last executing test programs: 5m40.827793075s ago: executing program 4 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000080000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) socket$packet(0x11, 0x0, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) fsetxattr$security_selinux(r6, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:devicekit_var_run_t:s0\x00', 0x29, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000005000000000000000200000018d790181825548ca7e581d26aa9e2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 5m40.685812006s ago: executing program 4 (id=278): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x2000000000000000, 0x8}, 0x1000, 0x5dd8, 0x100000, 0x5, 0x0, 0xb, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xe8, 0x82, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x2, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0xed74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0xfffffffffffffffe) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r0, 0x141601) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105fe000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0xfd}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@mh={{0x28}, {"aa5c"}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) r7 = dup3(r2, r0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x86) write$cgroup_int(r8, &(0x7f00000001c0)=0x700, 0x12) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000000c0)={r10, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x3}}, 0x3, 0x8003}, 0x90) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x118, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='macvlan0\x00', 0x15, 0x5, 0xf}) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000040)={@private, @loopback}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1100048, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") 5m39.6103928s ago: executing program 4 (id=290): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, &(0x7f0000000240), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYBLOB="00042cbd7000fbdbdf25170000003c0003806600020004000000080002000f0000000800010001800000080002000e00000008000300ffffffff080001000200000043000300730a0000040005808000068071000300d9c7c65fe2adc7cdda53b94af2258d236ef24879efa87c4a5e4631d690a70e409d4534d7eac9b2c2fa7d978d48107d721a1b971ad5edfa34fa4a2f490058f8a4c57051021d4b9bdbcd1404b3b193fdf825d29a819ee9e6d2c2a2cf455d51c83a0e075c4f44a1d030d90da285f80000000800060000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffffeff000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000181100007ddcefe403009df705b0b2247ba2505cc85d5ccbf9f236ef2ddfd2d8440ca299991ade968b7065c0bfebe0a89d8fc80268ea2393ba1132e04f43b9dbd30310c3d498815726e3f489ff", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000580)={'nat\x00', 0x0, 0x0, 0x0, [0x7ff, 0x3, 0x7, 0x8fb8, 0xad, 0x5]}, &(0x7f0000000180)=0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x100, 0x7fffffff, 0x4, 0x4, 0x7, 0x6, 0x7, [0x4]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 5m38.441124246s ago: executing program 4 (id=293): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010101010000000000000000070000080c001980088549ac46484d1b"], 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000800) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c0d0, &(0x7f0000000680)={0xa, 0x2, 0xffffff01, @loopback, 0x80}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x4000000f60, 0xffffffff}, 0x1100, 0x5ddb, 0x3a65, 0x4, 0x0, 0xa, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r5, 0x0, &(0x7f0000000040), &(0x7f0000000080)) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)="d210490a23a487ecfc8fd5532946bb6498f02061d08799b7683384be434115ce60d6", 0x22}], 0x1, 0x9) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file2\x00', 0x0, 0x4008, r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000076ffffb8f0053908003950323034302e4c"], 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 5m37.297992581s ago: executing program 4 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="020000000000000000000068833bcf0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000dc0)="46055d56394a40e1773d6c6c85150522430a21be325c4cdc3d48f3ac782a8a533a33d3070100685acc1cf8ba7b8009e07ae4703526200cac5e8e4e597fd323d567c90d15", 0x44}], 0x1}, 0x10) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x7, 0x449, 0x7ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r7}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@typedef={0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x40}}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x2e]}}, &(0x7f0000000940)=""/99, 0x4f, 0x63, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6e93}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x1, 0x1, 0x9, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x8}, @generic={0x0, 0x5, 0x5, 0x800, 0x80000001}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0xa6, &(0x7f00000003c0)=""/166, 0x41000, 0x20, '\x00', r4, 0x25, r9, 0x8, &(0x7f00000009c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x0, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x5, 0x2, 0xc, 0x1}], 0x10, 0xffff, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r10 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000005c0)={r11, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r11, 0x0, 0xbe, 0x64, &(0x7f0000000b40)="e14b6492c429fce13b18110817a0cdf78199442bff7d11cf87188698183cb046c12a223145ecaf403cb615f46d3ef5ab482de732ee25f727106fa47a00b94cefb0761237c43a4b4c593cf6d52d452bd565040097ea4ad61ddcac03b1b51bac68443e8cffa1521b17f3e7b1646c0edde314b98f499e94c618d85b4937ccd0f6490de3695d8970a69c31055744356dbf0af34174b183ee15ed0e5cad0dc40d24f8afc2e577632387eca4f205c02a796c95463a5f3ceca26c9b78f1e21db3c0", &(0x7f0000000c00)=""/100, 0x7fffffff, 0x0, 0x10, 0x55, &(0x7f0000000c80)="c0ce6d181aa7a1b1641cf676c1c3c23d", &(0x7f0000000cc0)="aa97e02f5c461d76946610d3e4ea08481f4a17e08574acff4d84f8ff6a50801fcc2fe105aef76c4a132d37bdb37291c30747bbd725c6dcc5ec20c6f3b6a9a358d38f56fb185dacfbb7a4ba7a01cbb5cc44f950c029", 0x0, 0x0, 0xffffffff}, 0x50) 5m36.048215267s ago: executing program 4 (id=308): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000880)={0xa, 0x4e24, 0x7, @empty, 0x7ff}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000940)={0x11, 0x8100, r6, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$nl_route(r4, 0x0, 0x20000004) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="303d5adadd39f8d3b37734ca0a67", @ANYRES16=r9, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmmsg(r8, 0x0, 0x0, 0x200000000000000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 5m36.036580617s ago: executing program 32 (id=308): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000880)={0xa, 0x4e24, 0x7, @empty, 0x7ff}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000940)={0x11, 0x8100, r6, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$nl_route(r4, 0x0, 0x20000004) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="303d5adadd39f8d3b37734ca0a67", @ANYRES16=r9, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmmsg(r8, 0x0, 0x0, 0x200000000000000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 3.362725006s ago: executing program 0 (id=4528): keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) read(r3, &(0x7f0000000300)=""/167, 0xa7) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="4663885206ea", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES64, @ANYBLOB="b61c5c3e1c84c0095bbfe57efc2e0be69340dbf55f47bc6d678f94fe0a4c2005cce3dae5ba277b8ac668367f19a480c4d95cadf1376ead7db2875b8a0931b208961c81340b2ee66b2ab4239ffb2387fb5b3812ed97fd65aaf212f59677e819e92aa549af23416c498c1acc57b6765e0a30a3e3aca39d1d25d4b5fa832ec9415e01b55d3276df6b1f446c463e559af824b9b2ac359d5956425e88764e8578bb3112d1b3101c0246128387d0378c7e0585"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f00000005c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000280)={0x60002003}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r9}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b0600050000000120000000000000"], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) 3.160181558s ago: executing program 0 (id=4530): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r3 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r3, 0x2007ffb) sendfile(0xffffffffffffffff, r3, 0x0, 0x1000000201005) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 2.923887992s ago: executing program 0 (id=4531): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x100, 0x3d0, 0xfeffffff, 0x228, 0x2f8, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2000800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) 2.807176153s ago: executing program 0 (id=4532): socket$qrtr(0x2a, 0x2, 0x0) pause() r0 = socket$qrtr(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200007d33763ccee5c8eadb8f7b01bcae2000010000000000000004000000000000001000000000484f2f5e35b0a5decb3300000020000000000000006dd27f7a34ffe9e87442db0c89e6b0f7842ee2bb6b986a2c6a210b68a95f6140a2415fcc20140f851a3db2dbc87a782723a1ffaebfd183b95ef822122fc120b8f23ea48b9a3246dced4475606319f345d72d74c1b55adb4e2609423382a6b0c98d6b79263756f2397bd74a52a6a0d384458502fcc144133c8c5095101efc5055718e7645acdc"], 0x24, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 2.424934598s ago: executing program 2 (id=4534): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$usbfs(&(0x7f0000002000), 0xb947, 0x508000) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000500)=0x1e) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x5a56, r2, &(0x7f0000000300)=0x4, 0x7fffffffffffffff, 0x0) getuid() r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.193347071s ago: executing program 2 (id=4538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000027f03000000000000180900000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x4c}}, 0x4000) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000004780)=ANY=[], 0x0, 0x1200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r6) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) 2.025804434s ago: executing program 2 (id=4544): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r8, 0x2007ffb) sendfile(r7, r8, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f00000001c0)) write(r2, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e8, &(0x7f0000000800)={[{0x65, 0x4e00, "d1437030173b1d1f77377369b0d201fa67a930695fd14792312de3255414a079f6b3dc8ee46504ec6f878ffd11799c223be6d7a9961f2425b619e275fe4e57643f278309f5f983f62d1f2b519409cf13214b670efb0197beb7b18ed5fa5d8f9711bea81688"}, {0x52, 0x4e00, "f4d7a1671db0ce12b637ab0eb0e5a4a19c9f5b58c31820ad03d6cfc09f737c8402ab4a9e3ccab2770a736e3e56d6e46337b183e844bb65e086c3c491e1df86b492b66bc3b3ded45b6fcd08d9fd6c64ae418f"}, {0x50, 0x4e00, "142633baa0fb48c5c009e0995c78cdca216098b841b2eab3ccb175da56e814809608e6d51ea0060feee3d53a4ebb549ef1d7d129d5141886612af0f38bf70a01b50ca507332b7bafe24aa7a575903508"}, {0xc9, 0x4e00, "b01284a070c50fb8cc4a2c22ff0c97097a5a703c5b18bcefd66a54e68b01d8abd3b4e2a224b96d9bb23b536d06e293f0f235e701d8cda9ada3628d1f5fafef0a45dc6c105d1075992925a6c7b0f1d6abb9857fef037d21f1f2f80ae14dda7e0dd6c91c791fa39949484674e761adde93b9a0afb4e66619c3cffd5ce5a8d7f9dbd0b723ecad652d6b0c9fe77eee9e440bb3d8b5e7832375a291a7168cec7cf0ae56e261ee541f7d9045ccf411d8f7019c613b7b3d25fd9ba1539dac32ee029c5390161193ef6957c8bc"}]}) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 1.927594795s ago: executing program 0 (id=4546): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f00000001c0)) write(r1, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e8, &(0x7f0000000800)={[{0x65, 0x4e00, "d1437030173b1d1f77377369b0d201fa67a930695fd14792312de3255414a079f6b3dc8ee46504ec6f878ffd11799c223be6d7a9961f2425b619e275fe4e57643f278309f5f983f62d1f2b519409cf13214b670efb0197beb7b18ed5fa5d8f9711bea81688"}, {0x52, 0x4e00, "f4d7a1671db0ce12b637ab0eb0e5a4a19c9f5b58c31820ad03d6cfc09f737c8402ab4a9e3ccab2770a736e3e56d6e46337b183e844bb65e086c3c491e1df86b492b66bc3b3ded45b6fcd08d9fd6c64ae418f"}, {0x50, 0x4e00, "142633baa0fb48c5c009e0995c78cdca216098b841b2eab3ccb175da56e814809608e6d51ea0060feee3d53a4ebb549ef1d7d129d5141886612af0f38bf70a01b50ca507332b7bafe24aa7a575903508"}, {0xc9, 0x4e00, "b01284a070c50fb8cc4a2c22ff0c97097a5a703c5b18bcefd66a54e68b01d8abd3b4e2a224b96d9bb23b536d06e293f0f235e701d8cda9ada3628d1f5fafef0a45dc6c105d1075992925a6c7b0f1d6abb9857fef037d21f1f2f80ae14dda7e0dd6c91c791fa39949484674e761adde93b9a0afb4e66619c3cffd5ce5a8d7f9dbd0b723ecad652d6b0c9fe77eee9e440bb3d8b5e7832375a291a7168cec7cf0ae56e261ee541f7d9045ccf411d8f7019c613b7b3d25fd9ba1539dac32ee029c5390161193ef6957c8bc"}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 1.792248716s ago: executing program 3 (id=4548): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$usbfs(&(0x7f0000002000), 0xb947, 0x508000) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000500)=0x1e) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x5a56, r2, &(0x7f0000000300)=0x4, 0x7fffffffffffffff, 0x0) getuid() r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.590624419s ago: executing program 3 (id=4550): lseek(0xffffffffffffffff, 0x2, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x0, 0xfffff034}, {0x80000006, 0xfd, 0x0, 0x4}]}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) getdents64(0xffffffffffffffff, 0x0, 0x22) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000008000002"}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1.317288113s ago: executing program 3 (id=4554): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r8, 0x2007ffb) sendfile(r7, r8, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f00000001c0)) write(r2, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e8, &(0x7f0000000800)={[{0x65, 0x4e00, "d1437030173b1d1f77377369b0d201fa67a930695fd14792312de3255414a079f6b3dc8ee46504ec6f878ffd11799c223be6d7a9961f2425b619e275fe4e57643f278309f5f983f62d1f2b519409cf13214b670efb0197beb7b18ed5fa5d8f9711bea81688"}, {0x52, 0x4e00, "f4d7a1671db0ce12b637ab0eb0e5a4a19c9f5b58c31820ad03d6cfc09f737c8402ab4a9e3ccab2770a736e3e56d6e46337b183e844bb65e086c3c491e1df86b492b66bc3b3ded45b6fcd08d9fd6c64ae418f"}, {0x50, 0x4e00, "142633baa0fb48c5c009e0995c78cdca216098b841b2eab3ccb175da56e814809608e6d51ea0060feee3d53a4ebb549ef1d7d129d5141886612af0f38bf70a01b50ca507332b7bafe24aa7a575903508"}, {0xc9, 0x4e00, "b01284a070c50fb8cc4a2c22ff0c97097a5a703c5b18bcefd66a54e68b01d8abd3b4e2a224b96d9bb23b536d06e293f0f235e701d8cda9ada3628d1f5fafef0a45dc6c105d1075992925a6c7b0f1d6abb9857fef037d21f1f2f80ae14dda7e0dd6c91c791fa39949484674e761adde93b9a0afb4e66619c3cffd5ce5a8d7f9dbd0b723ecad652d6b0c9fe77eee9e440bb3d8b5e7832375a291a7168cec7cf0ae56e261ee541f7d9045ccf411d8f7019c613b7b3d25fd9ba1539dac32ee029c5390161193ef6957c8bc"}]}) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 1.182368675s ago: executing program 1 (id=4556): keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) read(r3, &(0x7f0000000300)=""/167, 0xa7) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="4663885206ea", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES64, @ANYBLOB="b61c5c3e1c84c0095bbfe57efc2e0be69340dbf55f47bc6d678f94fe0a4c2005cce3dae5ba277b8ac668367f19a480c4d95cadf1376ead7db2875b8a0931b208961c81340b2ee66b2ab4239ffb2387fb5b3812ed97fd65aaf212f59677e819e92aa549af23416c498c1acc57b6765e0a30a3e3aca39d1d25d4b5fa832ec9415e01b55d3276df6b1f446c463e559af824b9b2ac359d5956425e88764e8578bb3112d1b3101c0246128387d0378c7e0585"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f00000005c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000280)={0x60002003}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r9}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b0600050000000120000000000000003030"], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) 1.181462805s ago: executing program 5 (id=4557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000027f03000000000000180900000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x4c}}, 0x4000) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000004780)=ANY=[], 0x0, 0x1200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r6) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) 1.076266206s ago: executing program 1 (id=4558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000091) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x10, 0x8000, 0xb14, 0x0, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x4, 0x0, &(0x7f0000000000)="259a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004", @ANYRES32], 0x1c}}, 0x804) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010003) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) r5 = syz_open_dev$loop(&(0x7f00000008c0), 0x7, 0x481) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000900)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.062904606s ago: executing program 5 (id=4559): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x100, 0x3d0, 0xfeffffff, 0x228, 0x2f8, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2000800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.024013407s ago: executing program 2 (id=4560): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8660, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2490, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaee}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xb282, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20) 997.179167ms ago: executing program 1 (id=4561): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d516bdf851", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) read$hiddev(r6, &(0x7f0000000280)=""/26, 0x1a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sync() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8020) 995.634947ms ago: executing program 0 (id=4562): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 'vlan1\x00', 'veth1_macvtap\x00', {0x2b77a4ea44d41a73}, {}, 0x73, 0x2, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x5, 0x3, 0x1, 0x1, 0x6], 0x2, 0x3}, {0xffffffffffffffff, [0x1, 0x3, 0x0, 0x9, 0x2], 0x3, 0x5}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@empty, @multicast1, 0xffffffff, 0xff, 'tunl0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x89, 0x1, 0x20}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x3, 0x4, 0x0, 0x4, 0x2, 0x5], 0x1, 0xb}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x400}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) splice(r4, 0x0, r5, 0x0, 0x2, 0xc) vmsplice(r5, 0x0, 0x0, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2064cc6, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2]) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, 0x0, 0x6000) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x5, 0x102000000, 0x2000000000100004, 0x0, 0x2000000000003c14, 0xffffffffffffffff, 0x75, 0x300000000000, 0x3}) 941.275548ms ago: executing program 1 (id=4563): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f00000001c0)) write(r2, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 778.31342ms ago: executing program 2 (id=4564): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$usbfs(&(0x7f0000002000), 0xb947, 0x508000) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000500)=0x1e) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x5a56, r2, &(0x7f0000000300)=0x4, 0x7fffffffffffffff, 0x0) getuid() r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 759.16813ms ago: executing program 5 (id=4565): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) 676.441101ms ago: executing program 2 (id=4566): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x90) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f00000001c0)) write(r1, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e8, &(0x7f0000000800)={[{0x65, 0x4e00, "d1437030173b1d1f77377369b0d201fa67a930695fd14792312de3255414a079f6b3dc8ee46504ec6f878ffd11799c223be6d7a9961f2425b619e275fe4e57643f278309f5f983f62d1f2b519409cf13214b670efb0197beb7b18ed5fa5d8f9711bea81688"}, {0x52, 0x4e00, "f4d7a1671db0ce12b637ab0eb0e5a4a19c9f5b58c31820ad03d6cfc09f737c8402ab4a9e3ccab2770a736e3e56d6e46337b183e844bb65e086c3c491e1df86b492b66bc3b3ded45b6fcd08d9fd6c64ae418f"}, {0x50, 0x4e00, "142633baa0fb48c5c009e0995c78cdca216098b841b2eab3ccb175da56e814809608e6d51ea0060feee3d53a4ebb549ef1d7d129d5141886612af0f38bf70a01b50ca507332b7bafe24aa7a575903508"}, {0xc9, 0x4e00, "b01284a070c50fb8cc4a2c22ff0c97097a5a703c5b18bcefd66a54e68b01d8abd3b4e2a224b96d9bb23b536d06e293f0f235e701d8cda9ada3628d1f5fafef0a45dc6c105d1075992925a6c7b0f1d6abb9857fef037d21f1f2f80ae14dda7e0dd6c91c791fa39949484674e761adde93b9a0afb4e66619c3cffd5ce5a8d7f9dbd0b723ecad652d6b0c9fe77eee9e440bb3d8b5e7832375a291a7168cec7cf0ae56e261ee541f7d9045ccf411d8f7019c613b7b3d25fd9ba1539dac32ee029c5390161193ef6957c8bc"}]}) fallocate(r0, 0x0, 0x0, 0x1001f0) 486.815944ms ago: executing program 5 (id=4567): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xbf2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000001180)=""/207, 0xcf, 0x0, &(0x7f0000001280)=""/190, 0xbe}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r7) 430.308745ms ago: executing program 3 (id=4568): keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) read(r3, &(0x7f0000000300)=""/167, 0xa7) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="4663885206ea", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES64, @ANYBLOB="b61c5c3e1c84c0095bbfe57efc2e0be69340dbf55f47bc6d678f94fe0a4c2005cce3dae5ba277b8ac668367f19a480c4d95cadf1376ead7db2875b8a0931b208961c81340b2ee66b2ab4239ffb2387fb5b3812ed97fd65aaf212f59677e819e92aa549af23416c498c1acc57b6765e0a30a3e3aca39d1d25d4b5fa832ec9415e01b55d3276df6b1f446c463e559af824b9b2ac359d5956425e88764e8578bb3112d1b3101c0246128387d0378c7e0585"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f00000005c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pvmWnv9Iu2t3J/v2To+ZjLObfTp/fM6Tl3AqiswfSfWsT+iJhOIvqT+cW6zsgqBxee9+DPj86mjyTq9dd+TyLJyvLnJ9nXvuzgnoj48Yck9nUsb3dm7trF8ampyatZfnj20vTwzNy1wxcujZ+fPD95efSF0RPHjx0/MXJkQ+d1vaDs9M133+//ZOzNb776Kxn59pexJE7Gy9kTm89jswzGYON7kiyv6jux2Y2VpCP7OWl+iZPOomd2bV+nWLP89UtfnSfi1p486lP98fErpXYO2FL1JKIOVFQi/qGi8nFA/t5+6fvgWimjEmA73D+1MAGwPP47F+YGo6cxN7D7QRLN0zpJRGxsZq7Vnoi4e2fs5rk7Yzdji+bhgGLzNyLiyaL4TxrxPxA9MdCI/1pL/KfjgjPZ17T81Q22v3SqWPzD9lmI/54V4z/axP9bTfH/9gbbH3yYfKe3Jf57N3pKAAAAAAAAUFm3T0XE80V//68trv+JgvU/fRFxchPaH1ySX/73/9q9TWgGKHD/VMRLhet/a/nq34GOLPWfxnqAruTchanJIxHx34g4FF270vzICm0c/nTfl+3qBrP1f/kjbf9uthYw68e9zl2tx0yMz44/6nkDEfdvRDxVuP43Wbz+JwXX//T3wfQa29j37K0z7epWj39gq9S/jjj48Prf3Rz/uWTl+3MMN8YDw/moYLmnP/zsu3btbzT+C28xAaxLev3fXTj+X4z/gaT5fj0z62/j6FxnvV1dHv/9WX6t4//u5PXGLWe6s7IPxmdnr45EdCenO9LSlvLR9fcZHkd5POTxksb/oWdWnv8rGv/3RsT8kv87+aN1T3Hu/3/3/dquP8b/UJ40/ifWdf1ff2L01sD37dpf2/zfsca1/lBWYv4PFnyRh2l3a3lzFA4sJDoLqjYwmgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAahGxJ5La0GK6VhsaiuiLiP/F7o64MjP73Lkr712eSOsan/9fyz/pt38hn+Sf/z/QlB9dkj8aEXsj4vOO3kZ+6OyVqYmyTx4AAAAAAAAAAAAAAAAAAAB2iL42+/9Tv3WU3Ttgy3WW3QGgNAXx/1MZ/QC2n+s/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/gEAAAAA4LGy98Dtn5OImH+xt/FIdWd1XaX2DNhqtbI7AJTGLX6guiz9geryHh9IVqnvaXvQakeuZPrsIxwMAAAAAAAAAAAAAJVzcL/9/1BV9v9Dddn/D9WV7/8/UHI/gO3nPT4Qq+zkL9z/v+pRAAAAAAAAAAAAAMBmmpm7dnF8amryqsQbO6Mb25mo1+vX05+CndKff3kiXwq/U/qzJJHv9VvbUeX9TgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr9EwAA///ByB+M") syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000280)={0x60002003}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r9}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b0600050000000120000000000000003030612e"], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) 350.948806ms ago: executing program 3 (id=4569): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x8, &(0x7f0000000240)) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) shmdt(0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) write$selinux_user(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="07007374656d5f753a6f626a6563745f72e140a9f57999ea8a3a63726f6e7461625f657865b8d4a85673302073"], 0x2d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 342.917695ms ago: executing program 5 (id=4570): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$usbfs(&(0x7f0000002000), 0xb947, 0x508000) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000500)=0x1e) getuid() r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 304.297066ms ago: executing program 3 (id=4571): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r8, 0x2007ffb) sendfile(r7, r8, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e8, &(0x7f0000000800)={[{0x65, 0x4e00, "d1437030173b1d1f77377369b0d201fa67a930695fd14792312de3255414a079f6b3dc8ee46504ec6f878ffd11799c223be6d7a9961f2425b619e275fe4e57643f278309f5f983f62d1f2b519409cf13214b670efb0197beb7b18ed5fa5d8f9711bea81688"}, {0x52, 0x4e00, "f4d7a1671db0ce12b637ab0eb0e5a4a19c9f5b58c31820ad03d6cfc09f737c8402ab4a9e3ccab2770a736e3e56d6e46337b183e844bb65e086c3c491e1df86b492b66bc3b3ded45b6fcd08d9fd6c64ae418f"}, {0x50, 0x4e00, "142633baa0fb48c5c009e0995c78cdca216098b841b2eab3ccb175da56e814809608e6d51ea0060feee3d53a4ebb549ef1d7d129d5141886612af0f38bf70a01b50ca507332b7bafe24aa7a575903508"}, {0xc9, 0x4e00, "b01284a070c50fb8cc4a2c22ff0c97097a5a703c5b18bcefd66a54e68b01d8abd3b4e2a224b96d9bb23b536d06e293f0f235e701d8cda9ada3628d1f5fafef0a45dc6c105d1075992925a6c7b0f1d6abb9857fef037d21f1f2f80ae14dda7e0dd6c91c791fa39949484674e761adde93b9a0afb4e66619c3cffd5ce5a8d7f9dbd0b723ecad652d6b0c9fe77eee9e440bb3d8b5e7832375a291a7168cec7cf0ae56e261ee541f7d9045ccf411d8f7019c613b7b3d25fd9ba1539dac32ee029c5390161193ef6957c8bc"}]}) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 148.231868ms ago: executing program 1 (id=4572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000091) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x10, 0x8000, 0xb14, 0x0, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x4, 0x0, &(0x7f0000000000)="259a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004", @ANYRES32], 0x1c}}, 0x804) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010003) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) r5 = syz_open_dev$loop(&(0x7f00000008c0), 0x7, 0x481) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000900)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 147.421068ms ago: executing program 5 (id=4573): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x2}], 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f00000001c0)) write(r1, &(0x7f0000004200)='t', 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e8, &(0x7f0000000800)={[{0x65, 0x4e00, "d1437030173b1d1f77377369b0d201fa67a930695fd14792312de3255414a079f6b3dc8ee46504ec6f878ffd11799c223be6d7a9961f2425b619e275fe4e57643f278309f5f983f62d1f2b519409cf13214b670efb0197beb7b18ed5fa5d8f9711bea81688"}, {0x52, 0x4e00, "f4d7a1671db0ce12b637ab0eb0e5a4a19c9f5b58c31820ad03d6cfc09f737c8402ab4a9e3ccab2770a736e3e56d6e46337b183e844bb65e086c3c491e1df86b492b66bc3b3ded45b6fcd08d9fd6c64ae418f"}, {0x50, 0x4e00, "142633baa0fb48c5c009e0995c78cdca216098b841b2eab3ccb175da56e814809608e6d51ea0060feee3d53a4ebb549ef1d7d129d5141886612af0f38bf70a01b50ca507332b7bafe24aa7a575903508"}, {0xc9, 0x4e00, "b01284a070c50fb8cc4a2c22ff0c97097a5a703c5b18bcefd66a54e68b01d8abd3b4e2a224b96d9bb23b536d06e293f0f235e701d8cda9ada3628d1f5fafef0a45dc6c105d1075992925a6c7b0f1d6abb9857fef037d21f1f2f80ae14dda7e0dd6c91c791fa39949484674e761adde93b9a0afb4e66619c3cffd5ce5a8d7f9dbd0b723ecad652d6b0c9fe77eee9e440bb3d8b5e7832375a291a7168cec7cf0ae56e261ee541f7d9045ccf411d8f7019c613b7b3d25fd9ba1539dac32ee029c5390161193ef6957c8bc"}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=4574): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d516bdf851", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) read$hiddev(r6, &(0x7f0000000280)=""/26, 0x1a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sync() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8020) kernel console output (not intermixed with test programs): with errno=-22 [ 359.517139][T17208] loop1: detected capacity change from 0 to 2048 [ 359.524863][T17213] netlink: 'syz.5.3912': attribute type 10 has an invalid length. [ 359.551828][T17213] bridge0: port 3(team0) entered disabled state [ 359.558239][T17215] loop3: detected capacity change from 0 to 2048 [ 359.563595][T17213] team0: left allmulticast mode [ 359.569506][T17213] team_slave_0: left allmulticast mode [ 359.569686][T17217] loop2: detected capacity change from 0 to 2048 [ 359.576751][T17213] team_slave_1: left allmulticast mode [ 359.588298][T17213] team0: left promiscuous mode [ 359.593795][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 359.593889][ T29] audit: type=1326 audit(1746100493.735:23087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.594173][ T29] audit: type=1326 audit(1746100493.735:23088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.594316][ T29] audit: type=1326 audit(1746100493.735:23089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.601665][T17213] team_slave_0: left promiscuous mode [ 359.650083][ T29] audit: type=1326 audit(1746100493.775:23090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650114][ T29] audit: type=1326 audit(1746100493.775:23091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650142][ T29] audit: type=1326 audit(1746100493.775:23092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650164][ T29] audit: type=1326 audit(1746100493.775:23093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650240][ T29] audit: type=1326 audit(1746100493.775:23094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650266][ T29] audit: type=1326 audit(1746100493.775:23095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650294][ T29] audit: type=1326 audit(1746100493.775:23096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 359.650559][T17218] netlink: 'syz.5.3912': attribute type 10 has an invalid length. [ 359.863462][T17213] team_slave_1: left promiscuous mode [ 359.869164][T17213] bridge0: port 3(team0) entered disabled state [ 359.877668][T17218] team0: entered promiscuous mode [ 359.883885][T17218] team_slave_0: entered promiscuous mode [ 359.889640][T17218] team_slave_1: entered promiscuous mode [ 359.899218][T17208] Alternate GPT is invalid, using primary GPT. [ 359.906856][T17208] loop1: p2 p3 p7 [ 359.923470][T17218] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.930673][T17218] bridge0: port 3(team0) entered blocking state [ 359.936953][T17218] bridge0: port 3(team0) entered disabled state [ 359.956626][T17218] team0: entered allmulticast mode [ 359.962964][T17218] team_slave_0: entered allmulticast mode [ 359.968736][T17218] team_slave_1: entered allmulticast mode [ 359.987492][T17218] bridge0: port 3(team0) entered blocking state [ 359.993865][T17218] bridge0: port 3(team0) entered forwarding state [ 360.007018][T17228] Cannot find set identified by id 0 to match [ 360.089257][T17236] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 360.104788][T17236] bond0: (slave sit0): Error -95 calling set_mac_address [ 360.135112][T17235] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 360.157432][T17235] bond0: (slave sit0): Error -95 calling set_mac_address [ 360.210412][T17245] loop3: detected capacity change from 0 to 2048 [ 360.268570][T17248] netlink: 'syz.5.3920': attribute type 3 has an invalid length. [ 360.278228][T17248] siw: device registration error -23 [ 360.489661][T17260] loop5: detected capacity change from 0 to 2048 [ 360.582227][T17268] loop1: detected capacity change from 0 to 2048 [ 360.591540][T17262] netlink: 'syz.0.3925': attribute type 3 has an invalid length. [ 360.769675][T17282] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 360.781508][T17282] bond0: (slave sit0): Error -95 calling set_mac_address [ 360.813795][T17284] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 360.825339][T17284] bond0: (slave sit0): Error -95 calling set_mac_address [ 360.848855][T17287] Cannot find set identified by id 0 to match [ 360.858988][T17289] loop0: detected capacity change from 0 to 2048 [ 361.227311][ T3385] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 361.234803][T17305] loop3: detected capacity change from 0 to 1024 [ 361.235146][T17305] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 361.253919][ T3385] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.304408][T17309] Cannot find set identified by id 0 to match [ 361.335135][T17315] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 361.346724][T17315] bond0: (slave sit0): Error -95 calling set_mac_address [ 361.364382][T17318] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 361.376633][T17318] bond0: (slave sit0): Error -95 calling set_mac_address [ 361.419522][T17325] Cannot find set identified by id 0 to match [ 361.431404][T17327] loop5: detected capacity change from 0 to 2048 [ 361.462524][T17332] loop3: detected capacity change from 0 to 2048 [ 361.514743][T17329] siw: device registration error -23 [ 361.574954][T17342] loop2: detected capacity change from 0 to 2048 [ 361.647372][T17348] loop1: detected capacity change from 0 to 2048 [ 361.889629][T17356] loop0: detected capacity change from 0 to 1024 [ 361.898034][T17356] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 361.938478][T17362] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 361.944727][T17358] netlink: 'syz.2.3953': attribute type 3 has an invalid length. [ 361.951616][T17362] bond0: (slave sit0): Error -95 calling set_mac_address [ 361.960630][T17358] siw: device registration error -23 [ 362.003862][T17364] loop2: detected capacity change from 0 to 2048 [ 362.012684][T17366] loop0: detected capacity change from 0 to 2048 [ 362.388025][T17374] netlink: 'syz.3.3957': attribute type 10 has an invalid length. [ 362.397301][T17374] team0: left promiscuous mode [ 362.407674][T17374] netlink: 'syz.3.3957': attribute type 10 has an invalid length. [ 362.416958][T17374] __nla_validate_parse: 16 callbacks suppressed [ 362.416975][T17374] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3957'. [ 362.434587][T17374] team0: entered promiscuous mode [ 362.441315][T17374] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.468041][T17379] Cannot find set identified by id 0 to match [ 362.658484][T17389] Cannot find set identified by id 0 to match [ 362.682483][T17390] siw: device registration error -23 [ 362.786978][T17401] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 362.799137][T17401] bond0: (slave sit0): Error -95 calling set_mac_address [ 362.821991][T17399] loop5: detected capacity change from 0 to 512 [ 362.854038][T17408] loop2: detected capacity change from 0 to 1024 [ 362.862360][T17399] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3964: iget: bad extended attribute block 1 [ 362.871777][T17408] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 362.876714][T17399] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3964: couldn't read orphan inode 15 (err -117) [ 362.903673][T17410] loop3: detected capacity change from 0 to 2048 [ 362.909420][T17414] syz!: rxe_newlink: already configured on team_slave_0 [ 362.924716][T17413] loop0: detected capacity change from 0 to 2048 [ 362.948596][ T23] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 362.965345][T17422] Cannot find set identified by id 0 to match [ 362.978216][ T23] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.987972][T17418] loop2: detected capacity change from 0 to 1024 [ 362.988194][T17418] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 363.148738][T17432] netlink: 'syz.1.3975': attribute type 10 has an invalid length. [ 363.190109][T17432] team0: left promiscuous mode [ 363.195028][T17432] team_slave_0: left promiscuous mode [ 363.201810][T17432] team_slave_1: left promiscuous mode [ 363.216009][T17434] netlink: 'syz.1.3975': attribute type 10 has an invalid length. [ 363.224972][T17434] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3975'. [ 363.258855][T17434] team0: entered promiscuous mode [ 363.265164][T17434] team_slave_0: entered promiscuous mode [ 363.272255][T17434] team_slave_1: entered promiscuous mode [ 363.285118][T17430] siw: device registration error -23 [ 363.321868][T17434] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.379394][T17440] loop1: detected capacity change from 0 to 2048 [ 363.389594][T17441] Cannot find set identified by id 0 to match [ 363.613099][T17451] loop5: detected capacity change from 0 to 2048 [ 363.831877][T17460] loop2: detected capacity change from 0 to 1024 [ 363.838712][T17460] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 363.867232][T17462] Cannot find set identified by id 0 to match [ 363.904717][ T23] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 363.912217][T17465] loop3: detected capacity change from 0 to 1024 [ 363.918997][T17465] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 363.929009][ T23] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 363.975045][T17470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3986'. [ 363.994994][T17470] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 364.006759][T17470] bond0: (slave sit0): Error -95 calling set_mac_address [ 364.072044][T17479] hub 9-0:1.0: USB hub found [ 364.076826][T17479] hub 9-0:1.0: 8 ports detected [ 364.117404][T17479] loop2: detected capacity change from 0 to 512 [ 364.125325][T17479] EXT4-fs: Ignoring removed nobh option [ 364.146963][T17479] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.3989: corrupted inode contents [ 364.152009][T17477] netlink: 'syz.3.3988': attribute type 3 has an invalid length. [ 364.172683][T17479] EXT4-fs (loop2): Remounting filesystem read-only [ 364.172814][T17479] EXT4-fs (loop2): 1 truncate cleaned up [ 364.173326][T17479] ext4 filesystem being mounted at /822/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.202967][T17490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3991'. [ 364.212065][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.222624][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.233508][ T1088] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 364.263045][T17490] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 364.275297][T17490] bond0: (slave sit0): Error -95 calling set_mac_address [ 364.299265][T17495] loop2: detected capacity change from 0 to 1024 [ 364.307529][T17495] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 364.318674][T17497] loop1: detected capacity change from 0 to 2048 [ 364.377601][T17505] Cannot find set identified by id 0 to match [ 364.378176][ T23] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 364.398370][T17503] loop5: detected capacity change from 0 to 1024 [ 364.406446][T17503] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 364.416017][ T23] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.473420][T17509] netlink: 'syz.3.3998': attribute type 3 has an invalid length. [ 364.602536][T17528] loop1: detected capacity change from 0 to 2048 [ 364.611513][T17514] netlink: 'syz.0.3999': attribute type 3 has an invalid length. [ 364.633739][T17531] hub 9-0:1.0: USB hub found [ 364.638508][T17531] hub 9-0:1.0: 8 ports detected [ 364.659065][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 364.659081][ T29] audit: type=1326 audit(1746100498.795:23186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.676272][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'. [ 364.691109][ T29] audit: type=1326 audit(1746100498.795:23187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.691141][ T29] audit: type=1326 audit(1746100498.795:23188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.691168][ T29] audit: type=1326 audit(1746100498.795:23189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.691213][ T29] audit: type=1326 audit(1746100498.795:23190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.706914][T17521] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 364.724931][ T29] audit: type=1326 audit(1746100498.795:23191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.724967][ T29] audit: type=1326 audit(1746100498.795:23192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.725009][ T29] audit: type=1326 audit(1746100498.795:23193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.725054][ T29] audit: type=1326 audit(1746100498.795:23194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.879556][T17540] loop0: detected capacity change from 0 to 2048 [ 364.922495][T17544] loop2: detected capacity change from 0 to 1024 [ 364.929369][T17544] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 364.938288][ T29] audit: type=1326 audit(1746100498.815:23195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17534 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 364.964282][ T36] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 364.971954][T17541] loop5: detected capacity change from 0 to 512 [ 364.972245][T17541] EXT4-fs: Ignoring removed nobh option [ 365.012791][T17540] Alternate GPT is invalid, using primary GPT. [ 365.019257][T17540] loop0: p2 p3 p7 [ 365.026060][T17548] loop3: detected capacity change from 0 to 1024 [ 365.031870][T17541] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4004: corrupted inode contents [ 365.033877][ T36] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.045759][T17548] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.059471][T17541] EXT4-fs (loop5): Remounting filesystem read-only [ 365.075486][T17541] EXT4-fs (loop5): 1 truncate cleaned up [ 365.082702][T17541] ext4 filesystem being mounted at /696/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.102940][ T1088] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 365.114666][ T1088] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 365.135256][ T1088] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 365.156266][T17552] loop2: detected capacity change from 0 to 2048 [ 365.174567][ T23] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 365.184002][ T23] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.185924][T17559] Cannot find set identified by id 0 to match [ 365.202373][T17556] loop5: detected capacity change from 0 to 1024 [ 365.216298][T17556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.253932][T17563] loop5: detected capacity change from 0 to 1024 [ 365.262006][T17563] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.316216][T17567] loop3: detected capacity change from 0 to 2048 [ 365.423926][T17576] loop5: detected capacity change from 0 to 1024 [ 365.435927][T17576] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.472840][ T23] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 365.485880][T17581] loop0: detected capacity change from 0 to 1024 [ 365.495180][ T23] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.504040][T17581] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.525344][T17584] hub 9-0:1.0: USB hub found [ 365.531462][T17584] hub 9-0:1.0: 8 ports detected [ 365.576502][T17586] loop0: detected capacity change from 0 to 1024 [ 365.584429][T17586] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.603893][T17588] Cannot find set identified by id 0 to match [ 365.627639][ T3380] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 365.628659][T17593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4023'. [ 365.641416][T17591] loop5: detected capacity change from 0 to 1024 [ 365.653723][ T3380] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.658269][T17593] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 365.665049][T17591] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.685375][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4021'. [ 365.697866][T17593] bond0: (slave sit0): Error -95 calling set_mac_address [ 365.751595][ T23] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 365.761340][ T23] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.775936][T17603] loop0: detected capacity change from 0 to 1024 [ 365.784710][T17603] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.833104][T17602] netlink: 'syz.3.4026': attribute type 3 has an invalid length. [ 365.853027][T17611] loop5: detected capacity change from 0 to 512 [ 365.864905][T17611] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4025: iget: bad extended attribute block 1 [ 365.865063][T17611] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4025: couldn't read orphan inode 15 (err -117) [ 365.933586][T17617] loop3: detected capacity change from 0 to 2048 [ 365.981501][T17619] siw: device registration error -23 [ 366.033225][T17630] loop0: detected capacity change from 0 to 2048 [ 366.133940][T17636] loop2: detected capacity change from 0 to 1024 [ 366.141899][T17636] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 366.277323][T17643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4037'. [ 366.325134][T17639] netlink: 'syz.1.4034': attribute type 3 has an invalid length. [ 366.351073][T17643] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 366.362709][T17639] siw: device registration error -23 [ 366.363027][T17643] bond0: (slave sit0): Error -95 calling set_mac_address [ 366.402874][ T23] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 366.411974][ T23] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.414334][T17650] loop1: detected capacity change from 0 to 2048 [ 366.429364][T17648] loop0: detected capacity change from 0 to 1024 [ 366.437384][T17648] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 366.473871][T17654] loop2: detected capacity change from 0 to 2048 [ 366.755814][T17665] netlink: 'syz.0.4043': attribute type 3 has an invalid length. [ 366.781920][T17662] siw: device registration error -23 [ 366.823711][T17674] loop0: detected capacity change from 0 to 2048 [ 366.895575][T17672] lo speed is unknown, defaulting to 1000 [ 366.937226][T17679] loop3: detected capacity change from 0 to 1024 [ 366.978839][T17679] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 367.065797][T17672] openvswitch: netlink: Message has 6 unknown bytes. [ 367.195019][T17692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4049'. [ 367.219470][T17687] netlink: 'syz.3.4048': attribute type 3 has an invalid length. [ 367.255441][T17697] loop2: detected capacity change from 0 to 1024 [ 367.263816][ T3385] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 367.272502][T17697] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 367.284021][T17692] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 367.284238][ T3385] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.302066][T17692] bond0: (slave sit0): Error -95 calling set_mac_address [ 367.333324][T17700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4052'. [ 367.393092][T17700] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 367.427285][T17700] bond0: (slave sit0): Error -95 calling set_mac_address [ 367.569282][T17715] hub 9-0:1.0: USB hub found [ 367.573098][T17711] siw: device registration error -23 [ 367.575530][T17715] hub 9-0:1.0: 8 ports detected [ 367.624174][T17716] siw: device registration error -23 [ 367.642551][T17721] loop1: detected capacity change from 0 to 512 [ 367.649345][T17721] EXT4-fs: Ignoring removed nobh option [ 367.703867][T17726] loop3: detected capacity change from 0 to 2048 [ 367.726135][T17734] loop5: detected capacity change from 0 to 1024 [ 367.734513][ T36] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 367.743426][T17734] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 367.754624][ T36] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.757701][T17721] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4057: corrupted inode contents [ 367.798708][T17721] EXT4-fs (loop1): Remounting filesystem read-only [ 367.852376][T17721] EXT4-fs (loop1): 1 truncate cleaned up [ 367.871543][ T70] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 367.882989][ T70] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 367.924441][ T70] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 367.951457][T17721] ext4 filesystem being mounted at /782/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.963693][T17731] lo speed is unknown, defaulting to 1000 [ 367.999266][T17737] openvswitch: netlink: Message has 6 unknown bytes. [ 368.025486][T17744] netlink: 'syz.5.4064': attribute type 3 has an invalid length. [ 368.046293][T17748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4065'. [ 368.072755][T17748] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 368.094659][T17748] bond0: (slave sit0): Error -95 calling set_mac_address [ 368.115667][T17729] lo speed is unknown, defaulting to 1000 [ 368.170906][T17739] openvswitch: netlink: Message has 6 unknown bytes. [ 368.189235][T17741] siw: device registration error -23 [ 368.263475][T17756] netlink: 'syz.0.4067': attribute type 10 has an invalid length. [ 368.308523][T17756] netlink: 'syz.0.4067': attribute type 10 has an invalid length. [ 368.317646][T17756] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4067'. [ 368.489648][T17759] siw: device registration error -23 [ 368.502033][T17770] loop2: detected capacity change from 0 to 2048 [ 368.564362][T17776] loop1: detected capacity change from 0 to 2048 [ 368.577316][T17778] hub 9-0:1.0: USB hub found [ 368.583325][T17778] hub 9-0:1.0: 8 ports detected [ 368.763974][T17788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4078'. [ 368.776915][T17787] loop5: detected capacity change from 0 to 2048 [ 368.794480][T17788] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 368.806441][T17788] bond0: (slave sit0): Error -95 calling set_mac_address [ 368.971065][T17801] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4080'. [ 369.186038][T17812] loop0: detected capacity change from 0 to 2048 [ 369.326099][ T23] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 369.333602][T17823] loop3: detected capacity change from 0 to 1024 [ 369.333797][T17823] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 369.352156][ T23] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.382931][T17825] hub 9-0:1.0: USB hub found [ 369.387597][T17825] hub 9-0:1.0: 8 ports detected [ 369.404261][T17825] loop3: detected capacity change from 0 to 512 [ 369.411890][T17825] EXT4-fs: Ignoring removed nobh option [ 369.423415][T17825] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4087: corrupted inode contents [ 369.436664][T17825] EXT4-fs (loop3): Remounting filesystem read-only [ 369.444381][T17825] EXT4-fs (loop3): 1 truncate cleaned up [ 369.451763][T17825] ext4 filesystem being mounted at /844/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.463696][ T4043] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.475439][ T4043] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.487333][ T4043] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 369.564596][T17831] loop3: detected capacity change from 0 to 2048 [ 369.637653][T17835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'. [ 369.652263][T17837] hub 9-0:1.0: USB hub found [ 369.657246][T17837] hub 9-0:1.0: 8 ports detected [ 369.682105][T17835] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 369.694371][T17835] bond0: (slave sit0): Error -95 calling set_mac_address [ 369.706380][T17837] loop2: detected capacity change from 0 to 512 [ 369.714321][T17837] EXT4-fs: Ignoring removed nobh option [ 369.745107][T17837] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4091: corrupted inode contents [ 369.769514][T17837] EXT4-fs (loop2): Remounting filesystem read-only [ 369.787542][T17837] EXT4-fs (loop2): 1 truncate cleaned up [ 369.793438][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.805208][ T1088] __quota_error: 108 callbacks suppressed [ 369.805271][ T1088] Quota error (device loop2): write_blk: dquota write failed [ 369.805587][T17837] ext4 filesystem being mounted at /838/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.812322][ T1088] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 369.835506][T17843] validate_nla: 5 callbacks suppressed [ 369.835935][T17843] netlink: 'syz.1.4092': attribute type 3 has an invalid length. [ 369.842601][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.842683][ T1088] Quota error (device loop2): write_blk: dquota write failed [ 369.842699][ T1088] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 369.845172][ T1088] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 369.845208][ T1088] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 369.845246][ T1088] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 369.886288][T17846] siw: device registration error -23 [ 370.101542][T17854] netlink: 'syz.5.4093': attribute type 3 has an invalid length. [ 370.110176][T17854] siw: device registration error -23 [ 370.128876][T17859] netlink: 'syz.0.4094': attribute type 3 has an invalid length. [ 370.144193][T17852] siw: device registration error -23 [ 370.185367][T17865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4098'. [ 370.190899][ T29] audit: type=1326 audit(1746100504.325:23286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.5.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 370.228398][T17865] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 370.228969][T17869] loop1: detected capacity change from 0 to 2048 [ 370.252049][ T29] audit: type=1326 audit(1746100504.395:23287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.5.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 370.256153][T17865] bond0: (slave sit0): Error -95 calling set_mac_address [ 370.277058][ T29] audit: type=1326 audit(1746100504.395:23288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.5.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 370.277089][ T29] audit: type=1326 audit(1746100504.395:23289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.5.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 370.286846][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4097'. [ 370.351859][ T3380] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 370.360669][T17879] netlink: 'syz.2.4101': attribute type 10 has an invalid length. [ 370.368707][T17880] loop5: detected capacity change from 0 to 2048 [ 370.375220][T17873] loop0: detected capacity change from 0 to 1024 [ 370.375470][T17873] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 370.392069][T17879] bridge0: port 1(team0) entered disabled state [ 370.398544][ T3380] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 370.403634][T17879] team0: left allmulticast mode [ 370.413230][T17879] team0: left promiscuous mode [ 370.418149][T17879] bridge0: port 1(team0) entered disabled state [ 370.432969][T17881] netlink: 'syz.2.4101': attribute type 10 has an invalid length. [ 370.442220][T17881] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4101'. [ 370.453560][T17881] team0: entered promiscuous mode [ 370.459124][T17881] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.467747][T17881] bridge0: port 1(team0) entered blocking state [ 370.475339][T17881] bridge0: port 1(team0) entered disabled state [ 370.482980][T17881] team0: entered allmulticast mode [ 370.484639][T17880] Alternate GPT is invalid, using primary GPT. [ 370.495827][T17880] loop5: p2 p3 p7 [ 370.519476][T17887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4103'. [ 370.572450][T17887] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 370.586150][T17887] bond0: (slave sit0): Error -95 calling set_mac_address [ 370.596824][T17890] loop3: detected capacity change from 0 to 1024 [ 370.613346][T17892] loop1: detected capacity change from 0 to 2048 [ 370.621551][T17890] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 370.622529][T17894] loop0: detected capacity change from 0 to 2048 [ 370.695332][T17906] Cannot find set identified by id 0 to match [ 370.701682][T17905] loop3: detected capacity change from 0 to 2048 [ 370.709154][T17902] hub 9-0:1.0: USB hub found [ 370.715584][T17902] hub 9-0:1.0: 8 ports detected [ 370.736601][T17902] loop5: detected capacity change from 0 to 512 [ 370.746755][T17902] EXT4-fs: Ignoring removed nobh option [ 370.794452][T17902] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4107: corrupted inode contents [ 370.855395][T17902] EXT4-fs (loop5): Remounting filesystem read-only [ 370.879851][T17902] EXT4-fs (loop5): 1 truncate cleaned up [ 370.887468][T17902] ext4 filesystem being mounted at /717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.899767][ T2952] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.911681][ T2952] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.971560][ T2952] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 371.031594][T17922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4112'. [ 371.116084][T17924] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 371.144464][T17926] netlink: 'syz.2.4113': attribute type 10 has an invalid length. [ 371.179042][T17924] bond0: (slave sit0): Error -95 calling set_mac_address [ 371.207966][T17926] bridge0: port 1(team0) entered disabled state [ 371.245821][T17926] team0: left allmulticast mode [ 371.252148][T17926] team0: left promiscuous mode [ 371.257075][T17926] bridge0: port 1(team0) entered disabled state [ 371.267616][T17929] netlink: 'syz.2.4113': attribute type 10 has an invalid length. [ 371.302204][T17929] team0: entered promiscuous mode [ 371.307993][T17929] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.316674][T17929] bridge0: port 1(team0) entered blocking state [ 371.324427][T17929] bridge0: port 1(team0) entered disabled state [ 371.333367][T17929] team0: entered allmulticast mode [ 371.349918][T17928] netlink: 'syz.5.4114': attribute type 3 has an invalid length. [ 371.359454][T17928] siw: device registration error -23 [ 371.374776][T17933] loop2: detected capacity change from 0 to 2048 [ 371.408519][T17937] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 371.421261][T17937] bond0: (slave sit0): Error -95 calling set_mac_address [ 371.504646][T17944] loop5: detected capacity change from 0 to 1024 [ 371.512656][T17944] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 371.592409][T17954] loop2: detected capacity change from 0 to 2048 [ 371.752175][ T3380] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 371.764652][T17964] loop1: detected capacity change from 0 to 1024 [ 371.776919][T17964] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 371.787683][ T3380] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.852506][T17966] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 371.869769][T17966] bond0: (slave sit0): Error -95 calling set_mac_address [ 371.908226][T17974] loop1: detected capacity change from 0 to 1024 [ 371.916318][T17974] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 371.935059][T17977] loop5: detected capacity change from 0 to 512 [ 371.938690][T17975] hub 9-0:1.0: USB hub found [ 371.947774][T17975] hub 9-0:1.0: 8 ports detected [ 371.955207][T17977] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4130: iget: bad extended attribute block 1 [ 371.985464][T17977] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4130: couldn't read orphan inode 15 (err -117) [ 372.102040][T17992] loop3: detected capacity change from 0 to 2048 [ 372.144933][T17996] loop0: detected capacity change from 0 to 1024 [ 372.153418][ T36] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 372.162160][T17996] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 372.173649][T17987] siw: device registration error -23 [ 372.179414][ T36] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.251706][T18000] loop1: detected capacity change from 0 to 2048 [ 372.258294][T18002] hub 9-0:1.0: USB hub found [ 372.267771][T18002] hub 9-0:1.0: 8 ports detected [ 372.322400][T18002] loop0: detected capacity change from 0 to 512 [ 372.339056][T18002] EXT4-fs: Ignoring removed nobh option [ 372.375487][T18002] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4139: corrupted inode contents [ 372.388814][T18002] EXT4-fs (loop0): Remounting filesystem read-only [ 372.396954][T18002] EXT4-fs (loop0): 1 truncate cleaned up [ 372.404942][T18002] ext4 filesystem being mounted at /847/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.416992][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.428739][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.450591][ T1088] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 372.485918][T18011] hub 9-0:1.0: USB hub found [ 372.494571][T18011] hub 9-0:1.0: 8 ports detected [ 372.525633][T18011] loop0: detected capacity change from 0 to 512 [ 372.533470][T18011] EXT4-fs: Ignoring removed nobh option [ 372.553366][T18013] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 372.565557][T18013] bond0: (slave sit0): Error -95 calling set_mac_address [ 372.585167][T18011] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4140: corrupted inode contents [ 372.605771][T18011] EXT4-fs (loop0): Remounting filesystem read-only [ 372.619026][T18020] loop2: detected capacity change from 0 to 1024 [ 372.626809][T18020] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 372.637022][T18011] EXT4-fs (loop0): 1 truncate cleaned up [ 372.647242][T18011] ext4 filesystem being mounted at /848/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.661564][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.673403][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.701098][ T1088] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 372.739832][T18022] loop2: detected capacity change from 0 to 2048 [ 372.773138][T18022] Alternate GPT is invalid, using primary GPT. [ 372.779505][T18022] loop2: p2 p3 p7 [ 372.844673][T18034] loop1: detected capacity change from 0 to 1024 [ 372.853013][ T3385] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 372.862502][T18034] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 372.872163][ T3385] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.909640][T18038] loop2: detected capacity change from 0 to 2048 [ 372.955157][T18042] loop5: detected capacity change from 0 to 2048 [ 372.963385][ T3385] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 372.976382][T18044] loop3: detected capacity change from 0 to 1024 [ 372.980445][ T3385] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 373.000527][T18044] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 373.042479][T18048] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 373.054217][T18048] bond0: (slave sit0): Error -95 calling set_mac_address [ 373.086036][T18053] loop1: detected capacity change from 0 to 1024 [ 373.091512][T18055] loop3: detected capacity change from 0 to 2048 [ 373.111724][T18053] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 373.191363][T18064] __nla_validate_parse: 6 callbacks suppressed [ 373.191381][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 373.227808][T18068] hub 9-0:1.0: USB hub found [ 373.264180][T18068] hub 9-0:1.0: 8 ports detected [ 373.269836][T18058] loop0: detected capacity change from 0 to 2048 [ 373.313766][T18070] loop1: detected capacity change from 0 to 512 [ 373.321329][T18070] EXT4-fs: Ignoring removed nobh option [ 373.404233][T18070] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4158: corrupted inode contents [ 373.422182][T18070] EXT4-fs (loop1): Remounting filesystem read-only [ 373.436142][T18058] Alternate GPT is invalid, using primary GPT. [ 373.436158][T18070] EXT4-fs (loop1): 1 truncate cleaned up [ 373.443683][T18058] loop0: p2 p3 p7 [ 373.452831][T18070] ext4 filesystem being mounted at /802/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.465540][ T1088] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.477540][ T1088] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.501574][ T1088] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 373.584337][T18081] hub 9-0:1.0: USB hub found [ 373.591353][T18081] hub 9-0:1.0: 8 ports detected [ 373.597489][T18086] Cannot find set identified by id 0 to match [ 373.607935][T18081] loop0: detected capacity change from 0 to 512 [ 373.614450][T18087] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 373.624125][T18081] EXT4-fs: Ignoring removed nobh option [ 373.639732][ T36] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 373.647276][T18090] loop5: detected capacity change from 0 to 1024 [ 373.647527][T18090] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 373.656210][T18081] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4161: corrupted inode contents [ 373.671207][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4163'. [ 373.678757][T18081] EXT4-fs (loop0): Remounting filesystem read-only [ 373.694372][T18081] EXT4-fs (loop0): 1 truncate cleaned up [ 373.697640][ T36] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 373.702151][T18081] ext4 filesystem being mounted at /854/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.725120][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.736750][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.748443][ T1088] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 373.785146][T18098] loop0: detected capacity change from 0 to 2048 [ 373.799754][T18100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4168'. [ 373.818765][T18100] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 373.830743][T18100] bond0: (slave sit0): Error -95 calling set_mac_address [ 373.889096][T18106] netlink: 'syz.5.4167': attribute type 3 has an invalid length. [ 373.947268][T18112] loop5: detected capacity change from 0 to 2048 [ 373.968735][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4170'. [ 373.999787][T18110] loop2: detected capacity change from 0 to 2048 [ 374.043331][T18110] Alternate GPT is invalid, using primary GPT. [ 374.049768][T18110] loop2: p2 p3 p7 [ 374.184931][T18124] hub 9-0:1.0: USB hub found [ 374.198624][T18124] hub 9-0:1.0: 8 ports detected [ 374.205135][T18114] openvswitch: netlink: Message has 6 unknown bytes. [ 374.231480][T18124] loop3: detected capacity change from 0 to 512 [ 374.238051][T18124] EXT4-fs: Ignoring removed nobh option [ 374.246789][T18130] loop2: detected capacity change from 0 to 2048 [ 374.257903][T18105] lo speed is unknown, defaulting to 1000 [ 374.266854][T18124] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4173: corrupted inode contents [ 374.318214][T18124] EXT4-fs (loop3): Remounting filesystem read-only [ 374.347729][T18124] EXT4-fs (loop3): 1 truncate cleaned up [ 374.361303][ T1088] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.373065][ T1088] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.411151][T18124] ext4 filesystem being mounted at /854/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.414276][ T1088] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 374.498570][ T3306] EXT4-fs unmount: 152 callbacks suppressed [ 374.498643][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.519696][T18138] hub 9-0:1.0: USB hub found [ 374.526126][T18138] hub 9-0:1.0: 8 ports detected [ 374.571212][T18138] loop5: detected capacity change from 0 to 512 [ 374.572801][T18140] hub 9-0:1.0: USB hub found [ 374.583364][T18142] loop3: detected capacity change from 0 to 2048 [ 374.591207][T18138] EXT4-fs: Ignoring removed nobh option [ 374.622288][T18140] hub 9-0:1.0: 8 ports detected [ 374.632640][T18142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.646072][T18138] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4176: corrupted inode contents [ 374.658426][T18138] EXT4-fs (loop5): Remounting filesystem read-only [ 374.676192][T18138] EXT4-fs (loop5): 1 truncate cleaned up [ 374.683451][T18138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.697347][T18138] ext4 filesystem being mounted at /736/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.709355][ T1088] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.721215][ T1088] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.733425][ T1088] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 374.755807][T18140] loop1: detected capacity change from 0 to 512 [ 374.763726][T18140] EXT4-fs: Ignoring removed nobh option [ 374.792005][ T4784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.812764][T18140] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4177: corrupted inode contents [ 374.834828][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.851442][T18140] EXT4-fs (loop1): Remounting filesystem read-only [ 374.859804][T18140] EXT4-fs (loop1): 1 truncate cleaned up [ 374.866997][ T1088] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.867284][T18140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.878893][ T1088] __quota_error: 277 callbacks suppressed [ 374.878907][ T1088] Quota error (device loop1): write_blk: dquota write failed [ 374.891190][T18140] ext4 filesystem being mounted at /806/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.898057][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4179'. [ 374.905652][ T1088] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 374.905671][ T1088] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.905687][ T1088] Quota error (device loop1): write_blk: dquota write failed [ 374.905701][ T1088] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 374.967916][ T1088] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 374.979085][ T1088] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 374.988921][ T1088] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 375.001450][T18151] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 375.013330][T18151] bond0: (slave sit0): Error -95 calling set_mac_address [ 375.028212][T18155] hub 9-0:1.0: USB hub found [ 375.034106][T18155] hub 9-0:1.0: 8 ports detected [ 375.044416][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.058613][T18155] loop0: detected capacity change from 0 to 512 [ 375.064339][ T29] audit: type=1326 audit(1746100509.195:23525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.5.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 375.066533][T18155] EXT4-fs: Ignoring removed nobh option [ 375.090627][ T29] audit: type=1326 audit(1746100509.235:23526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.5.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 375.120061][ T29] audit: type=1326 audit(1746100509.235:23527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.5.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 375.129171][T18155] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4180: corrupted inode contents [ 375.145048][ T29] audit: type=1326 audit(1746100509.235:23528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.5.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 375.158381][T18155] EXT4-fs (loop0): Remounting filesystem read-only [ 375.201379][T18155] EXT4-fs (loop0): 1 truncate cleaned up [ 375.207484][T18155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.208742][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4182'. [ 375.221610][T18155] ext4 filesystem being mounted at /856/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.229100][ T4043] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 375.252398][ T4043] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 375.281437][T18157] loop5: detected capacity change from 0 to 2048 [ 375.288117][ T4043] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 375.301311][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.304024][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.353135][T18168] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 375.353707][T18157] Alternate GPT is invalid, using primary GPT. [ 375.365055][T18169] Cannot find set identified by id 0 to match [ 375.368518][T18157] loop5: p2 p3 p7 [ 375.380070][T18168] bridge0: port 1(team0) entered disabled state [ 375.387037][T18168] team0: left allmulticast mode [ 375.393314][T18168] team0: left promiscuous mode [ 375.398183][T18168] bridge0: port 1(team0) entered disabled state [ 375.414400][T18164] netlink: 'syz.1.4181': attribute type 3 has an invalid length. [ 375.419072][T18168] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 375.431451][T18168] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4183'. [ 375.441729][T18168] team0: entered promiscuous mode [ 375.447033][T18168] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.455130][T18164] siw: device registration error -23 [ 375.465265][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4184'. [ 375.466293][T18168] bridge0: port 1(team0) entered blocking state [ 375.466391][T18168] bridge0: port 1(team0) entered disabled state [ 375.466479][T18168] team0: entered allmulticast mode [ 375.562540][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.607573][T18178] loop2: detected capacity change from 0 to 2048 [ 375.628483][T18175] lo speed is unknown, defaulting to 1000 [ 375.636907][T18178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.658342][T18187] loop3: detected capacity change from 0 to 2048 [ 375.732645][T18187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.800142][T18191] loop0: detected capacity change from 0 to 2048 [ 375.881864][T18175] openvswitch: netlink: Message has 6 unknown bytes. [ 375.909843][T18191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.935045][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.973824][T18201] loop5: detected capacity change from 0 to 2048 [ 376.003878][T18201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.026592][T18203] loop1: detected capacity change from 0 to 1024 [ 376.035082][T18203] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 376.045747][ T23] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 376.066593][ T23] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.158933][T18214] loop1: detected capacity change from 0 to 1024 [ 376.179298][T18214] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 376.231935][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.264851][T18220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4198'. [ 376.303083][T18220] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 376.327112][T18220] bond0: (slave sit0): Error -95 calling set_mac_address [ 376.335917][T18222] loop3: detected capacity change from 0 to 2048 [ 376.344976][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4197'. [ 376.384447][T18219] loop2: detected capacity change from 0 to 2048 [ 376.401995][T18222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.446236][T18219] Alternate GPT is invalid, using primary GPT. [ 376.453674][T18219] loop2: p2 p3 p7 [ 376.576600][T18233] Cannot find set identified by id 0 to match [ 376.597228][T18230] siw: device registration error -23 [ 376.637732][T18236] loop2: detected capacity change from 0 to 2048 [ 376.652100][T18236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.822426][T18243] netlink: 'syz.1.4202': attribute type 3 has an invalid length. [ 376.855867][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.856516][T18247] Cannot find set identified by id 0 to match [ 376.959821][T18250] lo speed is unknown, defaulting to 1000 [ 377.035848][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.063181][T18250] openvswitch: netlink: Message has 6 unknown bytes. [ 377.113550][ T4784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.151251][T18265] hub 9-0:1.0: USB hub found [ 377.156054][T18265] hub 9-0:1.0: 8 ports detected [ 377.173395][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.249517][T18267] netlink: 'syz.5.4207': attribute type 3 has an invalid length. [ 377.262686][T18267] siw: device registration error -23 [ 377.279076][T18265] loop2: detected capacity change from 0 to 512 [ 377.293585][T18265] EXT4-fs: Ignoring removed nobh option [ 377.322198][T18265] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4208: corrupted inode contents [ 377.349739][T18270] loop3: detected capacity change from 0 to 2048 [ 377.349852][T18265] EXT4-fs (loop2): Remounting filesystem read-only [ 377.366048][T18265] EXT4-fs (loop2): 1 truncate cleaned up [ 377.367059][T18275] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 377.381427][T18265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.383066][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.406815][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.407178][T18275] bond0: (slave sit0): Error -95 calling set_mac_address [ 377.409297][T18265] ext4 filesystem being mounted at /867/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.418854][ T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 377.445312][T18270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.481716][T18282] Cannot find set identified by id 0 to match [ 377.553008][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.608193][T18278] siw: device registration error -23 [ 377.722098][T18291] netlink: 'syz.0.4214': attribute type 3 has an invalid length. [ 377.773102][T18302] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 377.783811][T18302] bond0: (slave sit0): Error -95 calling set_mac_address [ 377.822373][T18308] loop0: detected capacity change from 0 to 2048 [ 377.844924][T18314] hub 9-0:1.0: USB hub found [ 377.849782][T18314] hub 9-0:1.0: 8 ports detected [ 377.866134][T18314] loop1: detected capacity change from 0 to 512 [ 377.874028][T18314] EXT4-fs: Ignoring removed nobh option [ 377.877444][T18308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.893720][T18295] netlink: 'syz.2.4216': attribute type 3 has an invalid length. [ 377.917845][T18295] siw: device registration error -23 [ 377.932146][T18314] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4220: corrupted inode contents [ 377.971948][T18314] EXT4-fs (loop1): Remounting filesystem read-only [ 377.978776][T18314] EXT4-fs (loop1): 1 truncate cleaned up [ 377.986238][T18314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.009058][T18321] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 378.021234][ T70] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.031787][ T70] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.042695][T18321] bond0: (slave sit0): Error -95 calling set_mac_address [ 378.061243][ T70] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 378.074233][T18314] ext4 filesystem being mounted at /815/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.114769][T18324] loop2: detected capacity change from 0 to 2048 [ 378.142377][T18324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.213182][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.298940][T18333] loop1: detected capacity change from 0 to 2048 [ 378.299413][T18326] netlink: 'syz.5.4224': attribute type 3 has an invalid length. [ 378.351434][T18326] siw: device registration error -23 [ 378.384373][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.427168][T18333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.586587][T18343] netlink: 'syz.3.4228': attribute type 3 has an invalid length. [ 378.645296][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.692644][T18354] loop5: detected capacity change from 0 to 2048 [ 378.723339][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.725141][T18354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.768440][T18362] __nla_validate_parse: 5 callbacks suppressed [ 378.768451][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4233'. [ 378.796371][T18362] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 378.808093][T18362] bond0: (slave sit0): Error -95 calling set_mac_address [ 378.857607][T18367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4244'. [ 378.872949][T18366] loop1: detected capacity change from 0 to 2048 [ 378.889759][T18367] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 378.901508][T18367] bond0: (slave sit0): Error -95 calling set_mac_address [ 378.939642][T18366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.978291][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.014633][T18372] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 379.034163][T18378] hub 9-0:1.0: USB hub found [ 379.039071][T18378] hub 9-0:1.0: 8 ports detected [ 379.081618][T18378] loop2: detected capacity change from 0 to 512 [ 379.097068][T18378] EXT4-fs: Ignoring removed nobh option [ 379.107486][T18381] hub 9-0:1.0: USB hub found [ 379.112243][T18381] hub 9-0:1.0: 8 ports detected [ 379.124405][T18378] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4236: corrupted inode contents [ 379.143432][T18381] loop0: detected capacity change from 0 to 512 [ 379.151278][T18378] EXT4-fs (loop2): Remounting filesystem read-only [ 379.151295][T18381] EXT4-fs: Ignoring removed nobh option [ 379.163597][T18378] EXT4-fs (loop2): 1 truncate cleaned up [ 379.164565][T18378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.185023][ T70] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 379.185059][T18378] ext4 filesystem being mounted at /873/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.196877][ T70] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 379.220709][ T70] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 379.253355][T18381] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4237: corrupted inode contents [ 379.268888][T18381] EXT4-fs (loop0): Remounting filesystem read-only [ 379.277008][T18381] EXT4-fs (loop0): 1 truncate cleaned up [ 379.286428][T18381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.300282][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 379.312018][ T1088] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 379.324742][T18381] ext4 filesystem being mounted at /869/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.348334][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.351990][ T1088] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 379.377842][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.386987][T18388] loop2: detected capacity change from 0 to 2048 [ 379.392945][T18388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.426401][T18392] loop0: detected capacity change from 0 to 2048 [ 379.442722][T18392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.642785][ T4784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.718416][T18404] hub 9-0:1.0: USB hub found [ 379.731473][T18404] hub 9-0:1.0: 8 ports detected [ 379.791806][T18404] loop3: detected capacity change from 0 to 512 [ 379.799449][T18405] netlink: 'syz.5.4241': attribute type 3 has an invalid length. [ 379.812523][T18404] EXT4-fs: Ignoring removed nobh option [ 379.833452][T18404] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4242: corrupted inode contents [ 379.848033][T18404] EXT4-fs (loop3): Remounting filesystem read-only [ 379.855722][T18404] EXT4-fs (loop3): 1 truncate cleaned up [ 379.861879][T18404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.874542][ T70] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 379.877155][T18404] ext4 filesystem being mounted at /864/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.886439][ T70] __quota_error: 235 callbacks suppressed [ 379.886467][ T70] Quota error (device loop3): write_blk: dquota write failed [ 379.913878][ T70] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 379.925149][ T70] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 379.936988][ T70] Quota error (device loop3): write_blk: dquota write failed [ 379.945748][ T70] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 379.957009][ T70] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 379.968522][ T70] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 379.978831][ T70] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 379.998782][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.018331][T18411] team0: left promiscuous mode [ 380.024406][T18411] team_slave_0: left promiscuous mode [ 380.031409][T18411] team_slave_1: left promiscuous mode [ 380.039332][ T29] audit: type=1326 audit(1746100514.175:23734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.1.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 380.042845][T18411] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4243'. [ 380.074677][ T29] audit: type=1326 audit(1746100514.175:23735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.1.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 380.098463][T18411] team0: entered promiscuous mode [ 380.098478][T18411] team_slave_0: entered promiscuous mode [ 380.098546][T18411] team_slave_1: entered promiscuous mode [ 380.098873][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.125606][ T29] audit: type=1326 audit(1746100514.175:23736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.1.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 380.150453][ T29] audit: type=1326 audit(1746100514.175:23737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.1.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 380.198955][T18416] loop1: detected capacity change from 0 to 2048 [ 380.208245][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.222257][T18416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.311699][T18425] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 380.369520][T18428] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 380.405353][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.470769][T18438] hub 9-0:1.0: USB hub found [ 380.475627][T18438] hub 9-0:1.0: 8 ports detected [ 380.494202][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.496904][T18438] loop5: detected capacity change from 0 to 512 [ 380.512435][T18438] EXT4-fs: Ignoring removed nobh option [ 380.535955][T18441] loop1: detected capacity change from 0 to 1024 [ 380.544638][T18441] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 380.546240][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.571597][T18438] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4252: corrupted inode contents [ 380.598294][T18438] EXT4-fs (loop5): Remounting filesystem read-only [ 380.606502][T18438] EXT4-fs (loop5): 1 truncate cleaned up [ 380.607302][ T3383] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 380.612588][T18438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.612717][T18438] ext4 filesystem being mounted at /752/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.645192][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.645213][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.645233][ T51] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 380.648784][T18445] loop1: detected capacity change from 0 to 1024 [ 380.683708][T18447] validate_nla: 2 callbacks suppressed [ 380.683723][T18447] netlink: 'syz.0.4256': attribute type 10 has an invalid length. [ 380.703666][ T3383] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.705716][T18449] Cannot find set identified by id 0 to match [ 380.715010][T18445] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 380.735496][T18447] netlink: 'syz.0.4256': attribute type 10 has an invalid length. [ 380.744594][T18447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4256'. [ 380.771816][ T4784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.783418][T18452] Cannot find set identified by id 0 to match [ 380.827354][T18457] loop2: detected capacity change from 0 to 2048 [ 380.842511][T18460] loop5: detected capacity change from 0 to 2048 [ 380.845868][T18462] loop1: detected capacity change from 0 to 2048 [ 380.866698][T18457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.879698][T18460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.904118][T18462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.218756][T18471] netlink: 'syz.0.4261': attribute type 3 has an invalid length. [ 381.304311][T18481] loop3: detected capacity change from 0 to 2048 [ 381.362225][T18484] loop0: detected capacity change from 0 to 2048 [ 381.367123][T18481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.392554][T18484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.804467][ T4784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.943916][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.977212][T18494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4265'. [ 381.996196][T18494] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 382.007695][T18494] bond0: (slave sit0): Error -95 calling set_mac_address [ 382.023213][T18497] Cannot find set identified by id 0 to match [ 382.044190][T18500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4266'. [ 382.055441][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.064226][T18500] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 382.076739][T18500] bond0: (slave sit0): Error -95 calling set_mac_address [ 382.077197][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.125758][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.136183][T18506] loop5: detected capacity change from 0 to 2048 [ 382.166250][T18511] hub 9-0:1.0: USB hub found [ 382.172531][T18511] hub 9-0:1.0: 8 ports detected [ 382.182304][T18506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.210907][T18511] loop1: detected capacity change from 0 to 512 [ 382.217337][T18511] EXT4-fs: Ignoring removed nobh option [ 382.243143][T18511] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4272: corrupted inode contents [ 382.256523][T18511] EXT4-fs (loop1): Remounting filesystem read-only [ 382.263482][T18519] hub 9-0:1.0: USB hub found [ 382.263666][T18519] hub 9-0:1.0: 8 ports detected [ 382.275513][T18511] EXT4-fs (loop1): 1 truncate cleaned up [ 382.282837][T18511] ext4 filesystem being mounted at /825/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.293902][T18519] loop0: detected capacity change from 0 to 512 [ 382.294162][T18519] EXT4-fs: Ignoring removed nobh option [ 382.308716][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.320221][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.330862][ T51] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 382.345657][T18519] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4273: corrupted inode contents [ 382.363763][T18519] EXT4-fs (loop0): Remounting filesystem read-only [ 382.371779][T18519] EXT4-fs (loop0): 1 truncate cleaned up [ 382.378626][T18519] ext4 filesystem being mounted at /877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.391085][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.402797][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.433409][ T51] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 382.453215][T18529] loop2: detected capacity change from 0 to 2048 [ 382.521735][T18535] loop0: detected capacity change from 0 to 2048 [ 382.563911][T18540] loop2: detected capacity change from 0 to 1024 [ 382.572241][ T3380] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 382.580290][ T3380] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.599796][T18540] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 382.654871][T18542] loop1: detected capacity change from 0 to 2048 [ 382.685158][ T3383] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 382.703848][T18544] loop2: detected capacity change from 0 to 1024 [ 382.721627][ T3383] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.722205][T18544] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 382.874013][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4283'. [ 382.904006][T18549] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 382.916494][T18549] bond0: (slave sit0): Error -95 calling set_mac_address [ 382.933569][ T3385] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 382.942775][ T3385] hid-generic 0000:0000:0000.0099: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.953600][T18555] netlink: 'syz.0.4285': attribute type 10 has an invalid length. [ 382.961566][T18553] loop2: detected capacity change from 0 to 1024 [ 382.961829][T18553] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 382.978388][T18555] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4285'. [ 383.048572][T18557] netlink: 'syz.2.4286': attribute type 3 has an invalid length. [ 383.075270][T18557] siw: device registration error -23 [ 383.087162][T18567] loop0: detected capacity change from 0 to 2048 [ 383.127559][ T3385] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 383.136905][ T3385] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.154318][T18571] loop2: detected capacity change from 0 to 1024 [ 383.162018][T18571] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 383.195460][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 383.203480][ T23] hid-generic 0000:0000:0000.009B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.219168][T18575] loop2: detected capacity change from 0 to 1024 [ 383.227359][T18575] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 383.232726][T18577] loop3: detected capacity change from 0 to 2048 [ 383.278664][T18581] loop2: detected capacity change from 0 to 2048 [ 383.302156][T18583] loop0: detected capacity change from 0 to 2048 [ 383.524782][T18596] loop1: detected capacity change from 0 to 2048 [ 383.552712][ T3385] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 383.565624][T18598] loop3: detected capacity change from 0 to 1024 [ 383.592330][ T3385] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.606237][T18598] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 383.630591][T18602] loop5: detected capacity change from 0 to 2048 [ 383.698560][T18607] loop3: detected capacity change from 0 to 1024 [ 383.707138][ T3383] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 383.718555][ T3383] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.751519][T18607] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 383.821531][T18610] lo speed is unknown, defaulting to 1000 [ 383.907372][T18619] Cannot find set identified by id 0 to match [ 384.007657][T18610] openvswitch: netlink: Message has 6 unknown bytes. [ 384.112153][T18627] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 384.116553][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 384.180496][T18633] loop1: detected capacity change from 0 to 2048 [ 384.197600][T18639] loop0: detected capacity change from 0 to 2048 [ 384.228888][T18643] hub 9-0:1.0: USB hub found [ 384.235004][T18643] hub 9-0:1.0: 8 ports detected [ 384.242891][T18633] Alternate GPT is invalid, using primary GPT. [ 384.249313][T18633] loop1: p2 p3 p7 [ 384.261282][ T23] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 384.268785][T18643] loop2: detected capacity change from 0 to 512 [ 384.276980][T18643] EXT4-fs: Ignoring removed nobh option [ 384.298534][ T23] hid-generic 0000:0000:0000.009E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.312146][T18651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4317'. [ 384.312635][T18643] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4315: corrupted inode contents [ 384.334812][T18647] loop5: detected capacity change from 0 to 1024 [ 384.335106][T18647] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 384.355271][T18643] EXT4-fs (loop2): Remounting filesystem read-only [ 384.376493][T18651] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 384.388391][T18651] bond0: (slave sit0): Error -95 calling set_mac_address [ 384.423411][T18643] EXT4-fs (loop2): 1 truncate cleaned up [ 384.433261][T18657] Cannot find set identified by id 0 to match [ 384.441427][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.453209][ T1088] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.471588][T18643] ext4 filesystem being mounted at /888/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.487199][T18656] loop5: detected capacity change from 0 to 2048 [ 384.493702][ T1088] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 384.587104][T18663] loop2: detected capacity change from 0 to 2048 [ 384.682428][T18665] lo speed is unknown, defaulting to 1000 [ 384.814479][T18677] loop1: detected capacity change from 0 to 2048 [ 384.901192][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 384.901204][ T29] audit: type=1326 audit(1746100519.035:23987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.0.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 384.932187][ T29] audit: type=1326 audit(1746100519.045:23988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.0.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 384.951443][T18669] openvswitch: netlink: Message has 6 unknown bytes. [ 384.957269][ T29] audit: type=1326 audit(1746100519.045:23989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.0.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 384.988572][ T29] audit: type=1326 audit(1746100519.045:23990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.0.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 385.025300][ T29] audit: type=1326 audit(1746100519.165:23991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.0.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 385.050510][ T29] audit: type=1326 audit(1746100519.165:23992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.0.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07ebce969 code=0x7ffc0000 [ 385.224904][T18688] netlink: 'syz.3.4327': attribute type 3 has an invalid length. [ 385.289784][ T23] hid-generic 0000:0000:0000.009F: unknown main item tag 0x0 [ 385.298941][ T23] hid-generic 0000:0000:0000.009F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.316125][T18696] loop3: detected capacity change from 0 to 1024 [ 385.324246][T18696] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 385.357650][T18694] netlink: 'syz.0.4338': attribute type 3 has an invalid length. [ 385.382284][ T29] audit: type=1326 audit(1746100519.525:23993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 385.397930][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4331'. [ 385.407169][ T29] audit: type=1326 audit(1746100519.525:23994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 385.411377][ T29] audit: type=1326 audit(1746100519.525:23995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 385.444307][T18701] loop3: detected capacity change from 0 to 2048 [ 385.466143][ T29] audit: type=1326 audit(1746100519.525:23996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 385.485608][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4330'. [ 385.511503][T18704] siw: device registration error -23 [ 385.523134][T18701] Alternate GPT is invalid, using primary GPT. [ 385.529441][T18701] loop3: p2 p3 p7 [ 385.552372][T18709] Cannot find set identified by id 0 to match [ 385.582988][T18716] hub 9-0:1.0: USB hub found [ 385.587754][T18716] hub 9-0:1.0: 8 ports detected [ 385.615385][T18716] loop3: detected capacity change from 0 to 512 [ 385.623446][T18716] EXT4-fs: Ignoring removed nobh option [ 385.647382][T18721] loop0: detected capacity change from 0 to 2048 [ 385.670689][T18716] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4333: corrupted inode contents [ 385.687250][T18716] EXT4-fs (loop3): Remounting filesystem read-only [ 385.697688][T18716] EXT4-fs (loop3): 1 truncate cleaned up [ 385.705297][T18716] ext4 filesystem being mounted at /883/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.717516][ T70] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.729535][ T70] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.741937][ T70] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 385.999018][T18744] loop1: detected capacity change from 0 to 1024 [ 386.007254][ T23] hid-generic 0000:0000:0000.00A0: unknown main item tag 0x0 [ 386.016472][ T23] hid-generic 0000:0000:0000.00A0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 386.027593][T18744] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 386.092578][T18727] lo speed is unknown, defaulting to 1000 [ 386.115090][T18747] loop1: detected capacity change from 0 to 2048 [ 386.149297][T18729] openvswitch: netlink: Message has 6 unknown bytes. [ 386.158590][T18740] netlink: 'syz.5.4341': attribute type 3 has an invalid length. [ 386.178928][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'. [ 386.211167][T18749] loop3: detected capacity change from 0 to 2048 [ 386.241249][T18741] siw: device registration error -23 [ 386.253444][T18749] Alternate GPT is invalid, using primary GPT. [ 386.261160][T18749] loop3: p2 p3 p7 [ 386.347944][T18760] hub 9-0:1.0: USB hub found [ 386.402960][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4345'. [ 386.415853][T18761] siw: device registration error -23 [ 386.418977][T18760] hub 9-0:1.0: 8 ports detected [ 386.434010][T18766] Cannot find set identified by id 0 to match [ 386.458023][T18760] loop3: detected capacity change from 0 to 512 [ 386.472165][T18760] EXT4-fs: Ignoring removed nobh option [ 386.482512][T18760] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4346: corrupted inode contents [ 386.494605][T18760] EXT4-fs (loop3): Remounting filesystem read-only [ 386.502643][T18760] EXT4-fs (loop3): 1 truncate cleaned up [ 386.508757][T18760] ext4 filesystem being mounted at /886/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.521324][ T4043] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.533106][ T4043] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.548749][ T4043] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 386.578446][T18775] loop5: detected capacity change from 0 to 2048 [ 386.717112][ T3383] hid-generic 0000:0000:0000.00A1: unknown main item tag 0x0 [ 386.731305][ T3383] hid-generic 0000:0000:0000.00A1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 386.743520][T18788] loop2: detected capacity change from 0 to 1024 [ 386.762197][T18785] loop3: detected capacity change from 0 to 2048 [ 386.779413][T18788] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 386.855727][T18795] loop2: detected capacity change from 0 to 2048 [ 386.996025][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'. [ 387.048143][T18800] loop0: detected capacity change from 0 to 2048 [ 387.066891][T18806] siw: device registration error -23 [ 387.144108][T18800] Alternate GPT is invalid, using primary GPT. [ 387.151752][T18800] loop0: p2 p3 p7 [ 387.167065][T18811] loop1: detected capacity change from 0 to 2048 [ 387.282002][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 387.432434][ T3385] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 387.441823][ T3385] hid-generic 0000:0000:0000.00A2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.457597][T18829] loop1: detected capacity change from 0 to 1024 [ 387.465695][T18829] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 387.541576][ T3385] hid-generic 0000:0000:0000.00A3: unknown main item tag 0x0 [ 387.551705][ T3385] hid-generic 0000:0000:0000.00A3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.566308][T18835] loop5: detected capacity change from 0 to 1024 [ 387.574745][T18835] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 387.608096][T18833] netlink: 'syz.3.4368': attribute type 3 has an invalid length. [ 387.646813][T18841] loop3: detected capacity change from 0 to 2048 [ 387.664557][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4369'. [ 387.909378][ T3383] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 387.919534][T18851] Cannot find set identified by id 0 to match [ 387.925862][T18849] loop3: detected capacity change from 0 to 1024 [ 387.926082][T18849] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 387.932746][ T3383] hid-generic 0000:0000:0000.00A4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.975997][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4373'. [ 387.994927][T18854] loop3: detected capacity change from 0 to 2048 [ 388.033002][T18854] Alternate GPT is invalid, using primary GPT. [ 388.039407][T18854] loop3: p2 p3 p7 [ 388.053018][T18857] hub 9-0:1.0: USB hub found [ 388.057672][T18857] hub 9-0:1.0: 8 ports detected [ 388.081002][T18859] loop3: detected capacity change from 0 to 2048 [ 388.084475][T18857] loop2: detected capacity change from 0 to 512 [ 388.094801][T18857] EXT4-fs: Ignoring removed nobh option [ 388.123133][T18857] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4374: corrupted inode contents [ 388.134915][T18867] loop0: detected capacity change from 0 to 2048 [ 388.143439][T18857] EXT4-fs (loop2): Remounting filesystem read-only [ 388.152039][T18857] EXT4-fs (loop2): 1 truncate cleaned up [ 388.158458][T18857] ext4 filesystem being mounted at /899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.173732][ T70] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 388.185579][ T70] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 388.197497][ T70] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 388.248625][T18872] loop1: detected capacity change from 0 to 2048 [ 388.347290][ T23] hid-generic 0000:0000:0000.00A5: unknown main item tag 0x0 [ 388.357145][ T23] hid-generic 0000:0000:0000.00A5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 388.373854][T18877] loop2: detected capacity change from 0 to 1024 [ 388.404183][T18877] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 388.517268][T18880] netlink: 'syz.2.4380': attribute type 3 has an invalid length. [ 388.577613][T18884] loop2: detected capacity change from 0 to 2048 [ 388.727945][T18889] loop2: detected capacity change from 0 to 2048 [ 388.768000][T18893] loop2: detected capacity change from 0 to 2048 [ 388.974081][T18898] loop3: detected capacity change from 0 to 2048 [ 388.979820][T18900] loop0: detected capacity change from 0 to 2048 [ 389.166580][T18909] loop1: detected capacity change from 0 to 2048 [ 389.483203][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'. [ 389.500292][T18914] loop2: detected capacity change from 0 to 2048 [ 389.533131][T18914] Alternate GPT is invalid, using primary GPT. [ 389.539521][T18914] loop2: p2 p3 p7 [ 389.583830][T18918] hub 9-0:1.0: USB hub found [ 389.588551][T18918] hub 9-0:1.0: 8 ports detected [ 389.603546][T18918] loop2: detected capacity change from 0 to 512 [ 389.611465][T18918] EXT4-fs: Ignoring removed nobh option [ 389.623367][T18918] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4389: corrupted inode contents [ 389.636467][T18918] EXT4-fs (loop2): Remounting filesystem read-only [ 389.644034][T18918] EXT4-fs (loop2): 1 truncate cleaned up [ 389.650028][T18918] ext4 filesystem being mounted at /907/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.661483][ T4043] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 389.672109][ T4043] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 389.683773][ T4043] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 389.750736][ T3380] hid-generic 0000:0000:0000.00A6: unknown main item tag 0x0 [ 389.758217][T18922] loop2: detected capacity change from 0 to 1024 [ 389.758509][ T3380] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.766080][T18922] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 389.813076][T18924] loop2: detected capacity change from 0 to 2048 [ 389.883622][ T23] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 389.905590][T18932] loop3: detected capacity change from 0 to 1024 [ 389.916873][T18932] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 389.928362][ T23] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.987903][T18939] hub 9-0:1.0: USB hub found [ 389.993978][T18939] hub 9-0:1.0: 8 ports detected [ 390.014344][T18939] loop3: detected capacity change from 0 to 512 [ 390.022305][T18939] EXT4-fs: Ignoring removed nobh option [ 390.050659][T18939] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4396: corrupted inode contents [ 390.088030][T18939] EXT4-fs (loop3): Remounting filesystem read-only [ 390.097659][T18939] EXT4-fs (loop3): 1 truncate cleaned up [ 390.105145][T18939] ext4 filesystem being mounted at /899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.119061][ T1088] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 390.127246][T18941] netlink: 'syz.1.4397': attribute type 3 has an invalid length. [ 390.130870][ T1088] __quota_error: 306 callbacks suppressed [ 390.130925][ T1088] Quota error (device loop3): write_blk: dquota write failed [ 390.153319][ T1088] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 390.164709][ T1088] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 390.176428][ T1088] Quota error (device loop3): write_blk: dquota write failed [ 390.185067][ T1088] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 390.196119][ T1088] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 390.207089][ T1088] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 390.216142][ T1088] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 390.243640][T18952] Cannot find set identified by id 0 to match [ 390.254699][T18954] hub 9-0:1.0: USB hub found [ 390.259522][T18954] hub 9-0:1.0: 8 ports detected [ 390.274999][T18954] loop1: detected capacity change from 0 to 512 [ 390.283122][T18954] EXT4-fs: Ignoring removed nobh option [ 390.293293][T18954] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4400: corrupted inode contents [ 390.306984][T18954] EXT4-fs (loop1): Remounting filesystem read-only [ 390.319233][T18954] EXT4-fs (loop1): 1 truncate cleaned up [ 390.326937][T18954] ext4 filesystem being mounted at /847/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.338775][ T4043] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 390.350708][ T4043] Quota error (device loop1): write_blk: dquota write failed [ 390.358103][ T4043] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 390.369097][ T4043] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 390.381085][ T4043] Quota error (device loop1): write_blk: dquota write failed [ 390.383395][ T3380] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 390.388515][ T4043] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 390.388965][ T4043] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 390.407268][T18960] loop3: detected capacity change from 0 to 1024 [ 390.407977][T18960] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 390.413094][ T3380] hid-generic 0000:0000:0000.00A8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.472782][T18966] loop3: detected capacity change from 0 to 2048 [ 390.499838][T18962] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 390.531358][T18970] loop1: detected capacity change from 0 to 2048 [ 390.561875][T18972] loop0: detected capacity change from 0 to 2048 [ 390.568437][T18974] loop2: detected capacity change from 0 to 2048 [ 391.726279][T18999] loop1: detected capacity change from 0 to 2048 [ 391.759453][T18996] netlink: 'syz.0.4411': attribute type 3 has an invalid length. [ 391.832649][T18999] Alternate GPT is invalid, using primary GPT. [ 391.839012][T18999] loop1: p2 p3 p7 [ 391.862998][T18994] siw: device registration error -23 [ 391.919006][T19012] loop2: detected capacity change from 0 to 2048 [ 391.921964][ T3383] hid-generic 0000:0000:0000.00A9: unknown main item tag 0x0 [ 391.937752][T19014] loop3: detected capacity change from 0 to 1024 [ 391.948022][ T3383] hid-generic 0000:0000:0000.00A9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 391.964798][T19014] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 391.986900][T19020] hub 9-0:1.0: USB hub found [ 391.994923][T19015] netlink: 'syz.5.4414': attribute type 3 has an invalid length. [ 392.004408][T19015] siw: device registration error -23 [ 392.032328][T19020] hub 9-0:1.0: 8 ports detected [ 392.073695][T19028] loop3: detected capacity change from 0 to 2048 [ 392.089033][T19020] loop1: detected capacity change from 0 to 512 [ 392.096957][T19020] EXT4-fs: Ignoring removed nobh option [ 392.114374][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4418'. [ 392.171375][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4416: corrupted inode contents [ 392.198148][T19036] loop0: detected capacity change from 0 to 2048 [ 392.216360][T19020] EXT4-fs (loop1): Remounting filesystem read-only [ 392.335683][T19020] EXT4-fs (loop1): 1 truncate cleaned up [ 392.351863][ T1088] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 392.353658][T19020] ext4 filesystem being mounted at /851/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.363823][ T1088] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 392.392633][ T1088] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 392.712879][T19047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4423'. [ 392.732401][T19047] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 392.743975][T19047] bond0: (slave sit0): Error -95 calling set_mac_address [ 392.859694][T19050] netlink: 'syz.2.4424': attribute type 3 has an invalid length. [ 392.879685][T19050] siw: device registration error -23 [ 393.024808][T19054] siw: device registration error -23 [ 393.044606][T19061] loop3: detected capacity change from 0 to 2048 [ 393.077334][T19063] loop0: detected capacity change from 0 to 2048 [ 393.089144][T19061] Alternate GPT is invalid, using primary GPT. [ 393.096802][T19061] loop3: p2 p3 p7 [ 393.308253][ T9] hid-generic 0000:0000:0000.00AA: unknown main item tag 0x0 [ 393.317550][ T9] hid-generic 0000:0000:0000.00AA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 393.347828][T19074] loop3: detected capacity change from 0 to 1024 [ 393.373704][T19074] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 393.438301][T19078] loop1: detected capacity change from 0 to 2048 [ 393.472190][T19081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4434'. [ 393.494476][T19076] siw: device registration error -23 [ 393.531690][T19081] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 393.544471][T19081] bond0: (slave sit0): Error -95 calling set_mac_address [ 393.591695][T19089] loop3: detected capacity change from 0 to 2048 [ 393.751303][T19094] netlink: 'syz.2.4435': attribute type 3 has an invalid length. [ 393.764798][T19091] siw: device registration error -23 [ 394.015672][T19108] netlink: 'syz.2.4441': attribute type 3 has an invalid length. [ 394.050764][T19104] lo speed is unknown, defaulting to 1000 [ 394.109191][T19100] siw: device registration error -23 [ 394.122780][T19108] siw: device registration error -23 [ 394.191779][T19119] hub 9-0:1.0: USB hub found [ 394.214341][T19119] hub 9-0:1.0: 8 ports detected [ 394.243906][T19104] openvswitch: netlink: Message has 6 unknown bytes. [ 394.336483][ T3383] hid-generic 0000:0000:0000.00AB: unknown main item tag 0x0 [ 394.345924][ T3383] hid-generic 0000:0000:0000.00AB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.389378][T19125] loop3: detected capacity change from 0 to 2048 [ 394.398701][T19122] loop1: detected capacity change from 0 to 1024 [ 394.406543][T19122] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 394.486178][T19133] Cannot find set identified by id 0 to match [ 394.553599][T19123] siw: device registration error -23 [ 394.601571][T19140] loop2: detected capacity change from 0 to 2048 [ 394.647405][ T3383] hid-generic 0000:0000:0000.00AC: unknown main item tag 0x0 [ 394.656710][ T3383] hid-generic 0000:0000:0000.00AC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.674695][T19147] loop0: detected capacity change from 0 to 1024 [ 394.682636][T19147] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 394.707475][T19142] netlink: 'syz.1.4450': attribute type 3 has an invalid length. [ 394.732858][T19142] siw: device registration error -23 [ 394.929819][T19161] loop0: detected capacity change from 0 to 2048 [ 395.086893][T19153] lo speed is unknown, defaulting to 1000 [ 395.194517][T19168] lo speed is unknown, defaulting to 1000 [ 395.207093][ T36] hid-generic 0000:0000:0000.00AD: unknown main item tag 0x0 [ 395.231514][ T36] hid-generic 0000:0000:0000.00AD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.239940][T19173] loop0: detected capacity change from 0 to 1024 [ 395.247763][T19173] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 395.275652][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 395.275666][ T29] audit: type=1326 audit(1746100529.415:24436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19152 comm="syz.1.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 395.341010][ T29] audit: type=1326 audit(1746100529.445:24437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19152 comm="syz.1.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 395.360778][T19175] loop0: detected capacity change from 0 to 2048 [ 395.385021][ T29] audit: type=1326 audit(1746100529.525:24438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19152 comm="syz.1.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 395.411653][ T29] audit: type=1326 audit(1746100529.525:24439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.5.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 395.411747][T19153] openvswitch: netlink: Message has 6 unknown bytes. [ 395.417557][T19168] openvswitch: netlink: Message has 6 unknown bytes. [ 395.436665][ T29] audit: type=1326 audit(1746100529.525:24440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.5.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 395.477501][ T29] audit: type=1326 audit(1746100529.525:24441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.5.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 395.502269][ T29] audit: type=1326 audit(1746100529.525:24442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.5.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 395.527174][ T29] audit: type=1326 audit(1746100529.525:24443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.5.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 395.552353][ T29] audit: type=1326 audit(1746100529.525:24444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.5.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14259fe969 code=0x7ffc0000 [ 395.552623][ T29] audit: type=1326 audit(1746100529.555:24445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19152 comm="syz.1.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357142e969 code=0x7ffc0000 [ 395.728494][T19186] loop5: detected capacity change from 0 to 2048 [ 395.951989][ T3380] hid-generic 0000:0000:0000.00AE: unknown main item tag 0x0 [ 395.984502][ T3380] hid-generic 0000:0000:0000.00AE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.999539][T19197] loop2: detected capacity change from 0 to 1024 [ 396.007473][T19184] lo speed is unknown, defaulting to 1000 [ 396.020528][T19197] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 396.118987][T19200] Cannot find set identified by id 0 to match [ 396.158040][T19180] siw: device registration error -23 [ 396.371125][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4466'. [ 396.430097][T19184] openvswitch: netlink: Message has 6 unknown bytes. [ 396.451937][T19209] netlink: 'syz.2.4467': attribute type 3 has an invalid length. [ 396.478423][T19209] siw: device registration error -23 [ 396.533383][ T36] hid-generic 0000:0000:0000.00AF: unknown main item tag 0x0 [ 396.544158][T19216] loop2: detected capacity change from 0 to 1024 [ 396.573366][T19216] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 396.591723][ T36] hid-generic 0000:0000:0000.00AF: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.593657][T19218] loop3: detected capacity change from 0 to 2048 [ 396.684566][T19222] loop2: detected capacity change from 0 to 2048 [ 396.773290][T19229] Cannot find set identified by id 0 to match [ 396.923658][T19227] lo speed is unknown, defaulting to 1000 [ 396.941009][T19237] hub 9-0:1.0: USB hub found [ 396.946101][T19237] hub 9-0:1.0: 8 ports detected [ 396.958733][ T9] hid-generic 0000:0000:0000.00B0: unknown main item tag 0x0 [ 396.973594][T19236] loop0: detected capacity change from 0 to 1024 [ 396.982535][T19236] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 396.992778][ T9] hid-generic 0000:0000:0000.00B0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.043565][T19239] loop0: detected capacity change from 0 to 2048 [ 397.073602][T19227] openvswitch: netlink: Message has 6 unknown bytes. [ 397.174106][T19252] loop2: detected capacity change from 0 to 2048 [ 397.190490][T19245] siw: device registration error -23 [ 397.273224][T19256] loop5: detected capacity change from 0 to 512 [ 397.279729][T19256] EXT4-fs: Ignoring removed nobh option [ 397.319292][T19256] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4479: corrupted inode contents [ 397.341705][T19256] EXT4-fs (loop5): Remounting filesystem read-only [ 397.348295][T19256] EXT4-fs (loop5): 1 truncate cleaned up [ 397.355644][T19256] ext4 filesystem being mounted at /783/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.371903][ T4046] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 397.383819][ T4046] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 397.396465][ T4046] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 397.452316][ T9] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 397.460238][ T9] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.472377][T19262] loop3: detected capacity change from 0 to 1024 [ 397.482282][T19262] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 397.551709][T19266] loop3: detected capacity change from 0 to 2048 [ 397.573572][T19267] netlink: 'syz.5.4481': attribute type 3 has an invalid length. [ 397.592889][T19267] siw: device registration error -23 [ 397.645971][T19273] loop5: detected capacity change from 0 to 2048 [ 397.671410][ T9] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 397.681410][ T9] hid-generic 0000:0000:0000.00B2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.702041][T19277] loop0: detected capacity change from 0 to 1024 [ 397.708832][T19277] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 397.822323][T19283] loop0: detected capacity change from 0 to 2048 [ 398.121234][T19289] loop2: detected capacity change from 0 to 2048 [ 398.302494][T19293] netlink: 'syz.2.4488': attribute type 10 has an invalid length. [ 398.311624][T19293] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4488'. [ 398.404306][T19295] siw: device registration error -23 [ 398.422040][T19299] loop3: detected capacity change from 0 to 2048 [ 398.469739][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4491'. [ 398.487252][T19303] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 398.499392][T19303] bond0: (slave sit0): Error -95 calling set_mac_address [ 398.549430][ T23] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 398.566584][T19309] loop5: detected capacity change from 0 to 1024 [ 398.575037][ T23] hid-generic 0000:0000:0000.00B3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.589321][T19309] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 398.622665][T19307] netlink: 'syz.2.4493': attribute type 3 has an invalid length. [ 398.641511][T19307] siw: device registration error -23 [ 398.734710][T19321] loop5: detected capacity change from 0 to 2048 [ 398.739567][T19314] netlink: 'syz.0.4494': attribute type 3 has an invalid length. [ 398.815475][T19327] loop0: detected capacity change from 0 to 2048 [ 399.107801][T19338] netlink: 'syz.0.4500': attribute type 10 has an invalid length. [ 399.117122][T19338] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4500'. [ 399.137161][T19332] siw: device registration error -23 [ 399.164486][T19340] loop0: detected capacity change from 0 to 2048 [ 399.264742][T19342] siw: device registration error -23 [ 399.338239][ T9] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 399.349835][T19353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4504'. [ 399.366349][T19351] loop2: detected capacity change from 0 to 1024 [ 399.375661][T19349] loop1: detected capacity change from 0 to 2048 [ 399.383570][ T9] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.393617][T19351] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 399.411931][T19355] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 399.423662][T19355] bond0: (slave sit0): Error -95 calling set_mac_address [ 399.545483][T19366] loop3: detected capacity change from 0 to 2048 [ 399.576859][T19364] netlink: 'syz.2.4508': attribute type 3 has an invalid length. [ 399.619104][T19366] Alternate GPT is invalid, using primary GPT. [ 399.626676][T19366] loop3: p2 p3 p7 [ 399.672852][T19364] siw: device registration error -23 [ 399.725407][T19379] loop2: detected capacity change from 0 to 2048 [ 399.735012][T19380] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 399.816527][T19377] netlink: 'syz.3.4512': attribute type 3 has an invalid length. [ 399.892070][T19390] loop3: detected capacity change from 0 to 2048 [ 399.898911][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4513'. [ 399.991433][T19395] loop0: detected capacity change from 0 to 2048 [ 400.161426][ T3385] hid-generic 0000:0000:0000.00B5: unknown main item tag 0x0 [ 400.171386][ T3385] hid-generic 0000:0000:0000.00B5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 400.184526][T19400] loop3: detected capacity change from 0 to 1024 [ 400.192706][T19400] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 400.227332][T19403] Cannot find set identified by id 0 to match [ 400.245262][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4518'. [ 400.263498][T19405] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 400.274801][T19405] bond0: (slave sit0): Error -95 calling set_mac_address [ 400.409529][ T3385] hid-generic 0000:0000:0000.00B6: unknown main item tag 0x0 [ 400.417154][T19417] loop3: detected capacity change from 0 to 1024 [ 400.417431][T19417] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 400.422676][T19413] syz!: rxe_newlink: already configured on team_slave_0 [ 400.426691][ T3385] hid-generic 0000:0000:0000.00B6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 400.477325][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 400.477341][ T29] audit: type=1326 audit(1746100534.615:24647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.513016][ T29] audit: type=1326 audit(1746100534.645:24648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.538101][ T29] audit: type=1326 audit(1746100534.655:24649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.563062][ T29] audit: type=1326 audit(1746100534.655:24650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.587975][ T29] audit: type=1326 audit(1746100534.655:24651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.613030][ T29] audit: type=1326 audit(1746100534.655:24652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.613743][T19426] siw: device registration error -23 [ 400.636605][ T29] audit: type=1326 audit(1746100534.655:24653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.636642][ T29] audit: type=1326 audit(1746100534.655:24654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.636675][ T29] audit: type=1326 audit(1746100534.655:24655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.668650][T19425] loop3: detected capacity change from 0 to 2048 [ 400.697359][ T29] audit: type=1326 audit(1746100534.845:24656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.3.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a68dae969 code=0x7ffc0000 [ 400.754149][T19425] Alternate GPT is invalid, using primary GPT. [ 400.761884][T19425] loop3: p2 p3 p7 [ 400.783744][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4524'. [ 400.803936][T19431] loop1: detected capacity change from 0 to 2048 [ 400.804741][T19429] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 400.823529][T19429] bond0: (slave sit0): Error -95 calling set_mac_address [ 400.838390][T19434] loop3: detected capacity change from 0 to 2048 [ 400.863664][T19437] loop2: detected capacity change from 0 to 2048 [ 400.906309][T19442] loop0: detected capacity change from 0 to 1024 [ 400.914885][ T3383] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 400.923728][T19442] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 400.947576][ T3383] hid-generic 0000:0000:0000.00B7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 401.058296][T19449] loop3: detected capacity change from 0 to 2048 [ 401.141780][T19451] loop0: detected capacity change from 0 to 2048 [ 401.272018][T19459] Cannot find set identified by id 0 to match [ 401.469198][T19464] loop0: detected capacity change from 0 to 512 [ 401.478069][T19464] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4532: iget: bad extended attribute block 1 [ 401.491773][T19464] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4532: couldn't read orphan inode 15 (err -117) [ 401.687005][T19467] loop1: detected capacity change from 0 to 2048 [ 401.922343][T19477] netlink: 'syz.1.4536': attribute type 10 has an invalid length. [ 401.931537][T19477] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4536'. [ 401.964469][T19479] netlink: 'syz.2.4534': attribute type 3 has an invalid length. [ 401.977870][T19478] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 401.989681][T19479] siw: device registration error -23 [ 402.028198][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4537'. [ 402.038669][T19487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4538'. [ 402.048818][T19483] loop1: detected capacity change from 0 to 2048 [ 402.064250][T19487] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 402.076352][T19487] bond0: (slave sit0): Error -95 calling set_mac_address [ 402.086569][T19483] Alternate GPT is invalid, using primary GPT. [ 402.094204][T19483] loop1: p2 p3 p7 [ 402.125022][T19496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4541'. [ 402.143803][ T23] hid-generic 0000:0000:0000.00B8: unknown main item tag 0x0 [ 402.144565][T19496] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 402.163015][T19496] bond0: (slave sit0): Error -95 calling set_mac_address [ 402.163495][ T23] hid-generic 0000:0000:0000.00B8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.182757][T19499] loop1: detected capacity change from 0 to 1024 [ 402.194857][T19499] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 402.226995][T19503] loop2: detected capacity change from 0 to 2048 [ 402.312139][T19512] Cannot find set identified by id 0 to match [ 402.318371][T19513] loop0: detected capacity change from 0 to 2048 [ 402.549394][T19521] netlink: 'syz.3.4548': attribute type 3 has an invalid length. [ 402.577128][T19524] syz!: rxe_newlink: already configured on team_slave_0 [ 402.668471][T19532] hub 9-0:1.0: USB hub found [ 402.674461][T19532] hub 9-0:1.0: 8 ports detected [ 402.696638][T19532] loop3: detected capacity change from 0 to 512 [ 402.704797][T19532] EXT4-fs: Ignoring removed nobh option [ 402.723489][T19532] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4550: corrupted inode contents [ 402.736844][T19532] EXT4-fs (loop3): Remounting filesystem read-only [ 402.744762][T19532] EXT4-fs (loop3): 1 truncate cleaned up [ 402.752545][T19532] ext4 filesystem being mounted at /934/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.764494][ T4046] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 402.768914][T19533] netlink: 'syz.1.4551': attribute type 3 has an invalid length. [ 402.776355][ T4046] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 402.776861][ T4046] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 402.819216][T19538] siw: device registration error -23 [ 402.854085][T19543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4553'. [ 402.864928][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4552'. [ 402.872911][T19543] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 402.885275][T19543] bond0: (slave sit0): Error -95 calling set_mac_address [ 402.904836][T19540] loop5: detected capacity change from 0 to 2048 [ 402.925035][ T3385] hid-generic 0000:0000:0000.00B9: unknown main item tag 0x0 [ 402.925416][T19547] loop3: detected capacity change from 0 to 2048 [ 402.938651][T19549] loop1: detected capacity change from 0 to 1024 [ 402.947212][ T3385] hid-generic 0000:0000:0000.00B9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.947517][T19549] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 402.986626][T19540] Alternate GPT is invalid, using primary GPT. [ 402.994325][T19540] loop5: p2 p3 p7 [ 403.018710][ T36] hid-generic 0000:0000:0000.00BA: unknown main item tag 0x0 [ 403.033592][ T36] hid-generic 0000:0000:0000.00BA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 403.047605][T19553] loop1: detected capacity change from 0 to 1024 [ 403.061599][T19553] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 403.083415][T19556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4557'. [ 403.118066][T19556] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 403.129746][T19556] bond0: (slave sit0): Error -95 calling set_mac_address [ 403.165910][T19562] Cannot find set identified by id 0 to match [ 403.255027][T19564] syz!: rxe_newlink: already configured on team_slave_0 [ 403.285284][T19574] loop1: detected capacity change from 0 to 2048 [ 403.299396][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4562'. [ 403.481018][T19580] netlink: 'syz.2.4564': attribute type 3 has an invalid length. [ 403.495539][T19580] siw: device registration error -23 [ 403.517128][T19585] loop5: detected capacity change from 0 to 2048 [ 403.551397][T19589] loop2: detected capacity change from 0 to 2048 [ 403.764134][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4567'. [ 403.784376][T19594] loop5: detected capacity change from 0 to 2048 [ 403.804695][ T3385] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 403.812652][T19598] loop3: detected capacity change from 0 to 1024 [ 403.812941][T19598] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 403.823618][T19594] Alternate GPT is invalid, using primary GPT. [ 403.829640][ T3385] hid-generic 0000:0000:0000.00BB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 403.836935][T19594] loop5: p2 p3 p7 [ 403.875083][T19600] netlink: 'syz.3.4569': attribute type 10 has an invalid length. [ 403.884197][T19600] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4569'. [ 403.926552][T19604] loop3: detected capacity change from 0 to 2048 [ 403.973095][T19602] netlink: 'syz.5.4570': attribute type 3 has an invalid length. [ 403.998688][T19602] siw: device registration error -23 [ 404.101841][T19613] loop5: detected capacity change from 0 to 2048 [ 404.215686][T19622] ================================================================== [ 404.223784][T19622] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 404.231584][T19622] [ 404.233896][T19622] write to 0xffffea00042cdd98 of 8 bytes by task 19613 on cpu 1: [ 404.241596][T19622] __filemap_remove_folio+0x1a5/0x2a0 [ 404.247047][T19622] filemap_remove_folio+0x6d/0x1d0 [ 404.252221][T19622] read_pages+0x1c3/0x480 [ 404.256547][T19622] page_cache_ra_unbounded+0x347/0x380 [ 404.262000][T19622] page_cache_sync_ra+0x689/0x6a0 [ 404.267018][T19622] filemap_get_pages+0x2d0/0x1160 [ 404.272042][T19622] filemap_read+0x237/0x990 [ 404.276582][T19622] generic_file_read_iter+0x79/0x330 [ 404.281865][T19622] ext4_file_read_iter+0x1cc/0x290 [ 404.286994][T19622] copy_splice_read+0x3c1/0x5f0 [ 404.291837][T19622] splice_direct_to_actor+0x290/0x680 [ 404.297200][T19622] do_splice_direct+0xda/0x150 [ 404.301959][T19622] do_sendfile+0x380/0x640 [ 404.306393][T19622] __x64_sys_sendfile64+0x105/0x150 [ 404.311619][T19622] x64_sys_call+0xb39/0x2fb0 [ 404.316207][T19622] do_syscall_64+0xd0/0x1a0 [ 404.320698][T19622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.326584][T19622] [ 404.328897][T19622] read to 0xffffea00042cdd98 of 8 bytes by task 19622 on cpu 0: [ 404.336517][T19622] folio_mapping+0xa1/0x120 [ 404.341029][T19622] lru_add+0x80/0x430 [ 404.345004][T19622] folio_batch_move_lru+0x174/0x230 [ 404.350198][T19622] lru_add_drain_cpu+0x77/0x250 [ 404.355054][T19622] __folio_batch_release+0x44/0xb0 [ 404.360167][T19622] file_write_and_wait_range+0x241/0x2c0 [ 404.365892][T19622] generic_buffers_fsync_noflush+0x45/0x120 [ 404.371779][T19622] ext4_sync_file+0x1ab/0x690 [ 404.376463][T19622] vfs_fsync_range+0x10a/0x130 [ 404.381221][T19622] ext4_buffered_write_iter+0x34f/0x3c0 [ 404.386762][T19622] ext4_file_write_iter+0xdbf/0xf00 [ 404.391960][T19622] iter_file_splice_write+0x5ef/0x970 [ 404.397321][T19622] direct_splice_actor+0x153/0x2a0 [ 404.402426][T19622] splice_direct_to_actor+0x30f/0x680 [ 404.407791][T19622] do_splice_direct+0xda/0x150 [ 404.412545][T19622] do_sendfile+0x380/0x640 [ 404.416967][T19622] __x64_sys_sendfile64+0x105/0x150 [ 404.422166][T19622] x64_sys_call+0xb39/0x2fb0 [ 404.426748][T19622] do_syscall_64+0xd0/0x1a0 [ 404.431245][T19622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.437132][T19622] [ 404.439450][T19622] value changed: 0xffff888128ec8fe8 -> 0x0000000000000000 [ 404.446550][T19622] [ 404.448863][T19622] Reported by Kernel Concurrency Sanitizer on: [ 404.455025][T19622] CPU: 0 UID: 0 PID: 19622 Comm: syz.5.4573 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 404.467527][T19622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 404.477613][T19622] ================================================================== [ 404.494592][T19623] syz!: rxe_newlink: already configured on team_slave_0 [ 404.519482][ T3312] EXT4-fs unmount: 174 callbacks suppressed [ 404.519493][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.897998][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.126870][ T4784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.