [ 190.444195][ T4588] vhci_hcd vhci_hcd.5: stop threads [ 190.454218][ T4588] vhci_hcd vhci_hcd.5: release socket [ 190.459669][ T4588] vhci_hcd vhci_hcd.5: disconnect device [ 190.466542][ T6526] sctp: [Deprecated]: syz.4.983 (pid 6526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.466542][ T6526] Use struct sctp_sack_info instead [ 190.497364][ T6530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.984'. [ 190.518793][ T6530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.984'. [ 190.540398][ T6533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.566425][ T6538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 190.573057][ T6538] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.580720][ T6538] vhci_hcd vhci_hcd.0: Device attached [ 190.587731][ T6537] loop1: detected capacity change from 0 to 2048 [ 190.590869][ T6539] vhci_hcd: connection closed [ 190.594377][ T4588] vhci_hcd vhci_hcd.4: stop threads [ 190.604405][ T4588] vhci_hcd vhci_hcd.4: release socket [ 190.609973][ T4588] vhci_hcd vhci_hcd.4: disconnect device [ 190.618141][ T6533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.629548][ T3312] loop1: p1 < > p4 < > [ 190.638003][ T6537] loop1: p1 < > p4 < > [ 190.648541][ T3008] loop1: p1 < > p4 < > [ 190.673652][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 190.688125][ T6533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.698032][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 190.708290][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 190.720769][ T6542] loop1: detected capacity change from 0 to 1024 [ 190.730881][ T6542] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.989: bad orphan inode 134217728 [ 190.742672][ T6542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.752118][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 190.770062][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 190.785409][ T6533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.785443][ T6542] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 190.815671][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.839278][ T6546] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.860374][ T4580] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.872785][ T4580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.884189][ T4588] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.894823][ T6546] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.908742][ T4580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.937700][ T6546] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.002547][ T6546] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.148888][ T6561] sctp: [Deprecated]: syz.4.997 (pid 6561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.148888][ T6561] Use struct sctp_sack_info instead [ 191.187852][ T6563] netlink: 72 bytes leftover after parsing attributes in process `syz.4.998'. [ 191.206536][ T6563] netlink: 64 bytes leftover after parsing attributes in process `syz.4.998'. [ 191.232720][ T6565] loop5: detected capacity change from 0 to 1024 [ 191.257990][ T6565] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.999: bad orphan inode 134217728 [ 191.287322][ T6565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.313049][ T6571] IPv6: Can't replace route, no match found [ 191.348781][ T6565] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 191.404082][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.457621][ T6587] random: crng reseeded on system resumption [ 191.467506][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 191.473614][ T3574] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 191.529057][ T6585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6585 comm=syz.4.1009 [ 191.542543][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 191.556078][ T6592] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1011'. [ 191.578664][ T6592] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1011'. [ 191.616244][ T6597] IPv6: Can't replace route, no match found [ 191.630315][ T6598] loop5: detected capacity change from 0 to 512 [ 191.640491][ T6598] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 191.653807][ T6588] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 191.661654][ T6588] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1009'. [ 192.091847][ T4614] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.176549][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.200040][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.247204][ T6625] random: crng reseeded on system resumption [ 192.502553][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.511369][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.775195][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 192.775214][ T29] audit: type=1326 audit(1768540358.401:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.804963][ T29] audit: type=1326 audit(1768540358.401:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.828704][ T29] audit: type=1326 audit(1768540358.401:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.852415][ T29] audit: type=1326 audit(1768540358.411:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.876119][ T29] audit: type=1326 audit(1768540358.411:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.899622][ T29] audit: type=1326 audit(1768540358.411:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.923186][ T29] audit: type=1326 audit(1768540358.411:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.946565][ T29] audit: type=1326 audit(1768540358.411:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.970112][ T29] audit: type=1326 audit(1768540358.411:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 192.993458][ T29] audit: type=1326 audit(1768540358.411:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6635 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576a4f749 code=0x7ffc0000 [ 193.374826][ T6661] loop4: detected capacity change from 0 to 128 [ 194.105275][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.278110][ T6661] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.297343][ T6661] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.330690][ T6661] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.660992][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.686779][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.700277][ T6679] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1044'. [ 194.718235][ T6679] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 194.746977][ T6679] 0ªî{X¹¦: entered allmulticast mode [ 194.753742][ T6679] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 194.779019][ T6680] loop2: detected capacity change from 0 to 164 [ 194.796807][ T2465] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.819913][ T2465] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.847765][ T2465] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.884115][ T2465] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.254924][ T6692] loop0: detected capacity change from 0 to 512 [ 195.291071][ T6692] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1050: Failed to acquire dquot type 1 [ 195.345667][ T6692] EXT4-fs (loop0): 1 truncate cleaned up [ 195.376904][ T6692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.428453][ T6692] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.459551][ T6692] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1050: Failed to acquire dquot type 1 [ 195.476827][ T4614] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.517127][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.937418][ T6716] sctp: [Deprecated]: syz.0.1060 (pid 6716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.937418][ T6716] Use struct sctp_sack_info instead [ 195.994536][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.032980][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.116100][ T6728] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 196.151327][ T6728] IPv6: Can't replace route, no match found [ 196.353240][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'. [ 196.375167][ T6736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.382465][ T6736] IPv6: NLM_F_CREATE should be set when creating new route [ 196.826497][ T6748] syzkaller0: entered promiscuous mode [ 196.832108][ T6748] syzkaller0: entered allmulticast mode [ 196.948694][ T6756] loop4: detected capacity change from 0 to 512 [ 196.955983][ T6756] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 196.964856][ T6756] EXT4-fs (loop4): invalid journal inode [ 196.966343][ T6758] loop2: detected capacity change from 0 to 512 [ 196.971527][ T6756] EXT4-fs (loop4): can't get journal size [ 196.984677][ T6758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.994677][ T6756] EXT4-fs (loop4): 1 truncate cleaned up [ 197.001333][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.028015][ T6758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.050862][ T6758] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.051244][ T6756] ip6t_srh: unknown srh match flags 4000 [ 197.069781][ T6758] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.1078: resize_inode disabled but reserved GDT blocks non-zero [ 197.095257][ T6756] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1073741833 (only 1 groups) [ 197.138852][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.175192][ T6763] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 197.176796][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.205447][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.218380][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.247257][ T6763] loop1: detected capacity change from 0 to 2048 [ 197.268213][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.354643][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.393560][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.404756][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.492824][ T6776] loop4: detected capacity change from 0 to 128 [ 197.545533][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.252965][ T6776] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.269046][ T6776] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.303286][ T6776] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.373167][ T6786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 198.379747][ T6786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.387477][ T6786] vhci_hcd vhci_hcd.0: Device attached [ 198.485565][ T6784] loop2: detected capacity change from 0 to 1024 [ 198.565273][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 198.579457][ T6784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 198.603146][ T6787] vhci_hcd: connection closed [ 198.604325][ T4601] vhci_hcd vhci_hcd.0: stop threads [ 198.614403][ T4601] vhci_hcd vhci_hcd.0: release socket [ 198.619837][ T4601] vhci_hcd vhci_hcd.0: disconnect device [ 198.625513][ T10] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 198.638670][ T6790] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 198.659835][ T6794] loop5: detected capacity change from 0 to 1024 [ 198.684151][ T6784] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 198.684151][ T6784] program syz.2.1087 not setting count and/or reply_len properly [ 198.703297][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 198.703343][ T29] audit: type=1400 audit(1768540364.311:4612): avc: denied { write } for pid=6780 comm="syz.2.1087" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.733196][ T29] audit: type=1400 audit(1768540364.311:4613): avc: denied { open } for pid=6780 comm="syz.2.1087" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.758260][ T6790] IPv6: Can't replace route, no match found [ 198.764730][ T6794] EXT4-fs: inline encryption not supported [ 198.790564][ T6794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.893543][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.906717][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.919271][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.950178][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 198.981330][ T29] audit: type=1400 audit(1768540364.451:4614): avc: denied { create } for pid=6780 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.001045][ T29] audit: type=1400 audit(1768540364.451:4615): avc: denied { setopt } for pid=6780 comm="syz.2.1087" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.021395][ T29] audit: type=1400 audit(1768540364.471:4616): avc: denied { write } for pid=6780 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 199.040503][ T29] audit: type=1326 audit(1768540364.481:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 199.063970][ T29] audit: type=1326 audit(1768540364.481:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 199.087443][ T29] audit: type=1326 audit(1768540364.481:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c67f749 code=0x7ffc0000 [ 199.111072][ T29] audit: type=1400 audit(1768540364.481:4620): avc: denied { remove_name } for pid=6793 comm="syz.5.1090" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.133727][ T29] audit: type=1400 audit(1768540364.481:4621): avc: denied { unlink } for pid=6793 comm="syz.5.1090" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.166801][ T6801] 9p: Bad value for 'rfdno' [ 199.197279][ T6806] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 199.231321][ T6806] IPv6: Can't replace route, no match found [ 199.429038][ T4618] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.701513][ T6822] random: crng reseeded on system resumption [ 199.826624][ T6826] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.908541][ T6826] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.988038][ T6826] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.047998][ T6826] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.151106][ T4618] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.181479][ T4618] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.211648][ T4618] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.260615][ T4618] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.401579][ T6838] loop2: detected capacity change from 0 to 512 [ 200.432450][ T6838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.477907][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.532411][ T6838] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.593730][ T6838] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.1106: resize_inode disabled but reserved GDT blocks non-zero [ 200.649511][ T6838] netlink: 'syz.2.1106': attribute type 5 has an invalid length. [ 200.738488][ T6851] loop1: detected capacity change from 0 to 1024 [ 200.780805][ T6851] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1110: bad orphan inode 134217728 [ 200.802741][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.851146][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.907993][ T6851] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 200.945769][ T6856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 200.946260][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.952483][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.969197][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 200.999108][ T6857] vhci_hcd: connection closed [ 201.007752][ T4611] vhci_hcd vhci_hcd.4: stop threads [ 201.017769][ T4611] vhci_hcd vhci_hcd.4: release socket [ 201.023271][ T4611] vhci_hcd vhci_hcd.4: disconnect device [ 201.106845][ T6864] random: crng reseeded on system resumption [ 201.185766][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 201.197796][ T6872] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 201.308531][ T6886] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.344014][ T6884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6884 comm=syz.5.1125 [ 201.359029][ T6886] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.374139][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 201.387146][ T6891] loop2: detected capacity change from 0 to 512 [ 201.416787][ T6891] EXT4-fs: Ignoring removed oldalloc option [ 201.419080][ T6886] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.422762][ T6891] EXT4-fs: inline encryption not supported [ 201.439491][ T6891] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.460745][ T6891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1127: bg 0: block 64: padding at end of block bitmap is not set [ 201.461536][ T6892] netlink: 'syz.5.1125': attribute type 1 has an invalid length. [ 201.482888][ T6892] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1125'. [ 201.492692][ T6891] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1127: Failed to acquire dquot type 0 [ 201.504058][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 201.509761][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.516711][ T6891] EXT4-fs (loop2): 1 truncate cleaned up [ 201.524218][ T6886] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.530789][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.611504][ T6890] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1127: Failed to acquire dquot type 0 [ 201.767659][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.791984][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'. [ 201.805979][ T6910] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 201.814087][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 201.865439][ T6912] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 201.886906][ T6913] loop0: detected capacity change from 0 to 128 [ 202.430536][ T6925] random: crng reseeded on system resumption [ 202.516169][ T6927] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 202.522753][ T6927] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.530429][ T6927] vhci_hcd vhci_hcd.0: Device attached [ 202.541085][ T6928] vhci_hcd: connection closed [ 202.541435][ T4611] vhci_hcd vhci_hcd.5: stop threads [ 202.551413][ T4611] vhci_hcd vhci_hcd.5: release socket [ 202.556899][ T4611] vhci_hcd vhci_hcd.5: disconnect device [ 202.788225][ T6913] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.800824][ T4569] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.808441][ T6913] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.843468][ T6913] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.192301][ T6936] loop4: detected capacity change from 0 to 512 [ 203.199622][ T6936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.217418][ T6936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.230312][ T6936] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.351892][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.422731][ T6942] loop5: detected capacity change from 0 to 1024 [ 203.442612][ T6942] EXT4-fs: Ignoring removed bh option [ 203.466990][ T6942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.497541][ T6942] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 203.513232][ T6942] EXT4-fs (loop5): Remounting filesystem read-only [ 203.579711][ T6945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6945 comm=syz.5.1144 [ 204.191470][ T10] usb 1-1: enqueue for inactive port 0 [ 204.197085][ T10] usb 1-1: enqueue for inactive port 0 [ 204.220666][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 204.235750][ T6947] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 204.264317][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.265682][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 204.312844][ T6949] loop4: detected capacity change from 0 to 1024 [ 204.323282][ T6951] loop5: detected capacity change from 0 to 512 [ 204.337486][ T6949] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1147: bad orphan inode 134217728 [ 204.350778][ T6951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.378315][ T6951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.393544][ T6949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.410816][ T6951] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.422461][ T6949] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 204.440820][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.470622][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.505396][ T6956] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 204.582484][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 204.582499][ T29] audit: type=1400 audit(1768540370.211:4847): avc: denied { allowed } for pid=6959 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 204.629443][ T29] audit: type=1400 audit(1768540370.241:4848): avc: denied { create } for pid=6959 comm="syz.4.1150" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.650833][ T29] audit: type=1400 audit(1768540370.241:4849): avc: denied { map } for pid=6959 comm="syz.4.1150" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.675119][ T29] audit: type=1400 audit(1768540370.241:4850): avc: denied { read write } for pid=6959 comm="syz.4.1150" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.725785][ T6958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6958 comm=syz.5.1149 [ 204.750569][ T4569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.765308][ T4569] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.775626][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1149'. [ 204.798757][ T4569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.835328][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 204.844899][ T4569] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.878033][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.952879][ T6961] netlink: 'syz.5.1149': attribute type 1 has an invalid length. [ 204.960701][ T6961] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1149'. [ 204.973926][ T6965] loop2: detected capacity change from 0 to 512 [ 205.021861][ T6965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.032929][ T29] audit: type=1400 audit(1768540370.381:4851): avc: denied { create } for pid=6959 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.053133][ T29] audit: type=1400 audit(1768540370.501:4852): avc: denied { getopt } for pid=6959 comm="syz.4.1150" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.144424][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.181804][ T6965] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.223505][ T6965] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.1152: resize_inode disabled but reserved GDT blocks non-zero [ 205.250286][ T6965] netlink: 'syz.2.1152': attribute type 5 has an invalid length. [ 205.284997][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.323022][ T29] audit: type=1400 audit(1768540370.951:4853): avc: denied { create } for pid=6974 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.367782][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 205.388826][ T29] audit: type=1400 audit(1768540370.991:4854): avc: denied { setopt } for pid=6974 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.409576][ T6977] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 205.454403][ T6981] loop0: detected capacity change from 0 to 512 [ 205.486671][ T6981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.497743][ T6979] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 205.511710][ T6979] IPv6: Can't replace route, no match found [ 205.539795][ T6984] loop2: detected capacity change from 0 to 1024 [ 205.549438][ T6984] EXT4-fs: inline encryption not supported [ 205.577851][ T6981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.611582][ T6984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.629540][ T6981] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.641998][ T29] audit: type=1400 audit(1768540371.271:4855): avc: denied { remove_name } for pid=6983 comm="syz.2.1160" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.664808][ T29] audit: type=1400 audit(1768540371.271:4856): avc: denied { unlink } for pid=6983 comm="syz.2.1160" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.729830][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.749828][ T6981] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.1158: resize_inode disabled but reserved GDT blocks non-zero [ 205.803604][ T6997] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 205.815133][ T6981] netlink: 'syz.0.1158': attribute type 5 has an invalid length. [ 205.843552][ T6997] IPv6: Can't replace route, no match found [ 205.930533][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.078940][ T7013] loop2: detected capacity change from 0 to 128 [ 206.146947][ T7013] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.159369][ T7013] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 206.194712][ T7013] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.223684][ T7009] sctp: [Deprecated]: syz.0.1166 (pid 7009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.223684][ T7009] Use struct sctp_sack_info instead [ 206.259119][ T7014] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 206.309693][ T7014] IPv6: Can't replace route, no match found [ 206.495122][ T7019] wireguard0: entered promiscuous mode [ 206.500704][ T7019] wireguard0: entered allmulticast mode [ 206.587792][ T7023] ref_ctr increment failed for inode: 0x490 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812e045100 [ 207.063365][ T7025] loop4: detected capacity change from 0 to 128 [ 207.256570][ T7025] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.289062][ T7025] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.322309][ T7025] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.420592][ T7035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7035 comm=syz.0.1175 [ 207.520370][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 207.771480][ T7034] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 207.779289][ T7034] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1175'. [ 207.869249][ T7051] loop1: detected capacity change from 0 to 1024 [ 207.918096][ T7051] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1182: bad orphan inode 134217728 [ 207.978852][ T7055] IPv6: Can't replace route, no match found [ 207.989462][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.119862][ T7057] EXT4-fs: inline encryption not supported [ 208.192738][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.273081][ T7062] macsec1: entered promiscuous mode [ 208.278495][ T7062] bridge0: entered promiscuous mode [ 208.316805][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.368060][ T7062] bridge0: port 1(macsec1) entered blocking state [ 208.374577][ T7062] bridge0: port 1(macsec1) entered disabled state [ 208.452622][ T7062] macsec1: entered allmulticast mode [ 208.458014][ T7062] bridge0: entered allmulticast mode [ 208.505354][ T7062] macsec1: left allmulticast mode [ 208.510454][ T7062] bridge0: left allmulticast mode [ 208.586486][ T7062] bridge0: left promiscuous mode [ 208.600468][ T4569] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.927151][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.977371][ T7084] set_capacity_and_notify: 1 callbacks suppressed [ 208.977447][ T7084] loop4: detected capacity change from 0 to 1024 [ 209.005604][ T7084] EXT4-fs: inline encryption not supported [ 209.036849][ T7084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.359852][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.384775][ T7092] loop1: detected capacity change from 0 to 512 [ 209.392624][ T7092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.404088][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.419261][ T7092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.433828][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.442185][ T7092] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.464598][ T7097] loop4: detected capacity change from 0 to 1024 [ 209.480627][ T7097] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1196: bad orphan inode 134217728 [ 209.492257][ T7097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.507191][ T7097] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 209.529334][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.545324][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.598756][ T7102] random: crng reseeded on system resumption [ 209.627532][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.636129][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.646775][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 209.646790][ T29] audit: type=1326 audit(1768540375.281:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.676964][ T29] audit: type=1326 audit(1768540375.281:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.700498][ T29] audit: type=1326 audit(1768540375.281:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.724027][ T29] audit: type=1326 audit(1768540375.281:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.747604][ T29] audit: type=1326 audit(1768540375.281:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.771158][ T29] audit: type=1326 audit(1768540375.281:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.794756][ T29] audit: type=1326 audit(1768540375.281:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.818180][ T29] audit: type=1326 audit(1768540375.281:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.841697][ T29] audit: type=1326 audit(1768540375.281:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 209.865085][ T29] audit: type=1326 audit(1768540375.281:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c0cf749 code=0x7ffc0000 [ 210.036471][ T7111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.090530][ T7111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.139482][ T7111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.183431][ T7111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.248582][ T4570] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.268591][ T4570] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.277417][ T4570] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.285945][ T4570] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.326861][ T7121] loop2: detected capacity change from 0 to 512 [ 210.337990][ T7121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.368438][ T7121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.381663][ T7121] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.401851][ T7121] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.1208: resize_inode disabled but reserved GDT blocks non-zero [ 210.429978][ T7121] netlink: 'syz.2.1208': attribute type 5 has an invalid length. [ 210.481505][ T7127] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 210.495757][ T7127] IPv6: Can't replace route, no match found [ 210.501837][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.552613][ T7131] loop2: detected capacity change from 0 to 1024 [ 210.581161][ T7131] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1210: bad orphan inode 134217728 [ 210.619466][ T7136] loop1: detected capacity change from 0 to 512 [ 210.626831][ T7136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.636415][ T7131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.657718][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.675372][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 210.685063][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.693526][ T7131] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 210.701827][ T7136] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.729133][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.830774][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.960610][ T7151] loop5: detected capacity change from 0 to 1024 [ 210.969418][ T7151] EXT4-fs: Ignoring removed bh option [ 210.983026][ T7151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.999409][ T7153] loop1: detected capacity change from 0 to 1024 [ 211.021950][ T7153] EXT4-fs: Ignoring removed bh option [ 211.041096][ T7151] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 211.041966][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.069172][ T7151] EXT4-fs (loop5): Remounting filesystem read-only [ 211.100825][ T5270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.194309][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.199918][ T7163] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 211.222988][ T7163] IPv6: Can't replace route, no match found [ 211.260106][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.559034][ T7173] loop1: detected capacity change from 0 to 128 [ 211.626389][ T7173] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.648080][ T7173] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.900685][ T7176] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 212.157856][ T7181] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 212.238188][ T7181] IPv6: Can't replace route, no match found [ 212.292623][ T7184] loop4: detected capacity change from 0 to 1024 [ 212.327255][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.350543][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.379528][ T7184] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1230: bad orphan inode 134217728 [ 212.397431][ T7184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.413568][ T7184] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 212.432317][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.527580][ T7191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.539143][ T7192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7192 comm=syz.0.1233 [ 212.554765][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 212.589001][ T7191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.668824][ T7191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.683470][ T7192] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 212.691370][ T7192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1233'. [ 212.729335][ T7191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.813314][ T7191] debugfs: 'netdev@ffff88811a482558' already exists in 'ref_tracker' [ 212.836621][ T4582] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.865399][ T4582] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.895270][ T4582] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.923235][ T7195] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 212.935341][ T4582] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.973836][ T7195] IPv6: Can't replace route, no match found [ 213.035595][ T7199] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 213.042162][ T7199] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.049947][ T7199] vhci_hcd vhci_hcd.0: Device attached [ 213.116997][ T7200] vhci_hcd: connection closed [ 213.117192][ T4594] vhci_hcd vhci_hcd.4: stop threads [ 213.127188][ T4594] vhci_hcd vhci_hcd.4: release socket [ 213.132609][ T4594] vhci_hcd vhci_hcd.4: disconnect device [ 213.139990][ T7205] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1238: bad orphan inode 134217728 [ 213.166023][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.197928][ T7205] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 213.217882][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.289549][ T7208] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.305644][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 213.311945][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.427224][ T7211] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.444308][ T7213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.478847][ T7211] IPv6: Can't replace route, no match found [ 213.506975][ T7213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.564785][ T7213] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.605495][ T7213] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.1240: resize_inode disabled but reserved GDT blocks non-zero [ 213.677552][ T7213] netlink: 'syz.0.1240': attribute type 5 has an invalid length. [ 213.841195][ T7215] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.997591][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.008768][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.035792][ T7230] 9p: Bad value for 'rfdno' [ 214.095802][ T7235] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.138151][ T7235] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.187627][ T7235] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.247452][ T7235] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.325108][ T4602] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.337880][ T4602] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.358283][ T4602] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.385353][ T4602] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.468037][ T7238] set_capacity_and_notify: 3 callbacks suppressed [ 214.468054][ T7238] loop5: detected capacity change from 0 to 1024 [ 214.528947][ T7238] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1249: bad orphan inode 134217728 [ 214.583012][ T7243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7243 comm=syz.4.1251 [ 214.606078][ T7238] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 214.614342][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 214.779694][ T7246] netlink: 'syz.4.1251': attribute type 1 has an invalid length. [ 214.787527][ T7246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1251'. [ 214.813408][ T7249] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 214.856993][ T7253] loop0: detected capacity change from 0 to 128 [ 215.085442][ T7253] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.249217][ T7260] loop1: detected capacity change from 0 to 1024 [ 215.314257][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 215.314275][ T29] audit: type=1400 audit(1768540380.941:5153): avc: denied { read } for pid=7257 comm="syz.2.1255" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.403445][ T7260] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1256: bad orphan inode 134217728 [ 215.536252][ T29] audit: type=1400 audit(1768540381.051:5154): avc: denied { read write } for pid=5270 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.560573][ T29] audit: type=1400 audit(1768540381.051:5155): avc: denied { open } for pid=5270 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.584734][ T29] audit: type=1400 audit(1768540381.051:5156): avc: denied { ioctl } for pid=5270 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.610422][ T29] audit: type=1400 audit(1768540381.121:5157): avc: denied { create } for pid=7266 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.629842][ T29] audit: type=1400 audit(1768540381.131:5158): avc: denied { mount } for pid=7259 comm="syz.1.1256" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 215.651584][ T29] audit: type=1400 audit(1768540381.131:5159): avc: denied { connect } for pid=7266 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.671100][ T29] audit: type=1400 audit(1768540381.131:5160): avc: denied { setopt } for pid=7266 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.690618][ T29] audit: type=1400 audit(1768540381.131:5161): avc: denied { open } for pid=7266 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 215.709867][ T29] audit: type=1400 audit(1768540381.131:5162): avc: denied { perfmon } for pid=7266 comm="syz.5.1258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.919894][ T7260] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 215.994980][ T7273] loop5: detected capacity change from 0 to 512 [ 216.095783][ T7273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.147391][ T7273] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.414847][ T7280] loop2: detected capacity change from 0 to 128 [ 216.433776][ T7280] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 216.579015][ T7283] loop4: detected capacity change from 0 to 512 [ 216.606925][ T7283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.681119][ T7283] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.753302][ T7283] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.1263: resize_inode disabled but reserved GDT blocks non-zero [ 216.847964][ T7283] netlink: 'syz.4.1263': attribute type 5 has an invalid length. [ 217.026493][ T7291] loop5: detected capacity change from 0 to 1024 [ 217.051768][ T7291] EXT4-fs: Ignoring removed bh option [ 217.254176][ T7302] loop4: detected capacity change from 0 to 1024 [ 217.317217][ T7302] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1269: bad orphan inode 134217728 [ 217.371825][ T7305] loop5: detected capacity change from 0 to 1024 [ 217.403755][ T7302] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 217.425508][ T7305] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1270: bad orphan inode 134217728 [ 217.500681][ T7305] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 217.760429][ T7316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7316 comm=syz.4.1273 [ 217.799264][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 218.033078][ T7316] netlink: 'syz.4.1273': attribute type 1 has an invalid length. [ 218.040916][ T7316] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1273'. [ 218.288224][ T7330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7330 comm=syz.0.1279 [ 218.323442][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1279'. [ 218.450429][ T7330] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 218.458250][ T7330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1279'. [ 218.548357][ T7332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7332 comm=syz.4.1280 [ 218.561531][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 218.642429][ T7333] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 218.650346][ T7333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1280'. [ 218.738633][ T7335] loop5: detected capacity change from 0 to 512 [ 218.776369][ T7335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.836913][ T7335] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.890667][ T7335] EXT4-fs error (device loop5): ext4_resize_begin:60: comm syz.5.1281: resize_inode disabled but reserved GDT blocks non-zero [ 218.996224][ T7335] netlink: 'syz.5.1281': attribute type 5 has an invalid length. [ 219.056430][ T7341] EXT4-fs: inline encryption not supported [ 219.162249][ T7345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.219735][ T7345] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.263658][ T7353] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 219.276652][ T7353] IPv6: Can't replace route, no match found [ 219.378221][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.475600][ T7365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7365 comm=syz.0.1290 [ 219.552650][ T7368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7368 comm=syz.5.1292 [ 219.554611][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 219.595761][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1292'. [ 219.697469][ T7365] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 219.705349][ T7365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1290'. [ 219.751187][ T7367] netlink: 'syz.5.1292': attribute type 1 has an invalid length. [ 219.759062][ T7367] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1292'. [ 219.953046][ T7370] set_capacity_and_notify: 2 callbacks suppressed [ 219.953064][ T7370] loop4: detected capacity change from 0 to 1024 [ 219.986511][ T7370] EXT4-fs: Ignoring removed bh option [ 220.096021][ T7370] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 220.145540][ T7370] EXT4-fs (loop4): Remounting filesystem read-only [ 220.243709][ T7374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7374 comm=syz.4.1294 [ 220.345689][ T7375] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 220.629449][ T7377] netlink: 'syz.0.1295': attribute type 39 has an invalid length. [ 220.711374][ T7385] loop5: detected capacity change from 0 to 1024 [ 220.734428][ T7385] EXT4-fs: inline encryption not supported [ 220.807834][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 220.807850][ T29] audit: type=1400 audit(1768540386.441:5361): avc: denied { create } for pid=7388 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.849917][ T7389] sctp: [Deprecated]: syz.5.1298 (pid 7389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.849917][ T7389] Use struct sctp_sack_info instead [ 220.886403][ T29] audit: type=1400 audit(1768540386.471:5362): avc: denied { setopt } for pid=7388 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.905922][ T29] audit: type=1400 audit(1768540386.481:5363): avc: denied { ioctl } for pid=7388 comm="syz.5.1298" path="socket:[18419]" dev="sockfs" ino=18419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.930825][ T29] audit: type=1400 audit(1768540386.481:5364): avc: denied { bind } for pid=7388 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.950502][ T29] audit: type=1400 audit(1768540386.481:5365): avc: denied { getopt } for pid=7388 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.969948][ T29] audit: type=1400 audit(1768540386.481:5366): avc: denied { name_bind } for pid=7388 comm="syz.5.1298" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 220.991888][ T29] audit: type=1400 audit(1768540386.481:5367): avc: denied { node_bind } for pid=7388 comm="syz.5.1298" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 221.014559][ T29] audit: type=1400 audit(1768540386.481:5368): avc: denied { setopt } for pid=7388 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.105257][ T29] audit: type=1326 audit(1768540386.701:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 221.129039][ T29] audit: type=1326 audit(1768540386.701:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5061a7f749 code=0x7ffc0000 [ 221.157190][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.175744][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.183589][ T7401] wireguard0: entered promiscuous mode [ 221.189208][ T7401] wireguard0: entered allmulticast mode [ 221.226389][ T7399] 9p: Bad value for 'rfdno' [ 221.391884][ T7411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7411 comm=syz.0.1305 [ 221.395804][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 221.410382][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.495537][ T7414] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 221.615524][ T7415] loop1: detected capacity change from 0 to 128 [ 221.625433][ T7415] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.774954][ T7419] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 221.789293][ T7419] IPv6: Can't replace route, no match found [ 221.851159][ T7421] loop4: detected capacity change from 0 to 1024 [ 221.878383][ T7421] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1308: bad orphan inode 134217728 [ 221.925071][ T7421] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 222.020177][ T7424] sctp: [Deprecated]: syz.4.1310 (pid 7424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.020177][ T7424] Use struct sctp_sack_info instead [ 222.081647][ T7431] loop4: detected capacity change from 0 to 512 [ 222.091089][ T7431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.100390][ T7428] loop5: detected capacity change from 0 to 1024 [ 222.128896][ T7431] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.173732][ T7431] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.1311: resize_inode disabled but reserved GDT blocks non-zero [ 222.208606][ T7431] netlink: 'syz.4.1311': attribute type 5 has an invalid length. [ 222.270682][ T3008] ================================================================== [ 222.278847][ T3008] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 222.285657][ T3008] [ 222.288018][ T3008] write to 0xffff888101ca4a18 of 8 bytes by task 3321 on cpu 1: [ 222.295686][ T3008] inc_diskseq+0x2d/0x40 [ 222.299972][ T3008] disk_force_media_change+0x9e/0xe0 [ 222.305287][ T3008] lo_release+0x2cb/0x400 [ 222.309648][ T3008] bdev_release+0x373/0x3d0 [ 222.314180][ T3008] blkdev_release+0x15/0x20 [ 222.318707][ T3008] __fput+0x29b/0x650 [ 222.322718][ T3008] fput_close_sync+0xad/0x190 [ 222.327421][ T3008] __x64_sys_close+0x56/0xf0 [ 222.332034][ T3008] x64_sys_call+0x2c25/0x3000 [ 222.336765][ T3008] do_syscall_64+0xca/0x2b0 [ 222.341282][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.347199][ T3008] [ 222.349532][ T3008] read to 0xffff888101ca4a18 of 8 bytes by task 3008 on cpu 0: [ 222.357087][ T3008] block_uevent+0x31/0x50 [ 222.361442][ T3008] dev_uevent+0x375/0x400 [ 222.365785][ T3008] uevent_show+0x11a/0x200 [ 222.370214][ T3008] dev_attr_show+0x3f/0xa0 [ 222.374658][ T3008] sysfs_kf_seq_show+0x1a3/0x280 [ 222.379619][ T3008] kernfs_seq_show+0x82/0xa0 [ 222.384252][ T3008] seq_read_iter+0x31e/0x950 [ 222.388872][ T3008] kernfs_fop_read_iter+0xc1/0x330 [ 222.394015][ T3008] vfs_read+0x64c/0x770 [ 222.398196][ T3008] ksys_read+0xda/0x1a0 [ 222.402366][ T3008] __x64_sys_read+0x40/0x50 [ 222.406882][ T3008] x64_sys_call+0x2889/0x3000 [ 222.411582][ T3008] do_syscall_64+0xca/0x2b0 [ 222.416104][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.422028][ T3008] [ 222.424360][ T3008] value changed: 0x0000000000000175 -> 0x0000000000000178 [ 222.431475][ T3008] [ 222.433815][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 222.439985][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.449285][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.459352][ T3008] ================================================================== [ 222.529214][ T7443] mmap: syz.4.1315 (7443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.598086][ T7426] loop0: detected capacity change from 0 to 128 [ 222.617739][ T7426] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)