last executing test programs: 4.927649681s ago: executing program 0 (id=1869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000400"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x2, 0x7, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 4.263186063s ago: executing program 2 (id=1879): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000003150ddecc508bb0d3d709e83e6", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0x1f) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) timer_delete(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@nombcache}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") write$selinux_user(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t '], 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, 0x0, 0x5) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r9, r9, 0x0, 0x80000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000040)='./file1\x00', 0x2d) unlink(&(0x7f00000000c0)='./file1\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 3.676980864s ago: executing program 2 (id=1882): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000400"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x2, 0x7, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) sigaltstack(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.486184094s ago: executing program 4 (id=1885): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4e) 3.462195804s ago: executing program 1 (id=1886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_int(r1, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.076600815s ago: executing program 0 (id=1889): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x52) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x2000000c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r7}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0x0, 0x0}, 0x10) recvmsg$unix(r8, &(0x7f0000001f00)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f00000008c0)=""/67, 0x43}, {&(0x7f0000000a80)=""/69, 0x45}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/201, 0xc9}, {&(0x7f0000001cc0)=""/57, 0x39}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/171, 0xab}], 0x9, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000000) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.961672335s ago: executing program 3 (id=1890): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.918130285s ago: executing program 1 (id=1891): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000400"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x2, 0x7, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.876733305s ago: executing program 3 (id=1892): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20000010) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="ef94f4d0d37b32f3563caba5328881548ed48ef091a3f7041146ab24e3c86a1c987d31cba6b5b204c63d2350c4b85c126a46571a1ec492c4262225b30e2b1bddbd8d93c21cd8658c847ec3e8eb9615609b2a63887088198028be6c58dbc185b5158e055f726621592d220364", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2.844734005s ago: executing program 4 (id=1893): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20000010) close(r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r11, @ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="ef94f4d0d37b32f3563caba5328881548ed48ef091a3f7041146ab24e3c86a1c987d31cba6b5b204c63d2350c4b85c126a46571a1ec492c4262225b30e2b1bddbd8d93c21cd8658c847ec3e8eb9615609b2a63887088198028be6c58dbc185b5158e055f726621592d220364", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2.501014316s ago: executing program 3 (id=1894): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6fba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5b8a64db04ed", 0x2a}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.467057675s ago: executing program 2 (id=1895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x7, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000407d1b2da537242568238d3109f8e3a6c87144257c81b573a3b96388e1abed7b1cca5964f6c1305c781a9cdd528b36d84", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x541b, 0x20084000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r8}, 0x3d) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000}, 0x1000, 0x0, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 2.454070575s ago: executing program 4 (id=1896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sigaltstack(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.343449846s ago: executing program 3 (id=1897): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x742b, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x48080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r3, 0xffffffffffffffff, 0x0) 2.154809526s ago: executing program 2 (id=1898): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r2 = socket$inet(0x2, 0x3, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) r4 = dup3(r2, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_elf32(r4, 0x0, 0x72d) ftruncate(r1, 0x81ff) recvmmsg(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) 2.024365376s ago: executing program 0 (id=1899): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000002f73b46a6487e1bc92000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x5000) close_range(r5, 0xffffffffffffffff, 0x0) dup2(r2, r6) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r9, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x7, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @tail_call], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x78, &(0x7f0000000440)=""/120, 0x40f00, 0x67, '\x00', 0x0, @fallback=0xd, r4, 0x8, &(0x7f00000005c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[0x1, 0xffffffffffffffff, r3, r3, r5, r8], &(0x7f0000000680)=[{0x5, 0x3, 0xe, 0x1}, {0x3, 0x5, 0x2, 0x6}], 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x7, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.981664356s ago: executing program 2 (id=1900): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000400"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a000000000800044000000000090001007379"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x2, 0x7, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.664448767s ago: executing program 1 (id=1901): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "15f973d8403b0c4dc118b24b96d2450ed6e187eb7d8c11a20ad5da46db2f772a17d95eb6343bf19f9ce81ac204b615587c3d20a4776b3d5139b7d833d9d18bb7", 0x3d}, 0x48, r0) 1.590228937s ago: executing program 1 (id=1902): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/153}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) 1.503528887s ago: executing program 1 (id=1903): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) openat$cgroup_int(r2, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.232345747s ago: executing program 4 (id=1904): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[], 0xfe44, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x3}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x3ff}, 0x0, 0x0) 1.231732078s ago: executing program 3 (id=1905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) 1.077031488s ago: executing program 3 (id=1906): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000400"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x2, 0x7, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.075614808s ago: executing program 0 (id=1907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x6, 0x0}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYRESHEX=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x5dc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) 544.480099ms ago: executing program 0 (id=1908): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r1, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="ef94f4d0d37b32f3563caba5328881548ed48ef091a3f7041146ab24e3c86a1c987d31cba6b5b204c63d2350c4b85c126a46571a1ec492c4262225b30e2b1bddbd8d93c21cd8658c847ec3e8eb9615609b2a63887088198028be6c58dbc185b5158e055f726621592d220364", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 448.849179ms ago: executing program 1 (id=1909): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20000010) close(r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r11, @ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="ef94f4d0d37b32f3563caba5328881548ed48ef091a3f7041146ab24e3c86a1c987d31cba6b5b204c63d2350c4b85c126a46571a1ec492c4262225b30e2b1bddbd8d93c21cd8658c847ec3e8eb9615609b2a63887088198028be6c58dbc185b5158e055f726621592d220364", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 335.483429ms ago: executing program 4 (id=1910): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 196.857179ms ago: executing program 0 (id=1911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x6, 0x0}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYRESHEX=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x6c, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55", 0x5dc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) 41.20623ms ago: executing program 4 (id=1912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) close(r0) 0s ago: executing program 2 (id=1913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f00000006c0)=']/\xb67\x18\xdaDh\x00\xeb*\xe2\a\x00J%\xe1>\xd7p7;\xef\xee\xe1<\x8f\x84d\xee\xa1\x0f\xbfqY\xd5\xaa\xd9\xfbEj\xf4\x9c\x8cPI\xd0o\xc8\xd6q9\r\xa7\x9f\xf6\xb6tq2\xa6\xf2\xdb)\xdd\x01o\xcfr\xb3S\x1aR\x00\x04\x00\x00\xfdm\xc5\xb89\x96\x1bp\fz\xcf4\xa7\xf7=\xb5\a\xda\x87\x16,e\xa5Z\xf1H\xd9N\xb90\x188\n\xa71\\\x88\xc0\x06\x0e\x9e^\"c\x15t\xcfV\xdd\x91v\xa1\xa0R\x13\xc1u\xcdh\xf1\xa5\x18\xbbz\xc8 \xea(\xff\xbau\xe6\f\x97\xfc\x93()\xcc\x86\x7f6\x96\xd6\x86\x9c\xb9\xe3ex\xd1/\xc6[\xcb\xe1\xb5\xba\x97\xf1\xa55T\xba\xa4\xe3\xe0\x02\x00\x00\x00\x00\x00\x00\x00\x00\x94\xfd\xe9\xfa~\xdd\xf4\x82\xae\f\xd4\xcd\x80\xfa\xdc\xbef\xba\x17q\x81\xe8\xdfn\xf2la\xb6Q\x80\x00\x82\xaf\xefPI\xb2\xf19\xc1\xef\xe7\xca*\xc7\xc2\xb0\bK\xed\x17Yj\xa7q\x84\x98\f\xe72\xdc\xa5\xfa\xad\xa41\xb8') kernel console output (not intermixed with test programs): ocess `syz.4.926'. [ 93.454038][ T5944] syzkaller0: entered promiscuous mode [ 93.459586][ T5944] syzkaller0: entered allmulticast mode [ 93.506184][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.535134][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.168415][ T5958] random: crng reseeded on system resumption [ 95.023956][ T5989] loop2: detected capacity change from 0 to 512 [ 95.050251][ T5989] EXT4-fs: Ignoring removed orlov option [ 95.068188][ T5989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.101250][ T5989] EXT4-fs (loop2): 1 orphan inode deleted [ 95.107068][ T5989] EXT4-fs (loop2): 1 truncate cleaned up [ 95.884935][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 95.884950][ T29] audit: type=1326 audit(1734081893.845:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 95.914661][ T29] audit: type=1326 audit(1734081893.845:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 95.938122][ T29] audit: type=1326 audit(1734081893.845:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5cf374680 code=0x7ffc0000 [ 95.961559][ T29] audit: type=1326 audit(1734081893.845:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 95.985040][ T29] audit: type=1326 audit(1734081893.845:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 96.008433][ T29] audit: type=1326 audit(1734081893.845:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 96.031798][ T29] audit: type=1326 audit(1734081893.845:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 96.055297][ T29] audit: type=1326 audit(1734081893.845:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 96.078681][ T29] audit: type=1326 audit(1734081893.845:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 96.089968][ T6015] loop3: detected capacity change from 0 to 128 [ 96.102054][ T29] audit: type=1326 audit(1734081893.845:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 96.146224][ T6015] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.502149][ T6047] random: crng reseeded on system resumption [ 96.682781][ T6053] __nla_validate_parse: 7 callbacks suppressed [ 96.682794][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 96.709920][ T6051] loop4: detected capacity change from 0 to 4096 [ 96.767747][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 96.896017][ T6062] loop2: detected capacity change from 0 to 128 [ 96.932854][ T6051] netlink: 'syz.4.965': attribute type 3 has an invalid length. [ 97.054874][ T6062] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.508883][ T6076] loop4: detected capacity change from 0 to 512 [ 97.516643][ T6076] EXT4-fs: Ignoring removed orlov option [ 97.522692][ T6076] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.536929][ T6076] EXT4-fs (loop4): 1 orphan inode deleted [ 97.541764][ T3310] EXT4-fs unmount: 15 callbacks suppressed [ 97.541781][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.542719][ T6076] EXT4-fs (loop4): 1 truncate cleaned up [ 97.563837][ T6076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.642790][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.673672][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 97.676174][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.702860][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.710392][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 97.741254][ T6091] loop2: detected capacity change from 0 to 4096 [ 97.765322][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.025994][ T6091] netlink: 'syz.2.977': attribute type 3 has an invalid length. [ 98.047067][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.212789][ T6114] loop1: detected capacity change from 0 to 512 [ 98.216137][ T6108] loop2: detected capacity change from 0 to 128 [ 98.225434][ T6114] EXT4-fs: Ignoring removed orlov option [ 98.231693][ T6114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.249523][ T6108] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.262229][ T6108] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.276426][ T6114] EXT4-fs (loop1): 1 orphan inode deleted [ 98.282276][ T6114] EXT4-fs (loop1): 1 truncate cleaned up [ 98.294316][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.340159][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.416850][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.605718][ T6133] loop0: detected capacity change from 0 to 4096 [ 98.814356][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.952762][ T6143] random: crng reseeded on system resumption [ 99.139898][ T6133] netlink: 'syz.0.992': attribute type 3 has an invalid length. [ 99.163640][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.182315][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 99.222861][ T6159] loop0: detected capacity change from 0 to 128 [ 99.235727][ T6159] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.238405][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 99.261140][ T6159] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.347561][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.438815][ T6177] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 99.609105][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 99.627730][ T6186] loop4: detected capacity change from 0 to 4096 [ 99.652255][ T6186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.696654][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 99.929256][ T6186] netlink: 'syz.4.1010': attribute type 3 has an invalid length. [ 99.973783][ T6198] loop1: detected capacity change from 0 to 512 [ 99.996263][ T6198] EXT4-fs: Ignoring removed orlov option [ 100.011105][ T6198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.029068][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.047005][ T6198] EXT4-fs (loop1): 1 orphan inode deleted [ 100.052793][ T6198] EXT4-fs (loop1): 1 truncate cleaned up [ 100.126102][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.208168][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.455594][ T6214] random: crng reseeded on system resumption [ 100.914126][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.932685][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.952266][ T6233] loop4: detected capacity change from 0 to 512 [ 100.960380][ T6233] EXT4-fs: Ignoring removed orlov option [ 100.966596][ T6233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.981289][ T6233] EXT4-fs (loop4): 1 orphan inode deleted [ 100.987154][ T6233] EXT4-fs (loop4): 1 truncate cleaned up [ 100.998424][ T6233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.023688][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.167213][ T29] kauditd_printk_skb: 2340 callbacks suppressed [ 101.167227][ T29] audit: type=1326 audit(1734081899.135:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.170281][ T6231] 9pnet_fd: Insufficient options for proto=fd [ 101.173804][ T29] audit: type=1326 audit(1734081899.135:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.232785][ T29] audit: type=1326 audit(1734081899.175:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.233397][ T6254] loop4: detected capacity change from 0 to 128 [ 101.256239][ T29] audit: type=1326 audit(1734081899.175:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.256274][ T29] audit: type=1326 audit(1734081899.175:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.309554][ T29] audit: type=1326 audit(1734081899.175:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.313586][ T6252] hub 2-0:1.0: USB hub found [ 101.333019][ T29] audit: type=1326 audit(1734081899.175:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.340157][ T6254] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.361015][ T29] audit: type=1326 audit(1734081899.175:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.361052][ T29] audit: type=1326 audit(1734081899.175:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.420175][ T29] audit: type=1326 audit(1734081899.175:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 101.432570][ T6254] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.444020][ T6252] hub 2-0:1.0: 8 ports detected [ 101.548137][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.607993][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 101.650488][ T6271] loop2: detected capacity change from 0 to 512 [ 101.663825][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 101.673666][ T6271] EXT4-fs: Ignoring removed orlov option [ 101.680106][ T6271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.711234][ T6271] EXT4-fs (loop2): 1 orphan inode deleted [ 101.717079][ T6271] EXT4-fs (loop2): 1 truncate cleaned up [ 101.741847][ T6271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.771049][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.797507][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 101.851982][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 101.872391][ T6286] random: crng reseeded on system resumption [ 101.885604][ T6285] bridge0: port 1(veth0_to_bond) entered blocking state [ 101.893036][ T6285] bridge0: port 1(veth0_to_bond) entered disabled state [ 101.963819][ T6285] veth0_to_bond: entered allmulticast mode [ 101.976618][ T6285] veth0_to_bond: entered promiscuous mode [ 102.095882][ T6294] wg2: left promiscuous mode [ 102.100579][ T6294] wg2: left allmulticast mode [ 102.128101][ T6294] wg2: entered promiscuous mode [ 102.133133][ T6294] wg2: entered allmulticast mode [ 102.282005][ T6299] loop1: detected capacity change from 0 to 512 [ 102.306275][ T6299] EXT4-fs: Ignoring removed orlov option [ 102.324297][ T6299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.367640][ T6299] EXT4-fs (loop1): 1 orphan inode deleted [ 102.373416][ T6299] EXT4-fs (loop1): 1 truncate cleaned up [ 102.418881][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.486580][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.628956][ T6316] loop2: detected capacity change from 0 to 512 [ 102.653195][ T6316] EXT4-fs: Ignoring removed orlov option [ 102.661408][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 102.672624][ T6316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.688778][ T6322] bond1: entered promiscuous mode [ 102.693923][ T6322] bond1: entered allmulticast mode [ 102.713905][ T6322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.725437][ T6316] EXT4-fs (loop2): 1 orphan inode deleted [ 102.731271][ T6316] EXT4-fs (loop2): 1 truncate cleaned up [ 102.745135][ T6316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.772865][ T6327] loop4: detected capacity change from 0 to 4096 [ 102.811884][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.834244][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.032664][ T6327] netlink: 'syz.4.1058': attribute type 3 has an invalid length. [ 103.046592][ T6350] random: crng reseeded on system resumption [ 103.120940][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 103.140765][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.147565][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 103.578626][ T6369] loop2: detected capacity change from 0 to 512 [ 103.597965][ T6369] EXT4-fs: Ignoring removed orlov option [ 103.614542][ T6369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.645402][ T6369] EXT4-fs (loop2): 1 orphan inode deleted [ 103.651237][ T6369] EXT4-fs (loop2): 1 truncate cleaned up [ 103.676446][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.760015][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.905859][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.929733][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.067223][ T6394] random: crng reseeded on system resumption [ 104.289392][ T6413] loop0: detected capacity change from 0 to 1024 [ 104.329222][ T6413] EXT4-fs: Ignoring removed nobh option [ 104.341830][ T6413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.360058][ T6413] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.375332][ T6413] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1089: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 104.423933][ T6413] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1089: couldn't read orphan inode 11 (err -117) [ 104.459771][ T6413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.490432][ T6413] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1089: Invalid block bitmap block 0 in block_group 0 [ 104.504153][ T6413] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1089: Failed to acquire dquot type 0 [ 104.504401][ T6437] loop1: detected capacity change from 0 to 4096 [ 104.528263][ T6437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.593294][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.603904][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 104.624217][ T3411] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:8: Failed to release dquot type 0 [ 104.693216][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 104.744199][ T6453] syzkaller0: entered promiscuous mode [ 104.749799][ T6453] syzkaller0: entered allmulticast mode [ 104.776470][ T6437] netlink: 'syz.1.1099': attribute type 3 has an invalid length. [ 104.830867][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.508547][ T6483] loop1: detected capacity change from 0 to 128 [ 105.531335][ T6483] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.548119][ T6483] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.673805][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.677390][ T6497] random: crng reseeded on system resumption [ 105.758194][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 105.805811][ T6502] bond2: entered promiscuous mode [ 105.810939][ T6502] bond2: entered allmulticast mode [ 105.825301][ T6502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.938445][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.979454][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.006777][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 106.056174][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 106.179257][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 106.179276][ T29] audit: type=1326 audit(1734081904.145:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 106.233137][ T29] audit: type=1326 audit(1734081904.185:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 106.256706][ T29] audit: type=1326 audit(1734081904.185:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 106.340943][ T29] audit: type=1326 audit(1734081904.255:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 106.389077][ T6533] syzkaller0: entered promiscuous mode [ 106.394600][ T6533] syzkaller0: entered allmulticast mode [ 107.270373][ T6548] loop1: detected capacity change from 0 to 1024 [ 107.303301][ T6548] EXT4-fs: Ignoring removed nobh option [ 107.332139][ T6548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.354748][ T29] audit: type=1326 audit(1734081905.295:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 107.378353][ T29] audit: type=1326 audit(1734081905.305:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 107.401876][ T29] audit: type=1326 audit(1734081905.305:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 107.425287][ T29] audit: type=1326 audit(1734081905.305:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 107.445227][ T6548] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.448853][ T29] audit: type=1326 audit(1734081905.305:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 107.482530][ T29] audit: type=1326 audit(1734081905.305:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 107.551033][ T6548] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.1139: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 107.573626][ T6548] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1139: couldn't read orphan inode 11 (err -117) [ 107.586291][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.602689][ T6548] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1139: Invalid block bitmap block 0 in block_group 0 [ 107.619202][ T6548] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1139: Failed to acquire dquot type 0 [ 107.745658][ T6566] loop3: detected capacity change from 0 to 4096 [ 107.767490][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.781186][ T6566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.794548][ T5474] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 107.915873][ T6524] syz.4.1132 (6524) used greatest stack depth: 9536 bytes left [ 108.044727][ T6566] netlink: 'syz.3.1145': attribute type 3 has an invalid length. [ 108.072258][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.708221][ T6592] random: crng reseeded on system resumption [ 109.133519][ T6605] random: crng reseeded on system resumption [ 109.202210][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 109.227763][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 109.245149][ T6613] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.292576][ T6619] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.294677][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 109.324429][ T6620] bond3: entered promiscuous mode [ 109.329537][ T6620] bond3: entered allmulticast mode [ 109.335085][ T6620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.342146][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.360857][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.032775][ T6657] wg2: left promiscuous mode [ 111.037521][ T6657] wg2: left allmulticast mode [ 111.056584][ T6657] wg2: entered promiscuous mode [ 111.061538][ T6657] wg2: entered allmulticast mode [ 111.134704][ T6662] loop2: detected capacity change from 0 to 512 [ 111.141918][ T6662] EXT4-fs: Ignoring removed orlov option [ 111.149137][ T6662] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.188516][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 111.240088][ T6666] bond3: entered promiscuous mode [ 111.245212][ T6666] bond3: entered allmulticast mode [ 111.254742][ T6666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.341666][ T6662] EXT4-fs (loop2): 1 orphan inode deleted [ 111.347476][ T6662] EXT4-fs (loop2): 1 truncate cleaned up [ 111.367692][ T6672] random: crng reseeded on system resumption [ 111.422549][ T6671] loop3: detected capacity change from 0 to 4096 [ 111.513544][ T6662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.582956][ T6671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.600872][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 111.600889][ T29] audit: type=1326 audit(1734081909.565:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.630570][ T29] audit: type=1326 audit(1734081909.565:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.654087][ T29] audit: type=1326 audit(1734081909.565:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.677422][ T29] audit: type=1326 audit(1734081909.565:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.700938][ T29] audit: type=1326 audit(1734081909.565:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.724486][ T29] audit: type=1326 audit(1734081909.565:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.748068][ T29] audit: type=1326 audit(1734081909.565:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.771813][ T29] audit: type=1326 audit(1734081909.565:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.777438][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 111.795321][ T29] audit: type=1326 audit(1734081909.565:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.795352][ T29] audit: type=1326 audit(1734081909.565:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 111.859773][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 111.860281][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.016104][ T6684] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 112.023652][ T6684] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 112.080523][ T6684] hub 2-0:1.0: USB hub found [ 112.091862][ T6684] hub 2-0:1.0: 8 ports detected [ 112.119512][ T6697] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.128536][ T6697] vhci_hcd: invalid port number 23 [ 112.128621][ T6671] netlink: 'syz.3.1182': attribute type 3 has an invalid length. [ 112.193769][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.218872][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 112.279624][ T6700] random: crng reseeded on system resumption [ 112.433152][ T6707] syzkaller0: entered promiscuous mode [ 112.438891][ T6707] syzkaller0: entered allmulticast mode [ 112.651623][ T6714] loop4: detected capacity change from 0 to 512 [ 112.677318][ T6714] EXT4-fs: Ignoring removed orlov option [ 112.693698][ T6714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.725919][ T6714] EXT4-fs (loop4): 1 orphan inode deleted [ 112.731728][ T6714] EXT4-fs (loop4): 1 truncate cleaned up [ 112.745137][ T6714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.867040][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.280722][ T6728] random: crng reseeded on system resumption [ 113.302219][ T6727] loop4: detected capacity change from 0 to 4096 [ 113.347482][ T6727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.512018][ T6736] loop1: detected capacity change from 0 to 1024 [ 113.523553][ T6736] EXT4-fs: Ignoring removed nobh option [ 113.570135][ T6736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.588532][ T6736] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.610719][ T6727] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 113.648019][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.698039][ T6736] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.1200: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 113.764975][ T6736] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1200: couldn't read orphan inode 11 (err -117) [ 113.811046][ T6736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.886129][ T6736] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1200: Invalid block bitmap block 0 in block_group 0 [ 113.905898][ T6737] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.920055][ T6737] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 113.985876][ T6736] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1200: Failed to acquire dquot type 0 [ 114.098504][ T6737] hub 2-0:1.0: USB hub found [ 114.111493][ T6737] hub 2-0:1.0: 8 ports detected [ 114.196369][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.526310][ T1846] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 0 [ 114.638168][ T6761] loop4: detected capacity change from 0 to 512 [ 114.658544][ T6761] EXT4-fs: Ignoring removed orlov option [ 114.673655][ T6761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.687046][ T6761] EXT4-fs (loop4): 1 orphan inode deleted [ 114.692849][ T6761] EXT4-fs (loop4): 1 truncate cleaned up [ 114.700437][ T6761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.798558][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.800811][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 114.830010][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 115.345703][ T6775] wg2: left promiscuous mode [ 115.350351][ T6775] wg2: left allmulticast mode [ 115.384134][ T6775] wg2: entered promiscuous mode [ 115.389147][ T6775] wg2: entered allmulticast mode [ 115.650944][ T6781] random: crng reseeded on system resumption [ 116.072130][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.092183][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.502550][ T6804] loop1: detected capacity change from 0 to 128 [ 116.516343][ T6802] loop0: detected capacity change from 0 to 1024 [ 116.581349][ T6804] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.615206][ T6802] EXT4-fs: Ignoring removed nobh option [ 116.635773][ T6804] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.646203][ T6802] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.655677][ T6802] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.655882][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 116.655899][ T29] audit: type=1326 audit(1734081914.625:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.1.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bfc794680 code=0x7ffc0000 [ 116.682366][ T6802] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1217: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 116.695600][ T29] audit: type=1326 audit(1734081914.625:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.1.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6bfc794a67 code=0x7ffc0000 [ 116.737463][ T29] audit: type=1326 audit(1734081914.625:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.1.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bfc794680 code=0x7ffc0000 [ 116.760968][ T29] audit: type=1326 audit(1734081914.625:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.1.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 116.784450][ T29] audit: type=1326 audit(1734081914.625:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.1.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 116.810565][ T6802] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1217: couldn't read orphan inode 11 (err -117) [ 116.823326][ T6802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.841179][ T6802] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1217: Invalid block bitmap block 0 in block_group 0 [ 116.855497][ T6802] Quota error (device loop0): write_blk: dquota write failed [ 116.856634][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.863039][ T6802] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 116.882502][ T6802] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1217: Failed to acquire dquot type 0 [ 116.994573][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.005115][ T1846] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 117.014263][ T1846] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 0 [ 117.054084][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 117.070728][ T6819] bond4: entered promiscuous mode [ 117.075892][ T6819] bond4: entered allmulticast mode [ 117.081180][ T6819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.390981][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 117.427463][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 118.434087][ T29] audit: type=1326 audit(1734081916.395:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 118.457720][ T29] audit: type=1326 audit(1734081916.395:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 118.627053][ T6857] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 118.920971][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 119.067830][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 119.506567][ T6870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.589285][ T6870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.704535][ T6870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.952827][ T6870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.014210][ T6889] loop0: detected capacity change from 0 to 4096 [ 120.029577][ T6889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.033016][ T6870] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.095651][ T6870] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.121538][ T6870] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.142386][ T6870] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.199954][ T6889] netlink: 'syz.0.1245': attribute type 3 has an invalid length. [ 120.232281][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.259434][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.268478][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.494451][ T6911] loop0: detected capacity change from 0 to 512 [ 120.518178][ T6911] EXT4-fs: Ignoring removed orlov option [ 120.524703][ T6911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.538690][ T6911] EXT4-fs (loop0): 1 orphan inode deleted [ 120.544487][ T6911] EXT4-fs (loop0): 1 truncate cleaned up [ 120.551577][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.596436][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.856599][ T6924] random: crng reseeded on system resumption [ 121.862974][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 122.009430][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.023866][ T6953] bond4: entered promiscuous mode [ 122.029060][ T6953] bond4: entered allmulticast mode [ 122.040927][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.075703][ T6953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.083474][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 122.149200][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 122.340129][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 122.517353][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 123.175812][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.188598][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.449825][ T7001] wg2: left promiscuous mode [ 123.454480][ T7001] wg2: left allmulticast mode [ 123.477837][ T7001] wg2: entered promiscuous mode [ 123.482785][ T7001] wg2: entered allmulticast mode [ 123.644278][ T7008] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.664912][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.675102][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 123.688952][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.698721][ T7010] bond5: entered promiscuous mode [ 123.703847][ T7010] bond5: entered allmulticast mode [ 123.714175][ T7010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.730340][ T7008] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.793486][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 123.793501][ T29] audit: type=1326 audit(1734081921.755:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.824839][ T7008] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.846579][ T29] audit: type=1326 audit(1734081921.755:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.872062][ T29] audit: type=1326 audit(1734081921.755:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.895538][ T29] audit: type=1326 audit(1734081921.755:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.919152][ T29] audit: type=1326 audit(1734081921.755:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.942840][ T29] audit: type=1326 audit(1734081921.755:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.966934][ T29] audit: type=1326 audit(1734081921.755:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 123.990434][ T29] audit: type=1326 audit(1734081921.755:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 124.013918][ T29] audit: type=1326 audit(1734081921.755:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 124.037353][ T29] audit: type=1326 audit(1734081921.755:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 124.107238][ T7008] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.290457][ T7008] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.432232][ T7008] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.445771][ T7008] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.458160][ T7008] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.109018][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 125.164488][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 125.178344][ T7036] random: crng reseeded on system resumption [ 125.376943][ T7043] wg2: left promiscuous mode [ 125.381609][ T7043] wg2: left allmulticast mode [ 125.455028][ T7043] wg2: entered promiscuous mode [ 125.459953][ T7043] wg2: entered allmulticast mode [ 125.682946][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.717505][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.894611][ T7055] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.937179][ T7055] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.987462][ T7055] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.026361][ T7055] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.091374][ T7055] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.102808][ T7055] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.114670][ T7055] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.126818][ T7055] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.226646][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 126.275932][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 127.128342][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 127.146151][ T7082] bond5: entered promiscuous mode [ 127.151236][ T7082] bond5: entered allmulticast mode [ 127.156884][ T7082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 127.682772][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.693472][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.996592][ T7123] syzkaller0: entered promiscuous mode [ 128.002136][ T7123] syzkaller0: entered allmulticast mode [ 128.243375][ T7128] random: crng reseeded on system resumption [ 128.733692][ T7159] loop1: detected capacity change from 0 to 4096 [ 128.965101][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.016821][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 129.016841][ T29] audit: type=1326 audit(1734081926.965:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.046758][ T29] audit: type=1326 audit(1734081926.965:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.070219][ T29] audit: type=1326 audit(1734081926.965:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.093750][ T29] audit: type=1326 audit(1734081926.965:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.117168][ T29] audit: type=1326 audit(1734081926.965:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.141012][ T29] audit: type=1326 audit(1734081926.965:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.164467][ T29] audit: type=1326 audit(1734081926.965:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.187910][ T29] audit: type=1326 audit(1734081926.965:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.204497][ T7159] netlink: 'syz.1.1332': attribute type 3 has an invalid length. [ 129.211304][ T29] audit: type=1326 audit(1734081926.965:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.242532][ T29] audit: type=1326 audit(1734081926.965:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 129.331682][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.383999][ T7182] wg2: left promiscuous mode [ 129.388729][ T7182] wg2: left allmulticast mode [ 129.427919][ T7182] wg2: entered promiscuous mode [ 129.433057][ T7182] wg2: entered allmulticast mode [ 129.557972][ T7196] loop3: detected capacity change from 0 to 1024 [ 129.564797][ T7196] EXT4-fs: Ignoring removed nobh option [ 129.571319][ T7196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.580282][ T7196] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.592268][ T7196] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.1346: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 129.613505][ T7196] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1346: couldn't read orphan inode 11 (err -117) [ 129.627562][ T7196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.646739][ T7200] loop4: detected capacity change from 0 to 4096 [ 129.653451][ T7196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1346: Invalid block bitmap block 0 in block_group 0 [ 129.671976][ T7200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.681319][ T7196] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1346: Failed to acquire dquot type 0 [ 129.821245][ T7200] netlink: 'syz.4.1348': attribute type 3 has an invalid length. [ 129.834724][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.843967][ T1846] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 0 [ 129.872387][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.883674][ T7216] random: crng reseeded on system resumption [ 129.906852][ T7215] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.108111][ T7215] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.154330][ T7222] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.256969][ T7215] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.280370][ T7230] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.288979][ T7230] vhci_hcd: invalid port number 23 [ 130.685939][ T7232] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.708008][ T7215] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.769064][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 130.921716][ T7215] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.934342][ T7215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.051113][ T7215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.272828][ T7215] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.443086][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.543492][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.989671][ T7255] syzkaller0: entered promiscuous mode [ 131.995260][ T7255] syzkaller0: entered allmulticast mode [ 132.178558][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.200254][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.912093][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 133.028652][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 133.269443][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 133.312776][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 133.723652][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 133.830839][ T7300] bond6: entered promiscuous mode [ 133.835951][ T7300] bond6: entered allmulticast mode [ 133.885149][ T7300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 134.158041][ T7307] syzkaller0: entered promiscuous mode [ 134.163593][ T7307] syzkaller0: entered allmulticast mode [ 134.295610][ T7314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.337053][ T7314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.450472][ T7314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.510815][ T7323] loop2: detected capacity change from 0 to 512 [ 134.518115][ T7323] EXT4-fs: Ignoring removed orlov option [ 134.524230][ T7323] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.536211][ T7314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.557041][ T7323] EXT4-fs (loop2): 1 orphan inode deleted [ 134.562840][ T7323] EXT4-fs (loop2): 1 truncate cleaned up [ 134.596219][ T7314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.604978][ T7323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.628617][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 134.657313][ T7314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.698976][ T7314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.721696][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.732231][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 134.735892][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 134.744440][ T7314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.798352][ T7335] bond4: entered promiscuous mode [ 134.803509][ T7335] bond4: entered allmulticast mode [ 134.809322][ T7335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.928697][ T7346] loop1: detected capacity change from 0 to 4096 [ 134.967269][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 135.002949][ T7346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.055851][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 135.065061][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 135.065084][ T29] audit: type=1326 audit(1734081933.025:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.094777][ T29] audit: type=1326 audit(1734081933.025:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.097752][ T7361] random: crng reseeded on system resumption [ 135.118328][ T29] audit: type=1326 audit(1734081933.025:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.118364][ T29] audit: type=1326 audit(1734081933.025:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.171210][ T29] audit: type=1326 audit(1734081933.025:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.194695][ T29] audit: type=1326 audit(1734081933.025:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.218106][ T29] audit: type=1326 audit(1734081933.025:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.241756][ T29] audit: type=1326 audit(1734081933.025:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.265191][ T29] audit: type=1326 audit(1734081933.025:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.288642][ T29] audit: type=1326 audit(1734081933.025:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 135.431958][ T7346] netlink: 'syz.1.1398': attribute type 3 has an invalid length. [ 135.494426][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.524598][ T7368] loop2: detected capacity change from 0 to 512 [ 135.549371][ T7368] EXT4-fs: Ignoring removed orlov option [ 135.567632][ T7370] loop1: detected capacity change from 0 to 4096 [ 135.574671][ T7368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.596172][ T7370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.626078][ T7368] EXT4-fs (loop2): 1 orphan inode deleted [ 135.632018][ T7368] EXT4-fs (loop2): 1 truncate cleaned up [ 135.643194][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.705221][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.827255][ T7375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.848369][ T7370] netlink: 'syz.1.1406': attribute type 3 has an invalid length. [ 135.920259][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.931036][ T7375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.110669][ T7375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.148046][ T7375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.176943][ T7388] wg2: left promiscuous mode [ 136.181785][ T7388] wg2: left allmulticast mode [ 136.223851][ T7388] wg2: entered promiscuous mode [ 136.228797][ T7388] wg2: entered allmulticast mode [ 136.295558][ T7375] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.312248][ T7375] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.348164][ T7375] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.434302][ T7375] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.013585][ T7399] random: crng reseeded on system resumption [ 137.364385][ T7405] loop4: detected capacity change from 0 to 512 [ 137.467997][ T7405] EXT4-fs: Ignoring removed orlov option [ 137.481898][ T7405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.919679][ T7405] EXT4-fs (loop4): 1 orphan inode deleted [ 137.925513][ T7405] EXT4-fs (loop4): 1 truncate cleaned up [ 137.932669][ T7405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.966480][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.065287][ T7417] wg2: left promiscuous mode [ 138.070052][ T7417] wg2: left allmulticast mode [ 138.105305][ T7419] syzkaller0: entered promiscuous mode [ 138.110840][ T7419] syzkaller0: entered allmulticast mode [ 138.122782][ T7417] wg2: entered promiscuous mode [ 138.127736][ T7417] wg2: entered allmulticast mode [ 138.406596][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.432695][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.498328][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 138.521636][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 139.075833][ T7449] wg2: left promiscuous mode [ 139.080466][ T7449] wg2: left allmulticast mode [ 139.097322][ T7449] wg2: entered promiscuous mode [ 139.102278][ T7449] wg2: entered allmulticast mode [ 139.920251][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 139.964928][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 139.996775][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 140.022623][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 140.611736][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 140.611752][ T29] audit: type=1326 audit(1734081938.575:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.664042][ T29] audit: type=1326 audit(1734081938.575:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.687610][ T29] audit: type=1326 audit(1734081938.615:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.711226][ T29] audit: type=1326 audit(1734081938.615:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.734675][ T29] audit: type=1326 audit(1734081938.615:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.758196][ T29] audit: type=1326 audit(1734081938.615:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.781640][ T29] audit: type=1326 audit(1734081938.615:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.805160][ T29] audit: type=1326 audit(1734081938.615:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.828662][ T29] audit: type=1326 audit(1734081938.615:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.852068][ T29] audit: type=1326 audit(1734081938.615:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 140.961919][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 141.004951][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 141.060749][ T7485] veth0_vlan: entered allmulticast mode [ 141.211755][ T7488] veth0_vlan: left promiscuous mode [ 141.226040][ T7488] veth0_vlan: entered promiscuous mode [ 141.377813][ T7502] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 141.568982][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 141.616754][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 141.999268][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.016274][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.198412][ T7532] veth0_vlan: entered allmulticast mode [ 142.413353][ T7533] veth0_vlan: left promiscuous mode [ 142.422152][ T7533] veth0_vlan: entered promiscuous mode [ 142.664150][ T7551] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.726891][ T7551] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.776633][ T7551] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.816226][ T7551] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.834562][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.846834][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.858428][ T7573] wg2: left promiscuous mode [ 142.863056][ T7573] wg2: left allmulticast mode [ 142.877597][ T7573] wg2: entered promiscuous mode [ 142.882559][ T7573] wg2: entered allmulticast mode [ 142.932017][ T7551] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.945105][ T7551] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.969365][ T7551] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.995897][ T7551] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.118798][ T7578] loop2: detected capacity change from 0 to 4096 [ 143.135431][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.243801][ T7578] netlink: 'syz.2.1479': attribute type 3 has an invalid length. [ 143.266803][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.530549][ T7587] random: crng reseeded on system resumption [ 143.828031][ T7600] wg2: left promiscuous mode [ 143.832730][ T7600] wg2: left allmulticast mode [ 143.868143][ T7600] wg2: entered promiscuous mode [ 143.873058][ T7600] wg2: entered allmulticast mode [ 144.060744][ T7603] 9pnet_fd: Insufficient options for proto=fd [ 144.109901][ T7611] loop4: detected capacity change from 0 to 4096 [ 144.116468][ T7603] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.134085][ T7603] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 144.157261][ T7611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.177907][ T7603] hub 2-0:1.0: USB hub found [ 144.185041][ T7603] hub 2-0:1.0: 8 ports detected [ 144.367398][ T7611] netlink: 'syz.4.1491': attribute type 3 has an invalid length. [ 144.395463][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.453684][ T7617] wg2: left promiscuous mode [ 144.458441][ T7617] wg2: left allmulticast mode [ 144.462404][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.473680][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.516246][ T7617] wg2: entered promiscuous mode [ 144.521186][ T7617] wg2: entered allmulticast mode [ 144.647349][ T7627] syzkaller0: entered promiscuous mode [ 144.652894][ T7627] syzkaller0: entered allmulticast mode [ 144.913989][ T7645] loop4: detected capacity change from 0 to 4096 [ 144.938431][ T7645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.052265][ T7645] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 145.209908][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.307500][ T7649] 9pnet_fd: Insufficient options for proto=fd [ 145.345832][ T7649] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.353491][ T7649] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 145.402015][ T7649] hub 2-0:1.0: USB hub found [ 145.409009][ T7649] hub 2-0:1.0: 8 ports detected [ 145.501430][ T7656] __nla_validate_parse: 4 callbacks suppressed [ 145.501444][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 145.531764][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 146.050807][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.060025][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.405923][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.416186][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.741332][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 146.763209][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 146.892518][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 146.892535][ T29] audit: type=1326 audit(1734081944.855:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 146.922102][ T29] audit: type=1326 audit(1734081944.855:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 146.969827][ T29] audit: type=1326 audit(1734081944.855:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 146.993297][ T29] audit: type=1326 audit(1734081944.855:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.016788][ T29] audit: type=1326 audit(1734081944.855:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.040242][ T29] audit: type=1326 audit(1734081944.915:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.084868][ T29] audit: type=1326 audit(1734081945.045:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.108390][ T29] audit: type=1326 audit(1734081945.045:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.255070][ T7716] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.263499][ T7716] vhci_hcd: invalid port number 23 [ 147.272226][ T29] audit: type=1326 audit(1734081945.245:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.297485][ T29] audit: type=1326 audit(1734081945.265:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 147.395634][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 147.697425][ T7732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.756322][ T7732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.772311][ T7734] loop2: detected capacity change from 0 to 4096 [ 147.815355][ T7734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.831231][ T7732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.887626][ T7732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.932101][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.963151][ T7732] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.974066][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.991538][ T7732] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.016725][ T7732] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.046080][ T7732] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.190680][ T7751] loop1: detected capacity change from 0 to 1024 [ 148.209800][ T7751] EXT4-fs: Ignoring removed nobh option [ 148.220736][ T7734] netlink: 'syz.2.1532': attribute type 3 has an invalid length. [ 148.230961][ T7751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.240543][ T7751] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.264438][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.276455][ T7751] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.1538: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 148.305218][ T7751] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1538: couldn't read orphan inode 11 (err -117) [ 148.325410][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.352719][ T7751] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1538: Invalid block bitmap block 0 in block_group 0 [ 148.372792][ T7751] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1538: Failed to acquire dquot type 0 [ 148.686142][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.697832][ T7453] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:15: Failed to release dquot type 0 [ 148.999049][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 149.023943][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 150.017589][ T7782] syzkaller0: entered promiscuous mode [ 150.023132][ T7782] syzkaller0: entered allmulticast mode [ 150.773866][ T7785] loop4: detected capacity change from 0 to 4096 [ 150.808419][ T7785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.045959][ T7785] netlink: 'syz.4.1549': attribute type 3 has an invalid length. [ 151.108201][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.211583][ T7789] bridge0: left promiscuous mode [ 151.216611][ T7789] bridge0: left allmulticast mode [ 151.288355][ T7791] wg2: left promiscuous mode [ 151.292994][ T7791] wg2: left allmulticast mode [ 151.345416][ T7791] wg2: entered promiscuous mode [ 151.350396][ T7791] wg2: entered allmulticast mode [ 151.487504][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 151.553658][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 152.285239][ T7839] wg2: left promiscuous mode [ 152.289904][ T7839] wg2: left allmulticast mode [ 152.336407][ T7839] wg2: entered promiscuous mode [ 152.341317][ T7839] wg2: entered allmulticast mode [ 152.559909][ T7847] syzkaller0: entered promiscuous mode [ 152.565486][ T7847] syzkaller0: entered allmulticast mode [ 152.735924][ T7849] syzkaller0: entered promiscuous mode [ 152.741509][ T7849] syzkaller0: entered allmulticast mode [ 152.750718][ T7853] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.895108][ T7853] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.143574][ T7853] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.217910][ T7853] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.433227][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.443251][ T7866] wg2: left promiscuous mode [ 153.446970][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.448009][ T7866] wg2: left allmulticast mode [ 153.491074][ T7853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.509256][ T7853] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.529356][ T7853] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.543980][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 153.554204][ T7866] wg2: entered promiscuous mode [ 153.559134][ T7866] wg2: entered allmulticast mode [ 153.574334][ T7853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.596884][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 153.654989][ T7875] wg2: left promiscuous mode [ 153.659638][ T7875] wg2: left allmulticast mode [ 153.696923][ T7875] wg2: entered promiscuous mode [ 153.701831][ T7875] wg2: entered allmulticast mode [ 153.815711][ T7884] syzkaller0: entered promiscuous mode [ 153.821238][ T7884] syzkaller0: entered allmulticast mode [ 153.924067][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1587'. [ 154.017996][ T7891] syzkaller0: entered promiscuous mode [ 154.023597][ T7891] syzkaller0: entered allmulticast mode [ 154.068263][ T7900] loop3: detected capacity change from 0 to 1024 [ 154.082471][ T7900] EXT4-fs: Ignoring removed nobh option [ 154.091009][ T7900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.105514][ T7900] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.129696][ T7900] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.1591: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 154.149212][ T7904] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.150081][ T7900] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1591: couldn't read orphan inode 11 (err -117) [ 154.172967][ T7900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.195161][ T7900] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1591: Invalid block bitmap block 0 in block_group 0 [ 154.215936][ T7900] __quota_error: 127 callbacks suppressed [ 154.215954][ T7900] Quota error (device loop3): write_blk: dquota write failed [ 154.229261][ T7900] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.245033][ T7900] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1591: Failed to acquire dquot type 0 [ 154.258248][ T7904] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.320972][ T7904] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.370879][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.381766][ T7303] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 154.390804][ T7303] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:12: Failed to release dquot type 0 [ 154.439136][ T7904] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.639309][ T7904] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.657422][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 154.678559][ T7904] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.703126][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 154.708070][ T7904] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.727905][ T7904] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.789121][ T7925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1599'. [ 154.972100][ T7933] syzkaller0: entered promiscuous mode [ 154.977805][ T7933] syzkaller0: entered allmulticast mode [ 155.099392][ T7936] loop1: detected capacity change from 0 to 4096 [ 155.118928][ T7936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.142092][ T29] audit: type=1326 audit(1734081953.105:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.225904][ T29] audit: type=1326 audit(1734081953.135:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.249419][ T29] audit: type=1326 audit(1734081953.135:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.272841][ T29] audit: type=1326 audit(1734081953.135:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.296387][ T29] audit: type=1326 audit(1734081953.135:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.321397][ T29] audit: type=1326 audit(1734081953.135:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.344883][ T29] audit: type=1326 audit(1734081953.135:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 155.360460][ T7936] netlink: 'syz.1.1603': attribute type 3 has an invalid length. [ 155.463716][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.469267][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.502844][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.665532][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.674406][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.850288][ T7952] wg2: left promiscuous mode [ 155.855085][ T7952] wg2: left allmulticast mode [ 155.870824][ T7952] wg2: entered promiscuous mode [ 155.875818][ T7952] wg2: entered allmulticast mode [ 155.947883][ T7958] loop1: detected capacity change from 0 to 4096 [ 155.978279][ T7958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.071974][ T7958] netlink: 'syz.1.1611': attribute type 3 has an invalid length. [ 156.091888][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.136705][ T7964] wg2: left promiscuous mode [ 156.141364][ T7964] wg2: left allmulticast mode [ 156.198471][ T7966] syzkaller0: entered promiscuous mode [ 156.203983][ T7966] syzkaller0: entered allmulticast mode [ 156.349906][ T7970] wg2: entered promiscuous mode [ 156.355000][ T7970] wg2: entered allmulticast mode [ 156.464476][ T7978] syzkaller0: entered promiscuous mode [ 156.470107][ T7978] syzkaller0: entered allmulticast mode [ 156.529748][ T7980] syzkaller0: entered promiscuous mode [ 156.535272][ T7980] syzkaller0: entered allmulticast mode [ 156.640907][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.651950][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.444296][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.472563][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.812182][ T7999] wg2: left promiscuous mode [ 157.816981][ T7999] wg2: left allmulticast mode [ 157.846910][ T7999] wg2: entered promiscuous mode [ 157.851861][ T7999] wg2: entered allmulticast mode [ 158.170055][ T8010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1633'. [ 158.219125][ T8012] syzkaller0: entered promiscuous mode [ 158.224831][ T8012] syzkaller0: entered allmulticast mode [ 158.369255][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 158.394425][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 159.522653][ T8048] loop1: detected capacity change from 0 to 4096 [ 159.533674][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 159.533702][ T29] audit: type=1326 audit(1734081957.495:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.556575][ T8052] process 'syz.3.1649' launched './file0' with NULL argv: empty string added [ 159.563509][ T29] audit: type=1326 audit(1734081957.495:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.595794][ T29] audit: type=1326 audit(1734081957.495:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.619285][ T29] audit: type=1326 audit(1734081957.495:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.642738][ T29] audit: type=1326 audit(1734081957.495:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.666662][ T29] audit: type=1326 audit(1734081957.515:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.690320][ T29] audit: type=1326 audit(1734081957.515:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.713766][ T29] audit: type=1326 audit(1734081957.515:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.737559][ T29] audit: type=1326 audit(1734081957.515:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.761091][ T29] audit: type=1326 audit(1734081957.515:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cf375d19 code=0x7ffc0000 [ 159.785721][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.803484][ T8056] wg2: left promiscuous mode [ 159.808196][ T8056] wg2: left allmulticast mode [ 159.832951][ T8058] wg2: entered promiscuous mode [ 159.837996][ T8058] wg2: entered allmulticast mode [ 159.909658][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 159.922569][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 159.943025][ T8048] netlink: 'syz.1.1647': attribute type 3 has an invalid length. [ 159.967283][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.242642][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 160.313895][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 160.515225][ T8091] 9pnet_fd: Insufficient options for proto=fd [ 160.535978][ T8100] veth0_vlan: entered allmulticast mode [ 160.574976][ T8091] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.582436][ T8091] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 160.680223][ T8091] hub 2-0:1.0: USB hub found [ 160.698838][ T8101] veth0_vlan: left promiscuous mode [ 160.700001][ T8091] hub 2-0:1.0: 8 ports detected [ 160.705680][ T8101] veth0_vlan: entered promiscuous mode [ 160.821947][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.857624][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.040329][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 161.102745][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 161.162929][ T8117] random: crng reseeded on system resumption [ 161.306871][ T8128] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.377516][ T8128] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.417247][ T8128] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.496302][ T8128] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.553032][ T8128] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.566016][ T8128] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.577667][ T8128] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.590278][ T8128] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.693658][ T8143] veth0_vlan: entered allmulticast mode [ 161.773166][ T8144] veth0_vlan: left promiscuous mode [ 161.785165][ T8144] veth0_vlan: entered promiscuous mode [ 162.027093][ T8151] loop2: detected capacity change from 0 to 4096 [ 162.047154][ T8151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.060482][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 162.286588][ T8151] netlink: 'syz.2.1678': attribute type 3 has an invalid length. [ 162.396330][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.495567][ T8169] veth0_vlan: entered allmulticast mode [ 162.837702][ T8174] veth0_vlan: left promiscuous mode [ 162.843977][ T8174] veth0_vlan: entered promiscuous mode [ 163.521612][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.534088][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.561322][ T8215] loop4: detected capacity change from 0 to 128 [ 163.717513][ T8215] bio_check_eod: 58 callbacks suppressed [ 163.717529][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.717529][ T8215] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 163.732704][ T8225] loop2: detected capacity change from 0 to 1024 [ 163.763351][ T8225] EXT4-fs: Ignoring removed nobh option [ 163.774683][ T8225] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.797746][ T8225] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.799064][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.799064][ T8215] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 163.838442][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.838442][ T8215] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 163.847029][ T8225] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.1702: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 163.851695][ T8215] buffer_io_error: 54 callbacks suppressed [ 163.851788][ T8215] Buffer I/O error on dev loop4, logical block 177, async page read [ 163.885438][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.885438][ T8215] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 163.898666][ T8215] Buffer I/O error on dev loop4, logical block 178, async page read [ 163.900476][ T8225] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1702: couldn't read orphan inode 11 (err -117) [ 163.908680][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.908680][ T8215] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 163.931764][ T8215] Buffer I/O error on dev loop4, logical block 179, async page read [ 163.939814][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.939814][ T8215] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 163.940297][ T8225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.953005][ T8215] Buffer I/O error on dev loop4, logical block 180, async page read [ 163.953033][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.953033][ T8215] loop4: rw=0, sector=181, nr_sectors = 1 limit=128 [ 163.953061][ T8215] Buffer I/O error on dev loop4, logical block 181, async page read [ 163.953132][ T8215] syz.4.1698: attempt to access beyond end of device [ 163.953132][ T8215] loop4: rw=0, sector=182, nr_sectors = 1 limit=128 [ 164.007912][ T8215] Buffer I/O error on dev loop4, logical block 182, async page read [ 164.015988][ T8215] syz.4.1698: attempt to access beyond end of device [ 164.015988][ T8215] loop4: rw=0, sector=183, nr_sectors = 1 limit=128 [ 164.029227][ T8215] Buffer I/O error on dev loop4, logical block 183, async page read [ 164.037509][ T8215] syz.4.1698: attempt to access beyond end of device [ 164.037509][ T8215] loop4: rw=0, sector=184, nr_sectors = 1 limit=128 [ 164.039336][ T8225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1702: Invalid block bitmap block 0 in block_group 0 [ 164.050671][ T8215] Buffer I/O error on dev loop4, logical block 184, async page read [ 164.072189][ T8215] Buffer I/O error on dev loop4, logical block 177, async page read [ 164.080401][ T8215] Buffer I/O error on dev loop4, logical block 178, async page read [ 164.088729][ T8225] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1702: Failed to acquire dquot type 0 [ 164.178666][ T8231] __nla_validate_parse: 5 callbacks suppressed [ 164.178681][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 164.215233][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.239115][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 164.256641][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 164.332129][ T8237] syzkaller0: entered promiscuous mode [ 164.337683][ T8237] syzkaller0: entered allmulticast mode [ 164.615751][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 164.635346][ T8256] random: crng reseeded on system resumption [ 164.649869][ T8255] bond5: entered promiscuous mode [ 164.654985][ T8255] bond5: entered allmulticast mode [ 164.689549][ T8255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.895471][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 164.935570][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 164.935583][ T29] audit: type=1326 audit(1734081962.905:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 164.945369][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 164.987660][ T29] audit: type=1326 audit(1734081962.935:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.011276][ T29] audit: type=1326 audit(1734081962.935:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.034958][ T29] audit: type=1326 audit(1734081962.935:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.058452][ T29] audit: type=1326 audit(1734081962.935:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.081899][ T29] audit: type=1326 audit(1734081962.935:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.105353][ T29] audit: type=1326 audit(1734081962.935:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.128782][ T29] audit: type=1326 audit(1734081962.935:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.152277][ T29] audit: type=1326 audit(1734081962.935:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.175814][ T29] audit: type=1326 audit(1734081962.935:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe20e9b5d19 code=0x7ffc0000 [ 165.362419][ T8287] syzkaller0: entered promiscuous mode [ 165.368092][ T8287] syzkaller0: entered allmulticast mode [ 165.444512][ T8292] wg2: left promiscuous mode [ 165.449376][ T8292] wg2: left allmulticast mode [ 165.481199][ T8293] wg2: entered promiscuous mode [ 165.486168][ T8293] wg2: entered allmulticast mode [ 165.595735][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.621634][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.715195][ T8305] random: crng reseeded on system resumption [ 166.145085][ T8315] loop1: detected capacity change from 0 to 4096 [ 166.256820][ T8315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.271453][ T8323] 9pnet_fd: Insufficient options for proto=fd [ 166.286063][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.315402][ T8323] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.323000][ T8323] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 166.328401][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.377605][ T8323] hub 2-0:1.0: USB hub found [ 166.384828][ T8323] hub 2-0:1.0: 8 ports detected [ 166.599741][ T8315] netlink: 'syz.1.1731': attribute type 3 has an invalid length. [ 166.643357][ T8331] veth0_vlan: left promiscuous mode [ 166.656523][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.659945][ T8331] veth0_vlan: entered promiscuous mode [ 166.709046][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 166.770250][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 166.781405][ T8345] random: crng reseeded on system resumption [ 166.995565][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.050663][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.377452][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.395928][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.404848][ T8385] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.458158][ T8385] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.507063][ T8385] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.567994][ T8385] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.646526][ T8385] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.680295][ T8385] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.725919][ T8385] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.753306][ T8385] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.778871][ T8393] wg2: left promiscuous mode [ 167.783593][ T8393] wg2: left allmulticast mode [ 167.805933][ T8393] wg2: entered promiscuous mode [ 167.810850][ T8393] wg2: entered allmulticast mode [ 168.066104][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 168.089824][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 168.300676][ T8420] loop1: detected capacity change from 0 to 4096 [ 168.378594][ T8420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.062900][ T8420] netlink: 'syz.1.1767': attribute type 3 has an invalid length. [ 169.194253][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.365521][ T8456] wg2: left promiscuous mode [ 169.370168][ T8456] wg2: left allmulticast mode [ 169.406995][ T8456] wg2: entered promiscuous mode [ 169.411915][ T8456] wg2: entered allmulticast mode [ 169.420663][ T8458] wg2: left promiscuous mode [ 169.425374][ T8458] wg2: left allmulticast mode [ 169.473942][ T8461] loop0: detected capacity change from 0 to 1024 [ 169.498617][ T8461] EXT4-fs: Ignoring removed nobh option [ 169.502624][ T8458] wg2: entered promiscuous mode [ 169.509169][ T8458] wg2: entered allmulticast mode [ 169.509382][ T8461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.524132][ T8461] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.536421][ T8461] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1783: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.556528][ T8461] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1783: couldn't read orphan inode 11 (err -117) [ 169.569901][ T8461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.598856][ T8461] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1783: Invalid block bitmap block 0 in block_group 0 [ 169.648106][ T8461] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1783: Failed to acquire dquot type 0 [ 169.840603][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.853493][ T7392] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:13: Failed to release dquot type 0 [ 169.900746][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 169.936247][ T8489] wg2: left promiscuous mode [ 169.940897][ T8489] wg2: left allmulticast mode [ 169.961429][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 170.051859][ T8489] wg2: entered promiscuous mode [ 170.056971][ T8489] wg2: entered allmulticast mode [ 170.626241][ T8508] loop1: detected capacity change from 0 to 4096 [ 170.682783][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.709258][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 170.709277][ T29] audit: type=1326 audit(1734081968.675:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.751219][ T29] audit: type=1326 audit(1734081968.675:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.774620][ T29] audit: type=1326 audit(1734081968.675:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.798091][ T29] audit: type=1326 audit(1734081968.675:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.821657][ T29] audit: type=1326 audit(1734081968.675:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.845176][ T29] audit: type=1326 audit(1734081968.675:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.868634][ T29] audit: type=1326 audit(1734081968.675:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.892174][ T29] audit: type=1326 audit(1734081968.675:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.915904][ T29] audit: type=1326 audit(1734081968.675:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 170.939422][ T29] audit: type=1326 audit(1734081968.675:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bfc795d19 code=0x7ffc0000 [ 171.021253][ T8508] netlink: 'syz.1.1800': attribute type 3 has an invalid length. [ 171.056858][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.157061][ T8520] syzkaller0: entered promiscuous mode [ 171.162666][ T8520] syzkaller0: entered allmulticast mode [ 171.376471][ T8541] veth0_to_bond: left allmulticast mode [ 171.383070][ T8541] veth0_to_bond: left promiscuous mode [ 171.391128][ T8541] bridge0: port 1(veth0_to_bond) entered disabled state [ 171.750382][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.762822][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.054155][ T8552] loop4: detected capacity change from 0 to 128 [ 172.113186][ T8552] bio_check_eod: 24 callbacks suppressed [ 172.113209][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.113209][ T8552] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 172.144255][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.144255][ T8552] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 172.159495][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.159495][ T8552] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 172.172709][ T8552] buffer_io_error: 22 callbacks suppressed [ 172.172740][ T8552] Buffer I/O error on dev loop4, logical block 177, async page read [ 172.188258][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.188258][ T8552] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 172.201540][ T8552] Buffer I/O error on dev loop4, logical block 178, async page read [ 172.211228][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.211228][ T8552] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 172.215516][ T8554] syz.4.1816: attempt to access beyond end of device [ 172.215516][ T8554] loop4: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 172.224416][ T8552] Buffer I/O error on dev loop4, logical block 179, async page read [ 172.248133][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.248133][ T8552] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 172.261330][ T8552] Buffer I/O error on dev loop4, logical block 180, async page read [ 172.276660][ T8554] syz.4.1816: attempt to access beyond end of device [ 172.276660][ T8554] loop4: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 172.297737][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.297737][ T8552] loop4: rw=0, sector=181, nr_sectors = 1 limit=128 [ 172.310961][ T8552] Buffer I/O error on dev loop4, logical block 181, async page read [ 172.320061][ T8552] syz.4.1816: attempt to access beyond end of device [ 172.320061][ T8552] loop4: rw=0, sector=182, nr_sectors = 1 limit=128 [ 172.333295][ T8552] Buffer I/O error on dev loop4, logical block 182, async page read [ 172.342716][ T8552] Buffer I/O error on dev loop4, logical block 183, async page read [ 172.350890][ T8552] Buffer I/O error on dev loop4, logical block 184, async page read [ 172.360291][ T8552] Buffer I/O error on dev loop4, logical block 177, async page read [ 172.373878][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.382745][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.402917][ T8552] Buffer I/O error on dev loop4, logical block 178, async page read [ 172.461461][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 172.521526][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 172.769705][ T8570] 9pnet_fd: Insufficient options for proto=fd [ 172.830102][ T8570] hub 2-0:1.0: USB hub found [ 172.835920][ T8570] hub 2-0:1.0: 8 ports detected [ 172.908649][ T8582] veth0_to_bond: left allmulticast mode [ 172.914697][ T8582] veth0_to_bond: left promiscuous mode [ 172.921720][ T8582] bridge0: port 1(veth0_to_bond) entered disabled state [ 173.037794][ T8589] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.052352][ T8591] loop2: detected capacity change from 0 to 164 [ 173.064774][ T8589] vhci_hcd: invalid port number 23 [ 173.071248][ T8591] Unable to read rock-ridge attributes [ 173.080391][ T8591] Unable to read rock-ridge attributes [ 173.143773][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 173.415366][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.436314][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.565879][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 173.585174][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 174.490779][ T8625] loop2: detected capacity change from 0 to 2048 [ 174.513385][ T8627] loop4: detected capacity change from 0 to 4096 [ 174.538022][ T8627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.575761][ T8625] Alternate GPT is invalid, using primary GPT. [ 174.582090][ T8625] loop2: p2 p3 p7 [ 174.692460][ T3000] Alternate GPT is invalid, using primary GPT. [ 174.699124][ T3000] loop2: p2 p3 p7 [ 174.785907][ T8632] netlink: 'syz.4.1845': attribute type 3 has an invalid length. [ 174.793136][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1847'. [ 174.820050][ T3459] udevd[3459]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 174.846147][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1847'. [ 174.876635][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.966246][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.027250][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.000666][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 176.000682][ T29] audit: type=1326 audit(1734081973.965:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.068239][ T29] audit: type=1326 audit(1734081974.005:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.091733][ T29] audit: type=1326 audit(1734081974.005:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f983f295d53 code=0x7ffc0000 [ 176.115098][ T29] audit: type=1326 audit(1734081974.005:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f983f295d53 code=0x7ffc0000 [ 176.138361][ T29] audit: type=1326 audit(1734081974.005:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.141950][ T8671] loop0: detected capacity change from 0 to 4096 [ 176.161832][ T29] audit: type=1326 audit(1734081974.005:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.191936][ T29] audit: type=1326 audit(1734081974.005:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.215498][ T29] audit: type=1326 audit(1734081974.005:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.238939][ T29] audit: type=1326 audit(1734081974.005:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.262450][ T29] audit: type=1326 audit(1734081974.015:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983f295d19 code=0x7ffc0000 [ 176.310580][ T8671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.367588][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 176.424607][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 176.472189][ T8689] loop4: detected capacity change from 0 to 1024 [ 176.479011][ T8689] EXT4-fs: Ignoring removed nobh option [ 176.497801][ T8689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.516759][ T8691] loop3: detected capacity change from 0 to 128 [ 176.533567][ T8689] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.564639][ T8689] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.1867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 176.699235][ T8689] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1867: couldn't read orphan inode 11 (err -117) [ 176.725521][ T8671] netlink: 'syz.0.1859': attribute type 3 has an invalid length. [ 176.751966][ T8689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.778090][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.909669][ T8689] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1867: Invalid block bitmap block 0 in block_group 0 [ 176.909734][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 176.935860][ T8689] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1867: Failed to acquire dquot type 0 [ 177.055181][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 177.080329][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.105076][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 177.157782][ T8706] syzkaller0: entered promiscuous mode [ 177.163414][ T8706] syzkaller0: entered allmulticast mode [ 177.353119][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.398939][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.509437][ T8724] loop2: detected capacity change from 0 to 4096 [ 177.518044][ T8726] loop4: detected capacity change from 0 to 128 [ 177.555327][ T8724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.656117][ T8726] bio_check_eod: 60 callbacks suppressed [ 177.656137][ T8726] syz.4.1880: attempt to access beyond end of device [ 177.656137][ T8726] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 177.740188][ T8726] syz.4.1880: attempt to access beyond end of device [ 177.740188][ T8726] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 177.776262][ T8732] loop1: detected capacity change from 0 to 128 [ 177.797207][ T8729] syz.4.1880: attempt to access beyond end of device [ 177.797207][ T8729] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 177.810457][ T8729] buffer_io_error: 54 callbacks suppressed [ 177.810469][ T8729] Buffer I/O error on dev loop4, logical block 177, async page read [ 177.866440][ T8729] syz.4.1880: attempt to access beyond end of device [ 177.866440][ T8729] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 177.879702][ T8729] Buffer I/O error on dev loop4, logical block 178, async page read [ 177.887853][ T8724] netlink: 'syz.2.1879': attribute type 3 has an invalid length. [ 177.899864][ T8732] syz.1.1881: attempt to access beyond end of device [ 177.899864][ T8732] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 177.924859][ T8729] syz.4.1880: attempt to access beyond end of device [ 177.924859][ T8729] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 177.935453][ T8732] syz.1.1881: attempt to access beyond end of device [ 177.935453][ T8732] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 177.938119][ T8729] Buffer I/O error on dev loop4, logical block 179, async page read [ 177.953676][ T8732] syz.1.1881: attempt to access beyond end of device [ 177.953676][ T8732] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 177.972668][ T8732] Buffer I/O error on dev loop1, logical block 177, async page read [ 177.980733][ T8732] syz.1.1881: attempt to access beyond end of device [ 177.980733][ T8732] loop1: rw=0, sector=178, nr_sectors = 1 limit=128 [ 177.994036][ T8732] Buffer I/O error on dev loop1, logical block 178, async page read [ 178.002815][ T8729] syz.4.1880: attempt to access beyond end of device [ 178.002815][ T8729] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 178.003685][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.016082][ T8729] Buffer I/O error on dev loop4, logical block 180, async page read [ 178.017674][ T8732] Buffer I/O error on dev loop1, logical block 179, async page read [ 178.067254][ T8729] Buffer I/O error on dev loop4, logical block 181, async page read [ 178.082815][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 178.092545][ T8729] Buffer I/O error on dev loop4, logical block 182, async page read [ 178.092664][ T8732] Buffer I/O error on dev loop1, logical block 180, async page read [ 178.150796][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 179.262666][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 179.336743][ T8775] wg2: left promiscuous mode [ 179.341390][ T8775] wg2: left allmulticast mode [ 179.351556][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 179.372013][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.396323][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.424789][ T8779] wg2: entered promiscuous mode [ 179.429700][ T8779] wg2: entered allmulticast mode [ 179.572016][ T8787] loop2: detected capacity change from 0 to 128 [ 179.744032][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 179.783889][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 180.223694][ T8789] 9pnet_fd: Insufficient options for proto=fd [ 180.347534][ T8789] hub 2-0:1.0: USB hub found [ 180.372639][ T8789] hub 2-0:1.0: 8 ports detected [ 181.396482][ T8822] veth0_to_bond: left allmulticast mode [ 181.402143][ T8822] veth0_to_bond: left promiscuous mode [ 181.407914][ T8822] bridge0: port 1(veth0_to_bond) entered disabled state [ 181.710322][ T8810] ================================================================== [ 181.718450][ T8810] BUG: KCSAN: data-race in inode_update_timestamps / inode_update_timestamps [ 181.727239][ T8810] [ 181.729585][ T8810] write to 0xffff88811a789e04 of 4 bytes by task 8808 on cpu 0: [ 181.737220][ T8810] inode_update_timestamps+0x139/0x250 [ 181.742714][ T8810] file_update_time+0x219/0x2b0 [ 181.747596][ T8810] fault_dirty_shared_page+0xde/0x340 [ 181.753068][ T8810] handle_mm_fault+0x1389/0x2ac0 [ 181.758023][ T8810] exc_page_fault+0x3b9/0x650 [ 181.762719][ T8810] asm_exc_page_fault+0x26/0x30 [ 181.767587][ T8810] [ 181.769920][ T8810] read to 0xffff88811a789e04 of 4 bytes by task 8810 on cpu 1: [ 181.777466][ T8810] inode_update_timestamps+0x79/0x250 [ 181.782847][ T8810] file_update_time+0x219/0x2b0 [ 181.787705][ T8810] fault_dirty_shared_page+0xde/0x340 [ 181.793088][ T8810] handle_mm_fault+0x1389/0x2ac0 [ 181.798030][ T8810] exc_page_fault+0x296/0x650 [ 181.802727][ T8810] asm_exc_page_fault+0x26/0x30 [ 181.807612][ T8810] rep_movs_alternative+0x4a/0x70 [ 181.812647][ T8810] _copy_to_iter+0x141/0xd00 [ 181.817250][ T8810] get_random_bytes_user+0x112/0x260 [ 181.822549][ T8810] __x64_sys_getrandom+0xb5/0x190 [ 181.827598][ T8810] x64_sys_call+0x118a/0x2dc0 [ 181.832287][ T8810] do_syscall_64+0xc9/0x1c0 [ 181.836800][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.842715][ T8810] [ 181.845041][ T8810] value changed: 0x27a4a64d -> 0x28fa1a21 [ 181.850756][ T8810] [ 181.853076][ T8810] Reported by Kernel Concurrency Sanitizer on: [ 181.859238][ T8810] CPU: 1 UID: 0 PID: 8810 Comm: syz.3.1906 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 181.869927][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.879991][ T8810] ==================================================================