last executing test programs: 10m0.546972157s ago: executing program 2 (id=960): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) 9m58.915689869s ago: executing program 2 (id=968): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 9m57.813852737s ago: executing program 2 (id=972): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r7], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000040000000400000021bf00000400", @ANYRES32, @ANYBLOB="00000000e1ffff0600000000004000000000000075cedd6c2f62fbf4edda9fb19511d6fd05e2f562437dbdbdc835c4b09829fc8c7b2dbb6c1ae3abea6cb0e1ec586bc13a", @ANYRES32, @ANYBLOB="000000000400"/27], 0x50) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 9m56.742614295s ago: executing program 2 (id=977): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) setreuid(0x0, 0x0) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9m56.416748669s ago: executing program 2 (id=980): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 9m53.596635504s ago: executing program 2 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000400000008000000080000000000", @ANYBLOB="0000fea4ffffe8ffffeffffffffd5f1f"], 0x48) 9m53.596262604s ago: executing program 32 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000400000008000000080000000000", @ANYBLOB="0000fea4ffffe8ffffeffffffffd5f1f"], 0x48) 6.089226555s ago: executing program 4 (id=4803): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000780)=""/233) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40804) 5.05199217s ago: executing program 5 (id=4809): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x2, 0x3, 0x9) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) syslog(0x4, 0xffffffffffffffff, 0x6) sendto$inet6(r1, &(0x7f00000005c0)="aa", 0x1, 0x4008891, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) sync() 4.583377691s ago: executing program 4 (id=4811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/key-users\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000800)="dbc20a456179a33d0d064e98295e7f884d830069e0683dc27ae5819dc286df86a38770b34995f7828865dba35631b7feff93c549eea6a9d2ec835ddc54555bed1dda9042550801c6cd5002f8e27999891f77e118a68908a78158d4157ea5502c5eed708425626f3278e7ce3600d8a32be1c831aac8b36408ca96d7b8a67882afc26529df31137090ca170b74a4d8f8545496515a2ea27512e14fe743722911b939bfe4d2ecbe8aa539b2e70f0d29daf00f4e8f8874606418c92afb3c2fae71d0575626ca678118004af76cf3", 0xcc, 0x20004000, 0x0, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r12, r11, 0x0, 0x2) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 4.415155888s ago: executing program 1 (id=4815): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000580)="43a1c81ed450fb1401ccfc50d24088d59754bbdecc63454596797dbc782cbbd41be234107c3d2bedca3d7219ac1a6e92ce533652cd7aa90e13c2bf6fd8f5b754d81b957ec263e21ac4dec1b358ae90883c05719c26bf978d2f093a9e46c363c6472c3825c08e3e53e534b63e78d5196f35e77a1ed66dfaf98752248f23472451c07ea67a586d03084edfbcd7f0040ac4cab5aaf052694c7a00ca53ba044b4c220b", &(0x7f00000004c0)=""/83, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.14526824s ago: executing program 0 (id=4816): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r3}, 0x18) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000351effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x803}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.120139341s ago: executing program 5 (id=4817): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x1e08, 0x40000000, 0x0, 0x8, 0x103fb, 0x1fb, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000950273ab263cb1ae9aa0a25a84dd364c451fd3c6d92f79d01419bfe233bc736c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000060000000000001811000000009bf8e7dc9059329ba11f68edec31c8bd05bca16252cf25cb117fb70bc2a3db0d8a5f1c32fda9eefc6454e2c37a24e9e6f4a42cf8e5c21d647639eaa35a98494980b601e6f2379a51e374fdc5cc", @ANYRES32=r4, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) openat(0xffffffffffffffff, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.699305799s ago: executing program 4 (id=4819): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x1e08, 0x40000000, 0x0, 0x8, 0x103fb, 0x1fb, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000950273ab263cb1ae9aa0a25a84dd364c451fd3c6d92f79d01419bfe233bc736c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="086afaf0ca047623cbe8000000"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000060000000000001811000000009bf8e7dc9059329ba11f68edec31c8bd05bca16252cf25cb117fb70bc2a3db0d8a5f1c32fda9eefc6454e2c37a24e9e6f4a42cf8e5c21d647639eaa35a98494980b601e6f2379a51e374fdc5cc", @ANYRES32=r4, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) openat(0xffffffffffffffff, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.69697186s ago: executing program 0 (id=4820): r0 = syz_io_uring_setup(0x2806, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x1000}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) unshare(0x62040200) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 3.552659485s ago: executing program 5 (id=4822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/key-users\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000800)="dbc20a456179a33d0d064e98295e7f884d830069e0683dc27ae5819dc286df86a38770b34995f7828865dba35631b7feff93c549eea6a9d2ec835ddc54555bed1dda9042550801c6cd5002f8e27999891f77e118a68908a78158d4157ea5502c5eed708425626f3278e7ce3600d8a32be1c831aac8b36408ca96d7b8a67882afc26529df31137090ca170b74a4d8f8545496515a2ea27512e14fe743722911b939bfe4d2ecbe8aa539b2e70f0d29daf00f4e8f8874606418c92afb3c2fae71d0575626ca678118004af76cf3", 0xcc, 0x20004000, 0x0, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r10, r9, 0x0, 0x2) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.519181537s ago: executing program 1 (id=4824): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x1e08, 0x40000000, 0x0, 0x8, 0x103fb, 0x1fb, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000950273ab263cb1ae9aa0a25a84dd364c451fd3c6d92f79d01419bfe233bc736c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="086afaf0ca047623cbe8000000"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000060000000000001811000000009bf8e7dc9059329ba11f68edec31c8bd05bca16252cf25cb117fb70bc2a3db0d8a5f1c32fda9eefc6454e2c37a24e9e6f4a42cf8e5c21d647639eaa35a98494980b601e6f2379a51e374fdc5cc", @ANYRES32=r4, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) openat(0xffffffffffffffff, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.336312938s ago: executing program 4 (id=4825): r0 = socket$inet(0x2, 0xa, 0x1) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x10) 1.829646851s ago: executing program 0 (id=4826): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.707947546s ago: executing program 3 (id=4827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)="546b17c83c26ec3373", 0x9}}, 0x4004) close_range(r2, 0xffffffffffffffff, 0x0) 1.707314326s ago: executing program 4 (id=4828): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x400000000000d, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x404, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3d4, 0x2, [@TCA_BASIC_ACT={0x3d0, 0x3, [@m_vlan={0xf4, 0x19, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x1, 0x7, 0x7, 0x7f}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9c8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x83, 0x6, "bfe6ef7ea9c15fc52228b2390759206774e8277d9bfd57df8beea7b6d4edcc73571114a61d50e9a12674419312a90ce3d5fc91af9a0620de80c408ac6e101773c32403d1e85a114ec1a2f1f32833ddd04a999f11074220cb8057c684b275b104b046c648dcf7b668bdf75478c713ee14b4df6c2a2cf30cac48438f3c120e1e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x168, 0xb, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xc, 0x8c, 0x0, 0x7}, {0x2, 0xc, 0x3a, 0x3}, {0x5, 0x4, 0x3, 0x101}, {0x5, 0xf8, 0x79, 0x6}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x40, 0x10000000, 0x4, 0x8}}]}, {0xcb, 0x6, "b42b0d383319228417146cf6d3cce0d92c9f557427756d11022ed61ac13c4f4bf8e214215e1a871dbbf668dae5625dce75c85968d689286a3576402db9912aa9e1159ddcd297cb757c82723f893bebe6f292ac6348c564fbe70ef7fae1a4b6f402597ed175136e6717d96707526aa802f1885b3f13d372cfe64ebe94db0de4f5006857c1059d8c331d6fecf2df5a71df024bf5afe873b08e031ce62a7885524172bd178a6b82821d94afc33a9929b3b35c46cb9a400a7fb21262cc292eaf14d6257cad0f40a467"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x170, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x6, 0xffffffffffffffff, 0x4, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffc, 0x6, 0x3, 0x9, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe513, 0x10000, 0x1, 0x4, 0x1}}]}, {0xf9, 0x6, "0c25bc569deec2e61f61d4dd839b72ca7165cc529b72fc3dd4995062668f237e90441ae2a5205416b8d0dfe7520931ae91451559b31ec66bb9d782e415b2f0ca8eb012c60f5aa76e9b593634648eebbed6e44d0d3d9b19a42d2bf4440a16b737c58ddb3a7913242f32d6a9b2af5919ab39138784a6819db30f107f3b6a78981fe71823d6d0b919b5f0088011341469692d74ae604ee4c5097432ddd3f860e7b5b11d24e1f0af5ae1a045f5ddcaeaf8fb2d36fed3038772a60ee44308920f08e764ea447e5340a22f41580366d31fb4f8a8c76c9f3fbdc9cc8d981fe2c0f8cf7e51c522252da9653ae29195b8f191c554b9f44d891e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x404}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) ioprio_set$pid(0x1, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 1.672430477s ago: executing program 5 (id=4829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x2000000b}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000001600)="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", 0x114) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="21000000000000d1d8b0070000", @ANYRESOCT, @ANYBLOB="000000000000000000000000b82bae4c00000000", @ANYRES32=0x0, @ANYBLOB="08f61b5747b0c42b5fca35896f24a42285092c65bc1a73fba1cbc4953225f0564e4dc70457cf4ab8e64df734e569cdb46d871e37b819c224fdbcf8f55b6c375209eb9bbdd4c9289b8dcd1e7c3ec8092ef73d0b5870ced6ba6a6e09bd99fb4409aeaff4459135a75da714d0a3253227010cd49a50a52709af965ab9212989f17d2b4ea6e297780d2dee9850", @ANYRESDEC, @ANYRESOCT=r3], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000100)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x200000d1) close_range(r9, 0xffffffffffffffff, 0x0) 1.556119202s ago: executing program 1 (id=4830): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffffffffffff8001}, 0x18) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee800", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r9}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) 1.554220043s ago: executing program 3 (id=4831): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000b40)="56e0f578b9be96fd5d41d7eed4549a815b589d4428ac1ee2", 0x18}], 0x1}}], 0x1, 0x4800) 1.433427288s ago: executing program 3 (id=4832): r0 = memfd_secret(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84e7}, 0x94) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x39de}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003cacd44079ac740c6056290fdcf01020301090212000197e03001"], 0x0) 1.140128171s ago: executing program 3 (id=4835): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000c00)={0x5bc, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x444, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "7c2ee7f364a4f0253ef06e87d978d3de1b24b609e798e285c47a452d15ce22e7fddc7222a9b536e895da1543db7f297a73d745c17078ea5af3168f9ff7d95a49019629cb10ab03b44bf41dbac75e87670cab95094a4174a23180e735ed8570b5e7959e9ea8453689241b8f730e9954a261a2f897f2082a2a9e916f62de6fd5de88a2f27dc1805371ec6edfbb06f994449019db5001e14aa52990ddde01639660b3c47b83d2389fcdd422992c2eac800858"}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "a48b6a9fa714cbc02e2ed0531d43e2dd7d3f0ba67e3f6b8c86a1c6a01f3c96a843f38290b0bffe68c2bee589a1e60183803ed43d14cef15f632e18c025090991e5e9b02bdcc909e7f10f18df80e501837d4454bff17ef05d9c12439bb465ce7a45069dc67fcce7532d403122546738544c7bfff5b94f095baec3c8e5c08e8f2f5dd94e7f47d573385c3c2e10f6d2b4d0bb63eae1c5d281be73c4cb14e18ff69457cfadd0a6bd35aceadf35f14d8891c4d4e9e6a7c5ba0cf51b58195a022b5136"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':$#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%!\x02[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-(%]\\\\@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-/$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{!.*.:\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(:{$\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "25cbb9aea0c071a49d84083e2b12a2da83727f0fa1ac0e9fb517dcf06d01"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}, @ETHTOOL_A_FEATURES_HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x34, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "5fa952a216676f215372fbcba30e498e6cc59adae658b1ba70b6390c2792b6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x4000006}, 0x20000000) 1.139634551s ago: executing program 3 (id=4836): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000580)="43a1c81ed450fb1401ccfc50d24088d59754bbdecc63454596797dbc782cbbd41be234107c3d2bedca3d7219ac1a6e92ce533652cd7aa90e13c2bf6fd8f5b754d81b957ec263e21ac4dec1b358ae90883c05719c26bf978d2f093a9e46c363c6472c3825c08e3e53e534b63e78d5196f35e77a1ed66dfaf98752248f23472451c07ea67a586d03084edfbcd7f0040ac4cab5aaf052694c7a00ca53ba044b4c220b", &(0x7f00000004c0)=""/83, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 923.41482ms ago: executing program 0 (id=4837): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000580)="43a1c81ed450fb1401ccfc50d24088d59754bbdecc63454596797dbc782cbbd41be234107c3d2bedca3d7219ac1a6e92ce533652cd7aa90e13c2bf6fd8f5b754d81b957ec263e21ac4dec1b358ae90883c05719c26bf978d2f093a9e46c363c6472c3825c08e3e53e534b63e78d5196f35e77a1ed66dfaf98752248f23472451c07ea67a586d03084edfbcd7f0040ac4cab5aaf052694c7a00ca53ba044b4c220b", &(0x7f00000004c0)=""/83, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 673.847451ms ago: executing program 4 (id=4838): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x400000000000d, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x3fc, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3cc, 0x2, [@TCA_BASIC_ACT={0x3c8, 0x3, [@m_vlan={0xf8, 0x19, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x1, 0x7, 0x7, 0x7f}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9c8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x87, 0x6, "bfe6ef7ea9c15fc52228b2390759206774e8277d9bfd57df8beea7b6d4edcc73571114a61d50e9a12674419312a90ce3d5fc91af9a0620de80c408ac6e101773c32403d1e85a114ec1a2f1f32833ddd04a999f11074220cb8057c684b275b104b046c648dcf7b668bdf75478c713ee14b4df6c2a2cf30cac48438f3c120e1ef05732db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x15c, 0xb, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xc, 0x8c, 0x0, 0x7}, {0x2, 0xc, 0x3a, 0x3}, {0x5, 0x4, 0x3, 0x101}, {0x5, 0xf8, 0x79, 0x6}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x40, 0x10000000, 0x4, 0x8}}]}, {0xbf, 0x6, "b42b0d383319228417146cf6d3cce0d92c9f557427756d11022ed61ac13c4f4bf8e214215e1a871dbbf668dae5625dce75c85968d689286a3576402db9912aa9e1159ddcd297cb757c82723f893bebe6f292ac6348c564fbe70ef7fae1a4b6f402597ed175136e6717d96707526aa802f1885b3f13d372cfe64ebe94db0de4f5006857c1059d8c331d6fecf2df5a71df024bf5afe873b08e031ce62a7885524172bd178a6b82821d94afc33a9929b3b35c46cb9a400a7fb21262cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x170, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x6, 0xffffffffffffffff, 0x4, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffc, 0x6, 0x3, 0x9, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe513, 0x10000, 0x1, 0x4, 0x1}}]}, {0xf9, 0x6, "0c25bc569deec2e61f61d4dd839b72ca7165cc529b72fc3dd4995062668f237e90441ae2a5205416b8d0dfe7520931ae91451559b31ec66bb9d782e415b2f0ca8eb012c60f5aa76e9b593634648eebbed6e44d0d3d9b19a42d2bf4440a16b737c58ddb3a7913242f32d6a9b2af5919ab39138784a6819db30f107f3b6a78981fe71823d6d0b919b5f0088011341469692d74ae604ee4c5097432ddd3f860e7b5b11d24e1f0af5ae1a045f5ddcaeaf8fb2d36fed3038772a60ee44308920f08e764ea447e5340a22f41580366d31fb4f8a8c76c9f3fbdc9cc8d981fe2c0f8cf7e51c522252da9653ae29195b8f191c554b9f44d891e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) ioprio_set$pid(0x1, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 632.397512ms ago: executing program 1 (id=4839): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x1e08, 0x40000000, 0x0, 0x8, 0x103fb, 0x1fb, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000950273ab263cb1ae9aa0a25a84dd364c451fd3c6d92f79d01419bfe233bc736c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000060000000000001811000000009bf8e7dc9059329ba11f68edec31c8bd05bca16252cf25cb117fb70bc2a3db0d8a5f1c32fda9eefc6454e2c37a24e9e6f4a42cf8e5c21d647639eaa35a98494980b601e6f2379a51e374fdc5cc", @ANYRES32=r4, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) openat(0xffffffffffffffff, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) 364.478504ms ago: executing program 1 (id=4840): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000580)="43a1c81ed450fb1401ccfc50d24088d59754bbdecc63454596797dbc782cbbd41be234107c3d2bedca3d7219ac1a6e92ce533652cd7aa90e13c2bf6fd8f5b754d81b957ec263e21ac4dec1b358ae90883c05719c26bf978d2f093a9e46c363c6472c3825c08e3e53e534b63e78d5196f35e77a1ed66dfaf98752248f23472451c07ea67a586d03084edfbcd7f0040ac4cab5aaf052694c7a00ca53ba044b4c220b", &(0x7f00000004c0)=""/83, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 280.006128ms ago: executing program 3 (id=4841): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x2, 0x3, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) lstat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) syslog(0x4, 0xffffffffffffffff, 0x6) sendto$inet6(r2, &(0x7f00000005c0)="aa", 0x1, 0x4008891, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sync() 178.039092ms ago: executing program 1 (id=4842): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x74a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r9, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 52.104838ms ago: executing program 0 (id=4843): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=4844): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080c20000fd0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) msgget$private(0x0, 0x228) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='ext4_nfs_commit_metadata\x00', r3, 0x0, 0x40}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)="bd335a1dca247bb3b919c91c3273d032a2e4e9654ee5a17af639338cce3981338bd3a5c97853902d6a082841d8dcd40f5cc1d584d7e12df333089a9e67b432c53b6d118442d7a7aa5aa61d83b641db338891803f8f9a9da60297a13f75bc6d600004af8801", &(0x7f00000002c0)="f7b1ecf59876d753e70d0018aa1af0a75e7338cffc20d6e0543a16819f45ac0ddeea586b498b3fdb4694f480b98407851d2045edec3ba41e800ab434cecc7a349218ddb37e03e9060286cdf07bf9da7a10de4e5ce9d0d0fe2c58d34126a1b64473f3e23b97040c26038f7ddb60eb0991dc340103472e8e73e2", 0xffffd6c0, r5}, 0x38) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x0, 0x0, 0x0, 0x13, 0x1, 0x8}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x2}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0043"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): (2000000174.230:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.549124][ T29] audit: type=1326 audit(2000000174.230:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.572983][ T29] audit: type=1326 audit(2000000174.230:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.596662][ T29] audit: type=1326 audit(2000000174.230:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.620931][ T29] audit: type=1326 audit(2000000174.230:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.644764][ T29] audit: type=1326 audit(2000000174.230:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.668603][ T29] audit: type=1326 audit(2000000174.230:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 710.911470][T16460] EXT4-fs (loop0): 1 truncate cleaned up [ 710.932147][T16460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.953275][T16480] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3956'. [ 711.958407][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 712.012822][T16517] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3970'. [ 712.081165][ T29] audit: type=1400 audit(2000000175.780:2827): avc: denied { bind } for pid=16519 comm="syz.3.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 712.823723][T16540] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3979'. [ 712.935966][T16544] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3981'. [ 713.484447][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.562286][T16565] usb usb8: usbfs: process 16565 (syz.4.3992) did not claim interface 0 before use [ 713.604370][T16572] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3993'. [ 713.630111][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3990'. [ 713.825530][T16581] lo speed is unknown, defaulting to 1000 [ 713.877388][T16581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.886106][T16581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.410673][ T29] audit: type=1400 audit(2000000179.110:2828): avc: denied { connect } for pid=16616 comm="syz.3.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 715.447801][ T29] audit: type=1400 audit(2000000179.140:2829): avc: denied { write } for pid=16616 comm="syz.3.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 715.472325][T16620] usb usb8: usbfs: process 16620 (syz.3.4009) did not claim interface 0 before use [ 715.952182][ T29] audit: type=1400 audit(2000000179.660:2830): avc: denied { read } for pid=16629 comm="syz.1.4012" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 717.817744][T16672] loop0: detected capacity change from 0 to 512 [ 717.941628][T16672] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.4029: corrupted xattr block 95: invalid header [ 717.962695][T16672] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4029: bg 0: block 7: invalid block bitmap [ 717.977361][T16672] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 717.987019][T16672] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #11: comm syz.0.4029: corrupted xattr block 95: invalid header [ 718.001018][T16672] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 718.011630][T16672] EXT4-fs (loop0): 1 orphan inode deleted [ 718.020756][T16672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.220503][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.342713][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.446628][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.242966][T16687] lo speed is unknown, defaulting to 1000 [ 719.290858][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.299754][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.409878][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.552844][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.006905][ T154] bridge_slave_1: left allmulticast mode [ 720.012768][ T154] bridge_slave_1: left promiscuous mode [ 720.018479][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.054338][T16721] loop3: detected capacity change from 0 to 512 [ 720.068727][ T154] bridge_slave_0: left allmulticast mode [ 720.074638][ T154] bridge_slave_0: left promiscuous mode [ 720.080501][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.090241][T16721] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.4044: corrupted xattr block 95: invalid header [ 720.113230][T16721] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4044: bg 0: block 7: invalid block bitmap [ 720.126831][T16721] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 720.142352][T16721] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.4044: corrupted xattr block 95: invalid header [ 720.157391][T16721] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 720.167619][T16721] EXT4-fs (loop3): 1 orphan inode deleted [ 720.174097][T16721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.189227][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.238815][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.247915][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.262859][ T154] bond0 (unregistering): (slave team0): Releasing backup interface [ 720.274383][ T154] bond0 (unregistering): Released all slaves [ 720.511861][ T154] tipc: Disabling bearer [ 720.517161][ T154] tipc: Left network mode [ 720.526411][ T154] hsr_slave_0: left promiscuous mode [ 720.532820][ T154] hsr_slave_1: left promiscuous mode [ 720.692856][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.700748][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.755682][ T154] veth1_macvtap: left promiscuous mode [ 720.762008][ T154] veth0_macvtap: left promiscuous mode [ 720.768005][ T154] veth1_vlan: left promiscuous mode [ 721.345066][ T154] team0 (unregistering): Port device team_slave_1 removed [ 721.356970][ T154] team0 (unregistering): Port device team_slave_0 removed [ 721.379661][T16742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4049'. [ 721.480059][T16693] lo speed is unknown, defaulting to 1000 [ 721.688393][T16693] chnl_net:caif_netlink_parms(): no params data found [ 721.696260][T16756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4055'. [ 721.717708][T16758] loop4: detected capacity change from 0 to 512 [ 721.738284][T16758] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.4056: corrupted xattr block 95: invalid header [ 721.753381][T16758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4056: bg 0: block 7: invalid block bitmap [ 721.767084][T16758] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 721.776064][T16758] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.4056: corrupted xattr block 95: invalid header [ 721.789880][T16758] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 721.799049][T16758] EXT4-fs (loop4): 1 orphan inode deleted [ 721.807231][T16758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.846914][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.854683][T16693] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.862373][T16693] bridge_slave_0: entered allmulticast mode [ 721.869096][T16693] bridge_slave_0: entered promiscuous mode [ 722.348306][T16693] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.355539][T16693] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.365249][T16693] bridge_slave_1: entered allmulticast mode [ 722.372226][T16693] bridge_slave_1: entered promiscuous mode [ 722.435490][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.549412][T16693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.582989][T16693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.689689][T16782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4061'. [ 722.708877][T16783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4060'. [ 722.985646][T16693] team0: Port device team_slave_0 added [ 722.993168][T16693] team0: Port device team_slave_1 added [ 723.015227][T16693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.023386][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.053996][T16693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.179621][T16693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.189175][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.234939][T16693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.508524][T16800] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4067'. [ 723.519662][ T29] audit: type=1326 audit(2000000186.960:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.545463][ T29] audit: type=1326 audit(2000000186.960:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.574259][ T29] audit: type=1326 audit(2000000186.960:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.599037][ T29] audit: type=1326 audit(2000000186.960:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.623225][ T29] audit: type=1326 audit(2000000186.960:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.648943][ T29] audit: type=1326 audit(2000000186.960:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.673402][ T29] audit: type=1326 audit(2000000186.960:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.699155][ T29] audit: type=1326 audit(2000000186.960:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.723392][ T29] audit: type=1326 audit(2000000186.960:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.750127][ T29] audit: type=1326 audit(2000000186.960:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 723.914850][T16693] hsr_slave_0: entered promiscuous mode [ 724.029479][T16693] hsr_slave_1: entered promiscuous mode [ 724.036619][T16693] debugfs: 'hsr0' already exists in 'hsr' [ 724.046307][T16693] Cannot create hsr debugfs directory [ 724.067361][T16804] debugfs: 'ttyS3' already exists in 'caif_serial' [ 724.459536][T16816] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4072'. [ 724.544555][T16818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4073'. [ 724.587229][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4074'. [ 724.828178][T16828] netlink: 'syz.5.4075': attribute type 3 has an invalid length. [ 724.973659][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 725.212178][T16693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.301604][T16693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.387427][T16693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 725.404630][T16848] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4083'. [ 725.472460][T16693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.540986][T16693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.556893][T16693] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.567596][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.577359][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.589408][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.597155][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.184637][T16863] lo speed is unknown, defaulting to 1000 [ 726.246927][T16693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.344041][T16693] veth0_vlan: entered promiscuous mode [ 726.353316][T16693] veth1_vlan: entered promiscuous mode [ 726.369770][T16693] veth0_macvtap: entered promiscuous mode [ 726.377903][T16693] veth1_macvtap: entered promiscuous mode [ 726.389711][T16693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.416802][T16693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.434689][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.457877][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.485785][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.502704][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.532634][T16891] loop4: detected capacity change from 0 to 1024 [ 726.540010][T16891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.579362][T16891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.698171][T16902] loop3: detected capacity change from 0 to 512 [ 726.719535][T16899] netlink: 'syz.4.4092': attribute type 30 has an invalid length. [ 726.742198][T16902] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.4093: corrupted xattr block 95: invalid header [ 726.756678][T16902] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4093: bg 0: block 7: invalid block bitmap [ 726.785925][T16902] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 726.961623][T16902] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.4093: corrupted xattr block 95: invalid header [ 726.993559][T16902] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 727.043174][T16902] EXT4-fs (loop3): 1 orphan inode deleted [ 727.067182][T16902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.173666][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.207312][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 727.429024][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.472199][T16915] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4095'. [ 728.383832][T16928] loop1: detected capacity change from 0 to 8192 [ 728.441546][T16928] loop1: p1 < > p2 < > p3 p4 < > [ 728.446620][T16928] loop1: partition table partially beyond EOD, truncated [ 728.458424][T16928] loop1: p1 start 67108864 is beyond EOD, truncated [ 728.465315][T16928] loop1: p2 start 4278190080 is beyond EOD, truncated [ 728.472917][T16928] loop1: p3 start 100859904 is beyond EOD, truncated [ 728.661140][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 728.661176][ T29] audit: type=1326 audit(2000000192.340:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.691362][ T29] audit: type=1326 audit(2000000192.340:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.715960][ T29] audit: type=1326 audit(2000000192.340:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.739958][ T29] audit: type=1326 audit(2000000192.340:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.765569][ T29] audit: type=1326 audit(2000000192.340:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1f4e63ecc7 code=0x7ffc0000 [ 728.790172][ T29] audit: type=1326 audit(2000000192.340:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.814525][ T29] audit: type=1326 audit(2000000192.340:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.838846][ T29] audit: type=1326 audit(2000000192.340:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f4e63de3a code=0x7ffc0000 [ 728.864016][ T29] audit: type=1326 audit(2000000192.340:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1f4e63e3aa code=0x7ffc0000 [ 728.888897][ T29] audit: type=1326 audit(2000000192.340:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.1.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e63f749 code=0x7ffc0000 [ 729.132009][T16943] lo speed is unknown, defaulting to 1000 [ 729.298725][T16948] loop3: detected capacity change from 0 to 1024 [ 729.334123][T16948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.411282][T16948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.527024][T16953] wireguard0: entered promiscuous mode [ 729.532708][T16953] wireguard0: entered allmulticast mode [ 729.603458][T16959] loop0: detected capacity change from 0 to 164 [ 729.623832][T16955] netlink: 'syz.3.4106': attribute type 30 has an invalid length. [ 729.645291][T16959] syz.0.4108: attempt to access beyond end of device [ 729.645291][T16959] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 729.661248][T16959] syz.0.4108: attempt to access beyond end of device [ 729.661248][T16959] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 729.721472][T16961] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4109'. [ 729.851862][T16967] netlink: 'syz.4.4111': attribute type 3 has an invalid length. [ 729.967841][T16972] loop5: detected capacity change from 0 to 8192 [ 730.111548][T16972] loop5: p1 < > p2 < > p3 p4 < > [ 730.120755][T16972] loop5: partition table partially beyond EOD, truncated [ 730.130158][T16972] loop5: p1 start 67108864 is beyond EOD, truncated [ 730.138822][T16972] loop5: p2 start 4278190080 is beyond EOD, truncated [ 730.146505][T16972] loop5: p3 start 100859904 is beyond EOD, truncated [ 730.398113][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.495360][T16991] netlink: 'syz.1.4120': attribute type 3 has an invalid length. [ 731.556650][T16997] netlink: 'syz.1.4123': attribute type 3 has an invalid length. [ 731.577408][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 731.589340][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4124'. [ 731.752830][T17007] loop5: detected capacity change from 0 to 1024 [ 731.765164][T17007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 731.800002][T17007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.819924][T17007] netlink: 'syz.5.4127': attribute type 30 has an invalid length. [ 731.850004][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4126'. [ 732.022819][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.040075][T17016] lo speed is unknown, defaulting to 1000 [ 732.225676][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4128'. [ 733.638244][T17049] wireguard0: entered promiscuous mode [ 733.644136][T17049] wireguard0: entered allmulticast mode [ 733.665835][T17051] loop3: detected capacity change from 0 to 512 [ 733.700765][T17051] EXT4-fs: Ignoring removed oldalloc option [ 733.707231][T17051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 733.728430][T17051] EXT4-fs (loop3): 1 truncate cleaned up [ 733.737318][T17051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.861248][T17055] loop5: detected capacity change from 0 to 1024 [ 733.872572][T17055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 733.894543][T17055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.942607][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 733.942623][ T29] audit: type=1326 audit(2000000197.650:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 733.946500][T17055] netlink: 'syz.5.4139': attribute type 30 has an invalid length. [ 733.950790][ T29] audit: type=1326 audit(2000000197.650:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.019939][ T29] audit: type=1326 audit(2000000197.650:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.046158][ T29] audit: type=1326 audit(2000000197.650:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.072316][ T29] audit: type=1326 audit(2000000197.650:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.099585][ T29] audit: type=1326 audit(2000000197.650:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.126513][ T29] audit: type=1326 audit(2000000197.650:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.154426][ T29] audit: type=1326 audit(2000000197.650:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.183755][ T29] audit: type=1326 audit(2000000197.650:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.209351][ T29] audit: type=1326 audit(2000000197.650:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 734.279531][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4141'. [ 734.400801][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.435802][T17065] loop5: detected capacity change from 0 to 512 [ 734.533674][T17065] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.4142: corrupted xattr block 95: invalid header [ 734.556437][T17065] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4142: bg 0: block 7: invalid block bitmap [ 734.571206][T17065] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 734.590842][T17065] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.4142: corrupted xattr block 95: invalid header [ 734.609041][T17065] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 734.619290][T17065] EXT4-fs (loop5): 1 orphan inode deleted [ 734.628536][T17065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.661264][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.466839][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4146'. [ 735.493793][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4146'. [ 735.578891][T17082] loop4: detected capacity change from 0 to 164 [ 735.609740][T17082] syz.4.4148: attempt to access beyond end of device [ 735.609740][T17082] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 735.680131][T17082] syz.4.4148: attempt to access beyond end of device [ 735.680131][T17082] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 736.383924][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4152'. [ 736.458113][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 736.530134][T17098] loop5: detected capacity change from 0 to 512 [ 736.652774][T17098] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.4153: corrupted xattr block 95: invalid header [ 736.674638][T17098] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4153: bg 0: block 7: invalid block bitmap [ 736.687551][T17098] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 736.710161][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.719805][T17098] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.4153: corrupted xattr block 95: invalid header [ 736.734393][T17098] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 736.745905][T17098] EXT4-fs (loop5): 1 orphan inode deleted [ 736.752973][T17098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.803799][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.048309][T17125] loop3: detected capacity change from 0 to 164 [ 737.064080][T17125] syz.3.4160: attempt to access beyond end of device [ 737.064080][T17125] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 737.132625][T17125] syz.3.4160: attempt to access beyond end of device [ 737.132625][T17125] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 737.897681][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4164'. [ 738.137533][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4165'. [ 738.227852][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4165'. [ 738.608118][T17285] loop1: detected capacity change from 0 to 512 [ 738.651993][T17285] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.4168: corrupted xattr block 95: invalid header [ 738.696940][T17285] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4168: bg 0: block 7: invalid block bitmap [ 738.741701][T17285] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 738.752905][T17285] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.4168: corrupted xattr block 95: invalid header [ 738.777298][T17290] wireguard0: entered promiscuous mode [ 738.783297][T17290] wireguard0: entered allmulticast mode [ 738.799291][T17285] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 738.811147][T17285] EXT4-fs (loop1): 1 orphan inode deleted [ 738.817225][T17285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.952000][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.007590][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4178'. [ 740.165643][T17326] loop1: detected capacity change from 0 to 512 [ 740.183574][T17323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4179'. [ 740.202223][T17326] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.4180: corrupted xattr block 95: invalid header [ 740.220160][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4179'. [ 740.239670][T17326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4180: bg 0: block 7: invalid block bitmap [ 740.267039][T17326] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 740.285709][T17326] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.4180: corrupted xattr block 95: invalid header [ 740.321129][T17326] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 740.341162][T17326] EXT4-fs (loop1): 1 orphan inode deleted [ 740.347211][T17326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.391057][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.545416][T17345] netlink: 'syz.3.4187': attribute type 3 has an invalid length. [ 740.586912][T17347] wireguard0: entered promiscuous mode [ 740.592493][T17347] wireguard0: entered allmulticast mode [ 741.391731][T17361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4191'. [ 741.404717][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'. [ 741.650683][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 741.650745][ T29] audit: type=1326 audit(2000000205.350:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.756044][ T29] audit: type=1326 audit(2000000205.390:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.779666][ T29] audit: type=1326 audit(2000000205.390:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.803328][ T29] audit: type=1326 audit(2000000205.390:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.827076][ T29] audit: type=1326 audit(2000000205.390:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.843338][T17366] loop3: detected capacity change from 0 to 8192 [ 741.850803][ T29] audit: type=1326 audit(2000000205.390:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.881697][ T29] audit: type=1326 audit(2000000205.390:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.905883][ T29] audit: type=1326 audit(2000000205.390:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.930697][ T29] audit: type=1326 audit(2000000205.400:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 741.954429][ T29] audit: type=1326 audit(2000000205.400:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.3.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 742.011367][T17366] loop3: p1 < > p2 < > p3 p4 < > [ 742.016480][T17366] loop3: partition table partially beyond EOD, truncated [ 742.031185][T17366] loop3: p1 start 67108864 is beyond EOD, truncated [ 742.037935][T17366] loop3: p2 start 4278190080 is beyond EOD, truncated [ 742.045022][T17366] loop3: p3 start 100859904 is beyond EOD, truncated [ 742.103803][T17372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4194'. [ 742.154154][T17374] loop3: detected capacity change from 0 to 512 [ 742.175783][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'. [ 742.336884][T17374] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.4195: corrupted xattr block 95: invalid header [ 742.373907][T17374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4195: bg 0: block 7: invalid block bitmap [ 742.458827][T17374] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 742.515870][T17374] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.4195: corrupted xattr block 95: invalid header [ 742.571111][T17374] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 742.591133][T17374] EXT4-fs (loop3): 1 orphan inode deleted [ 742.597772][T17374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.666974][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.755552][T17386] SET target dimension over the limit! [ 742.866557][T17392] lo speed is unknown, defaulting to 1000 [ 742.897244][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.906327][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.544622][T17403] netlink: 'syz.1.4203': attribute type 3 has an invalid length. [ 744.285940][T17418] loop0: detected capacity change from 0 to 512 [ 744.332568][T17418] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.4208: corrupted xattr block 95: invalid header [ 744.355165][T17418] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4208: bg 0: block 7: invalid block bitmap [ 744.380954][T17418] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 744.399255][T17418] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #11: comm syz.0.4208: corrupted xattr block 95: invalid header [ 744.428337][T17418] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 744.521901][T17413] siw: device registration error -23 [ 744.572927][T17418] EXT4-fs (loop0): 1 orphan inode deleted [ 744.579155][T17418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.629698][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.736842][T17431] loop3: detected capacity change from 0 to 512 [ 744.744891][T17431] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 745.833521][T17439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4214'. [ 745.977283][T17447] loop4: detected capacity change from 0 to 164 [ 746.016892][T17447] syz.4.4218: attempt to access beyond end of device [ 746.016892][T17447] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 746.071344][T17447] syz.4.4218: attempt to access beyond end of device [ 746.071344][T17447] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 746.085563][T17445] loop5: detected capacity change from 0 to 8192 [ 746.151354][T17445] loop5: p1 < > p2 < > p3 p4 < > [ 746.156427][T17445] loop5: partition table partially beyond EOD, truncated [ 746.184412][T17445] loop5: p1 start 67108864 is beyond EOD, truncated [ 746.191054][T17445] loop5: p2 start 4278190080 is beyond EOD, truncated [ 746.197987][T17445] loop5: p3 start 100859904 is beyond EOD, truncated [ 746.819680][T17460] netlink: 'syz.5.4221': attribute type 3 has an invalid length. [ 747.137009][T17466] wireguard0: entered promiscuous mode [ 747.142644][T17466] wireguard0: entered allmulticast mode [ 747.240775][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 747.240790][ T29] audit: type=1326 audit(2000000210.940:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.305521][ T29] audit: type=1326 audit(2000000210.980:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.329085][ T29] audit: type=1326 audit(2000000210.980:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.352854][ T29] audit: type=1326 audit(2000000210.980:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.376471][ T29] audit: type=1326 audit(2000000210.980:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.400528][ T29] audit: type=1326 audit(2000000210.990:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.424040][ T29] audit: type=1326 audit(2000000210.990:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.447540][ T29] audit: type=1326 audit(2000000210.990:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.447570][ T29] audit: type=1326 audit(2000000210.990:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.447594][ T29] audit: type=1326 audit(2000000210.990:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.3.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 747.572279][T17482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4227'. [ 747.603729][T17486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4229'. [ 747.651723][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4228'. [ 747.670580][T17491] loop1: detected capacity change from 0 to 1024 [ 747.677462][T17491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 747.778949][T17491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.857040][T17498] loop5: detected capacity change from 0 to 512 [ 747.865199][T17498] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.4232: corrupted xattr block 95: invalid header [ 747.881681][T17496] netlink: 'syz.1.4231': attribute type 30 has an invalid length. [ 747.900150][T17498] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4232: bg 0: block 7: invalid block bitmap [ 747.925242][T17498] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 747.951271][T17498] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.4232: corrupted xattr block 95: invalid header [ 747.991225][T17498] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 748.000353][T17498] EXT4-fs (loop5): 1 orphan inode deleted [ 748.020974][T17498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.070340][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.460391][T17506] netlink: 'syz.5.4235': attribute type 3 has an invalid length. [ 748.522584][T17508] loop3: detected capacity change from 0 to 164 [ 748.590083][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.607360][T17508] syz.3.4236: attempt to access beyond end of device [ 748.607360][T17508] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 748.621885][T17508] syz.3.4236: attempt to access beyond end of device [ 748.621885][T17508] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 748.624662][T17513] wireguard0: entered promiscuous mode [ 748.640938][T17513] wireguard0: entered allmulticast mode [ 748.683072][T17522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4240'. [ 748.891667][T17538] netlink: 'syz.1.4247': attribute type 3 has an invalid length. [ 748.969391][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4246'. [ 749.335271][T17552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4251'. [ 749.738807][T17560] loop3: detected capacity change from 0 to 164 [ 749.748343][T17560] syz.3.4254: attempt to access beyond end of device [ 749.748343][T17560] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 749.762633][T17560] syz.3.4254: attempt to access beyond end of device [ 749.762633][T17560] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 749.847616][T17568] loop3: detected capacity change from 0 to 512 [ 749.867296][T17568] EXT4-fs (loop3): 1 truncate cleaned up [ 749.878812][T17568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.922362][T17568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4258: bg 0: block 465: padding at end of block bitmap is not set [ 749.971291][T17568] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 749.983759][T17568] EXT4-fs (loop3): This should not happen!! Data will be lost [ 749.983759][T17568] [ 750.024855][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.167382][T17570] wireguard0: entered promiscuous mode [ 750.173151][T17570] wireguard0: entered allmulticast mode [ 750.440984][T17582] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4262'. [ 750.611689][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4263'. [ 750.641589][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4263'. [ 751.056150][T17610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4267'. [ 751.924074][T17674] siw: device registration error -23 [ 752.264561][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 752.264579][ T29] audit: type=1326 audit(2000000215.970:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.331557][ T29] audit: type=1326 audit(2000000215.970:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.355436][ T29] audit: type=1326 audit(2000000215.970:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.379046][ T29] audit: type=1326 audit(2000000215.970:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.402669][ T29] audit: type=1326 audit(2000000215.970:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.426900][ T29] audit: type=1326 audit(2000000215.970:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.450906][ T29] audit: type=1326 audit(2000000215.970:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.475453][ T29] audit: type=1326 audit(2000000215.970:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17677 comm="syz.5.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 752.620908][T17684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4274'. [ 752.722915][T17687] lo speed is unknown, defaulting to 1000 [ 753.184886][T17696] wireguard0: entered promiscuous mode [ 753.190395][T17696] wireguard0: entered allmulticast mode [ 753.470814][ T29] audit: type=1326 audit(2000000217.170:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17726 comm="syz.4.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 753.494619][ T29] audit: type=1326 audit(2000000217.170:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17726 comm="syz.4.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 754.189350][T17798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4288'. [ 754.202207][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'. [ 754.296856][T17804] lo speed is unknown, defaulting to 1000 [ 754.342329][T17810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.373859][T17812] lo speed is unknown, defaulting to 1000 [ 754.407995][T17810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.461921][T17814] loop0: detected capacity change from 0 to 8192 [ 754.471735][T17812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.546515][T17814] loop0: p1 < > p2 < > p3 p4 < > [ 754.551626][T17814] loop0: partition table partially beyond EOD, truncated [ 754.568038][T17814] loop0: p1 start 67108864 is beyond EOD, truncated [ 754.574899][T17814] loop0: p2 start 4278190080 is beyond EOD, truncated [ 754.581720][T17814] loop0: p3 start 100859904 is beyond EOD, truncated [ 754.610865][T17812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.684455][T17820] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4295'. [ 755.137644][T17835] Cannot find del_set index 0 as target [ 756.069981][T17904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4301'. [ 756.137001][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4301'. [ 756.325983][T17919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4307'. [ 756.608681][T17915] loop4: detected capacity change from 0 to 8192 [ 756.681817][T17915] loop4: p1 < > p2 < > p3 p4 < > [ 756.687255][T17915] loop4: partition table partially beyond EOD, truncated [ 756.700852][T17915] loop4: p1 start 67108864 is beyond EOD, truncated [ 756.707554][T17915] loop4: p2 start 4278190080 is beyond EOD, truncated [ 756.714468][T17915] loop4: p3 start 100859904 is beyond EOD, truncated [ 756.731477][T17954] netlink: 'syz.3.4317': attribute type 3 has an invalid length. [ 756.941351][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4320'. [ 757.504371][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'. [ 757.870843][T18098] siw: device registration error -23 [ 758.677302][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4338'. [ 758.761973][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4344'. [ 758.785617][T18123] wireguard0: entered promiscuous mode [ 758.791398][T18123] wireguard0: entered allmulticast mode [ 758.813188][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4344'. [ 758.826721][T18132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4343'. [ 759.034820][T18138] loop5: detected capacity change from 0 to 512 [ 759.043177][T18138] EXT4-fs (loop5): 1 truncate cleaned up [ 759.049462][T18138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.093131][T18138] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4345: bg 0: block 465: padding at end of block bitmap is not set [ 759.122335][T18138] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 759.135559][T18138] EXT4-fs (loop5): This should not happen!! Data will be lost [ 759.135559][T18138] [ 759.172422][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.904171][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'. [ 759.984928][ C0] hrtimer: interrupt took 38082 ns [ 760.048609][T18186] 9pnet: Could not find request transport: f [ 760.078463][T18191] wireguard0: entered promiscuous mode [ 760.084435][T18191] wireguard0: entered allmulticast mode [ 760.985803][T18220] loop3: detected capacity change from 0 to 512 [ 760.999249][T18220] EXT4-fs (loop3): 1 truncate cleaned up [ 761.008799][T18220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.040065][T18220] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4373: bg 0: block 465: padding at end of block bitmap is not set [ 761.070775][T18220] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 761.083099][T18220] EXT4-fs (loop3): This should not happen!! Data will be lost [ 761.083099][T18220] [ 761.127178][T18222] lo speed is unknown, defaulting to 1000 [ 761.163810][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.229917][T18322] lo speed is unknown, defaulting to 1000 [ 762.256109][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.264657][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.426605][T18351] loop5: detected capacity change from 0 to 1024 [ 762.433750][T18351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 762.463003][T18351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.554686][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 762.554700][ T29] audit: type=1326 audit(2000000226.260:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.556985][T18370] netlink: 'syz.5.4384': attribute type 30 has an invalid length. [ 762.561116][ T29] audit: type=1326 audit(2000000226.260:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.561146][ T29] audit: type=1326 audit(2000000226.260:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.561169][ T29] audit: type=1326 audit(2000000226.260:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.664353][ T29] audit: type=1326 audit(2000000226.260:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.687876][ T29] audit: type=1326 audit(2000000226.260:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.711424][ T29] audit: type=1326 audit(2000000226.260:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.735139][ T29] audit: type=1326 audit(2000000226.260:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.758864][ T29] audit: type=1326 audit(2000000226.260:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.782650][ T29] audit: type=1326 audit(2000000226.260:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 762.876248][T18377] loop4: detected capacity change from 0 to 512 [ 762.884845][T18377] EXT4-fs (loop4): 1 truncate cleaned up [ 762.890975][T18377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.906312][T18377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4385: bg 0: block 465: padding at end of block bitmap is not set [ 762.925279][T18377] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 762.938546][T18377] EXT4-fs (loop4): This should not happen!! Data will be lost [ 762.938546][T18377] [ 763.041954][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.137363][T18424] wireguard0: entered promiscuous mode [ 763.143660][T18424] wireguard0: entered allmulticast mode [ 763.420304][T18435] lo speed is unknown, defaulting to 1000 [ 763.459116][T18435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.468901][T18435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.562439][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.680802][T18440] __nla_validate_parse: 7 callbacks suppressed [ 763.680819][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'. [ 763.714454][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4396'. [ 763.765326][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4396'. [ 763.819503][T18444] loop5: detected capacity change from 0 to 512 [ 763.826618][T18444] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.986770][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 763.997266][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4402'. [ 764.047776][T18475] Cannot find del_set index 0 as target [ 764.057906][T18474] loop4: detected capacity change from 0 to 1024 [ 764.081052][T18474] EXT4-fs: Ignoring removed orlov option [ 764.102817][T18474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.278366][T18497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.414617][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.462307][T18507] lo speed is unknown, defaulting to 1000 [ 764.491623][T18507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.500734][T18507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.676163][T18532] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4406'. [ 764.795601][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4409'. [ 764.907219][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4413'. [ 764.935742][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4409'. [ 764.948890][T18567] loop0: detected capacity change from 0 to 512 [ 764.956024][T18567] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 764.968832][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4413'. [ 765.194490][T18591] lo speed is unknown, defaulting to 1000 [ 765.225288][T18591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.234050][T18591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.543692][T18594] loop5: detected capacity change from 0 to 8192 [ 765.654476][T18601] Cannot find del_set index 0 as target [ 765.671349][T18594] loop5: p1 < > p2 < > p3 p4 < > [ 765.677419][T18594] loop5: partition table partially beyond EOD, truncated [ 765.698548][T18594] loop5: p1 start 67108864 is beyond EOD, truncated [ 765.706608][T18594] loop5: p2 start 4278190080 is beyond EOD, truncated [ 765.714580][T18594] loop5: p3 start 100859904 is beyond EOD, truncated [ 765.868620][T18604] loop5: detected capacity change from 0 to 164 [ 765.879807][T18604] syz.5.4421: attempt to access beyond end of device [ 765.879807][T18604] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 765.896255][T18604] syz.5.4421: attempt to access beyond end of device [ 765.896255][T18604] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 765.996296][T18613] wireguard0: entered promiscuous mode [ 766.002066][T18613] wireguard0: entered allmulticast mode [ 766.125342][T18616] loop4: detected capacity change from 0 to 512 [ 766.135768][T18616] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.259161][T18624] loop5: detected capacity change from 0 to 512 [ 766.270899][T18624] EXT4-fs: Ignoring removed oldalloc option [ 766.277980][T18624] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 766.316351][T18628] lo speed is unknown, defaulting to 1000 [ 766.346907][T18628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.355420][T18628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.404816][T18631] loop3: detected capacity change from 0 to 1024 [ 766.412644][T18631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 766.430274][T18624] EXT4-fs (loop5): 1 truncate cleaned up [ 766.441373][T18631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.527953][T18624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.654730][T18640] netlink: 'syz.3.4430': attribute type 30 has an invalid length. [ 766.701197][T18636] loop0: detected capacity change from 0 to 8192 [ 766.751578][T18636] loop0: p1 < > p2 < > p3 p4 < > [ 766.757591][T18636] loop0: partition table partially beyond EOD, truncated [ 766.951210][T18636] loop0: p1 start 67108864 is beyond EOD, truncated [ 766.958031][T18636] loop0: p2 start 4278190080 is beyond EOD, truncated [ 766.964882][T18636] loop0: p3 start 100859904 is beyond EOD, truncated [ 767.305921][T18650] loop0: detected capacity change from 0 to 164 [ 767.347425][T18650] syz.0.4435: attempt to access beyond end of device [ 767.347425][T18650] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 767.377972][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.403420][T18650] syz.0.4435: attempt to access beyond end of device [ 767.403420][T18650] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 767.751023][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 767.751038][ T29] audit: type=1326 audit(2000000231.450:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.811161][ T29] audit: type=1326 audit(2000000231.490:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.835047][ T29] audit: type=1326 audit(2000000231.490:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.859581][ T29] audit: type=1326 audit(2000000231.490:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.883331][ T29] audit: type=1326 audit(2000000231.490:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.907463][ T29] audit: type=1326 audit(2000000231.490:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.931249][ T29] audit: type=1326 audit(2000000231.490:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.4.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 767.970084][T18696] lo speed is unknown, defaulting to 1000 [ 768.000472][T18696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.009082][T18696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.168550][T18701] loop0: detected capacity change from 0 to 1024 [ 768.181549][T18701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 768.324123][T18701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.523673][ T29] audit: type=1326 audit(2000000232.210:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18699 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 768.547577][ T29] audit: type=1326 audit(2000000232.210:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18699 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 768.574692][ T29] audit: type=1326 audit(2000000232.210:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18699 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 768.601280][T18748] netlink: 'syz.0.4447': attribute type 30 has an invalid length. [ 769.037048][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.363473][T18775] __nla_validate_parse: 9 callbacks suppressed [ 769.363493][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4457'. [ 769.410604][T18774] lo speed is unknown, defaulting to 1000 [ 769.470164][T18774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.480111][T18774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.126105][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4462'. [ 770.328866][T18798] Cannot find del_set index 0 as target [ 771.120011][T18809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4469'. [ 771.136356][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.183096][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4471'. [ 771.193393][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'. [ 771.237308][T18815] wireguard0: entered promiscuous mode [ 771.242884][T18815] wireguard0: entered allmulticast mode [ 771.518247][T18823] SET target dimension over the limit! [ 771.819069][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4475'. [ 772.419052][T18846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4481'. [ 772.448263][T18847] 9pnet: Could not find request transport: f [ 772.640175][T18851] netlink: 'syz.0.4482': attribute type 3 has an invalid length. [ 772.973540][T18856] lo speed is unknown, defaulting to 1000 [ 773.001140][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 773.001174][ T29] audit: type=1326 audit(2000000236.610:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.031491][ T29] audit: type=1326 audit(2000000236.610:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.055865][ T29] audit: type=1326 audit(2000000236.610:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.079456][ T29] audit: type=1326 audit(2000000236.620:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.103381][ T29] audit: type=1326 audit(2000000236.620:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.127528][ T29] audit: type=1326 audit(2000000236.620:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.152219][ T29] audit: type=1326 audit(2000000236.630:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.176633][ T29] audit: type=1326 audit(2000000236.630:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.200297][ T29] audit: type=1326 audit(2000000236.630:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.224072][ T29] audit: type=1326 audit(2000000236.630:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.5.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 773.224339][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4487'. [ 773.385584][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4491'. [ 773.394904][T18876] loop5: detected capacity change from 0 to 8192 [ 773.425944][T18883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4492'. [ 773.431945][T18881] lo speed is unknown, defaulting to 1000 [ 773.464964][T18881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.473529][T18881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.511006][T18876] loop5: p1 < > p2 < > p3 p4 < > [ 773.516225][T18876] loop5: partition table partially beyond EOD, truncated [ 773.551204][T18876] loop5: p1 start 67108864 is beyond EOD, truncated [ 773.557901][T18876] loop5: p2 start 4278190080 is beyond EOD, truncated [ 773.564748][T18876] loop5: p3 start 100859904 is beyond EOD, truncated [ 773.595388][T18888] wireguard0: entered promiscuous mode [ 773.600938][T18888] wireguard0: entered allmulticast mode [ 773.983239][T18908] wireguard0: entered promiscuous mode [ 773.988743][T18908] wireguard0: entered allmulticast mode [ 774.480541][T18916] __nla_validate_parse: 2 callbacks suppressed [ 774.480557][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4501'. [ 774.559383][T18921] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4503'. [ 774.635713][T18922] 9pnet: Could not find request transport: f [ 774.800229][T18925] loop5: detected capacity change from 0 to 8192 [ 774.830057][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4506'. [ 774.841562][T18925] loop5: p1 < > p2 < > p3 p4 < > [ 774.847232][T18925] loop5: partition table partially beyond EOD, truncated [ 774.862648][T18925] loop5: p1 start 67108864 is beyond EOD, truncated [ 774.869469][T18925] loop5: p2 start 4278190080 is beyond EOD, truncated [ 774.876839][T18925] loop5: p3 start 100859904 is beyond EOD, truncated [ 775.348730][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4513'. [ 775.945663][T19014] lo speed is unknown, defaulting to 1000 [ 775.974857][T19014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.983474][T19014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.445030][T19019] loop5: detected capacity change from 0 to 512 [ 776.570988][T19022] wireguard0: entered promiscuous mode [ 776.576649][T19022] wireguard0: entered allmulticast mode [ 776.586702][T19019] EXT4-fs (loop5): 1 truncate cleaned up [ 776.596994][T19019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.666936][T19019] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4516: bg 0: block 465: padding at end of block bitmap is not set [ 776.722255][T19019] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 776.735209][T19019] EXT4-fs (loop5): This should not happen!! Data will be lost [ 776.735209][T19019] [ 776.854274][T19034] loop4: detected capacity change from 0 to 1024 [ 776.881953][T19034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 776.986390][T19034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.008516][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.081873][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4522'. [ 777.156977][T19034] netlink: 'syz.4.4519': attribute type 30 has an invalid length. [ 777.423598][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4526'. [ 777.715818][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.082627][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 778.108817][T19067] loop5: detected capacity change from 0 to 512 [ 778.117393][T19067] EXT4-fs (loop5): 1 truncate cleaned up [ 778.123738][T19067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.143947][T19067] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4531: bg 0: block 465: padding at end of block bitmap is not set [ 778.160343][T19067] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 778.173658][T19067] EXT4-fs (loop5): This should not happen!! Data will be lost [ 778.173658][T19067] [ 778.211780][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.231832][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'. [ 778.402273][T19078] wireguard0: entered promiscuous mode [ 778.407835][T19078] wireguard0: entered allmulticast mode [ 778.414209][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 778.414226][ T29] audit: type=1326 audit(2000000242.110:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.445571][ T29] audit: type=1326 audit(2000000242.110:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.471474][ T29] audit: type=1326 audit(2000000242.110:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.496683][ T29] audit: type=1326 audit(2000000242.110:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.521708][ T29] audit: type=1326 audit(2000000242.110:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.547357][ T29] audit: type=1326 audit(2000000242.110:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.571212][ T29] audit: type=1326 audit(2000000242.110:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12849f749 code=0x7ffc0000 [ 778.668485][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4536'. [ 778.852349][T19095] wireguard0: entered promiscuous mode [ 778.858130][T19095] wireguard0: entered allmulticast mode [ 778.907750][ T29] audit: type=1326 audit(2000000242.610:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19100 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 778.931917][ T29] audit: type=1326 audit(2000000242.610:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19100 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 778.956941][ T29] audit: type=1326 audit(2000000242.610:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19100 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 779.054144][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811848dc00: rx timeout, send abort [ 779.062677][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811848dc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 779.141244][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4544'. [ 779.723279][T19224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4547'. [ 779.760689][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4547'. [ 779.823942][T19234] SET target dimension over the limit! [ 779.848220][T19236] loop4: detected capacity change from 0 to 164 [ 779.874526][T19236] syz.4.4552: attempt to access beyond end of device [ 779.874526][T19236] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 779.901433][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4551'. [ 779.916118][T19236] syz.4.4552: attempt to access beyond end of device [ 779.916118][T19236] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 779.956613][T19243] Cannot find del_set index 0 as target [ 780.248861][T19266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4561'. [ 780.259179][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4561'. [ 780.419410][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'. [ 780.703640][T19327] loop3: detected capacity change from 0 to 512 [ 780.810261][T19327] EXT4-fs (loop3): 1 truncate cleaned up [ 780.818898][T19327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.835387][T19350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4572'. [ 780.848635][T19327] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4570: bg 0: block 465: padding at end of block bitmap is not set [ 780.855053][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 780.952681][T19327] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 780.965044][T19327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 780.965044][T19327] [ 781.282338][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.318269][T19395] netlink: 'syz.3.4578': attribute type 3 has an invalid length. [ 781.348564][T19397] bridge_slave_0: left allmulticast mode [ 781.354388][T19397] bridge_slave_0: left promiscuous mode [ 781.360134][T19397] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.370110][T19397] bridge_slave_1: left allmulticast mode [ 781.375973][T19397] bridge_slave_1: left promiscuous mode [ 781.381779][T19397] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.393388][T19397] bond0: (slave bond_slave_0): Releasing backup interface [ 781.403202][T19397] bond0: (slave bond_slave_1): Releasing backup interface [ 781.415398][T19397] team0: Port device team_slave_0 removed [ 781.425033][T19397] team0: Port device team_slave_1 removed [ 781.432156][T19397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.439596][T19397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.447350][T19404] netlink: 'syz.1.4582': attribute type 10 has an invalid length. [ 781.455287][T19404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4582'. [ 781.466692][T19397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.474206][T19397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.484649][T19397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 781.514129][T19404] batman_adv: batadv0: Adding interface: veth1_vlan [ 781.520870][T19404] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.552478][T19404] batman_adv: batadv0: Interface activated: veth1_vlan [ 781.629424][T19411] lo speed is unknown, defaulting to 1000 [ 781.720123][T19412] loop4: detected capacity change from 0 to 512 [ 781.829575][T19417] Cannot find del_set index 0 as target [ 782.065413][T19412] EXT4-fs (loop4): 1 truncate cleaned up [ 782.072196][T19412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.093655][T19408] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4585: bg 0: block 465: padding at end of block bitmap is not set [ 782.108846][T19433] netlink: 'syz.0.4595': attribute type 3 has an invalid length. [ 782.130735][T19408] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 782.143246][T19408] EXT4-fs (loop4): This should not happen!! Data will be lost [ 782.143246][T19408] [ 782.180660][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.537857][T19446] loop0: detected capacity change from 0 to 512 [ 782.552677][T19448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4600'. [ 782.636603][T19446] EXT4-fs: Ignoring removed oldalloc option [ 782.691811][T19446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 782.702008][T19449] wireguard0: entered promiscuous mode [ 782.707649][T19449] wireguard0: entered allmulticast mode [ 782.767256][T19446] EXT4-fs (loop0): 1 truncate cleaned up [ 782.796032][T19446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.155427][T19468] netlink: 'syz.5.4607': attribute type 3 has an invalid length. [ 783.481422][T19472] 9pnet: Could not find request transport: f [ 783.566854][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 783.566864][ T29] audit: type=1326 audit(2000000247.270:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.596968][ T29] audit: type=1326 audit(2000000247.270:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.732603][T19480] SET target dimension over the limit! [ 783.741129][ T29] audit: type=1326 audit(2000000247.330:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.765314][ T29] audit: type=1326 audit(2000000247.330:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.790213][ T29] audit: type=1326 audit(2000000247.330:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.813825][ T29] audit: type=1326 audit(2000000247.330:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.837701][ T29] audit: type=1326 audit(2000000247.330:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.861445][ T29] audit: type=1326 audit(2000000247.330:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.886770][ T29] audit: type=1326 audit(2000000247.330:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.911929][ T29] audit: type=1326 audit(2000000247.330:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd646f749 code=0x7ffc0000 [ 783.988882][T19486] siw: device registration error -23 [ 785.135188][T19506] wireguard0: entered promiscuous mode [ 785.141311][T19506] wireguard0: entered allmulticast mode [ 785.570829][T19527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4628'. [ 785.621777][T19528] Cannot find del_set index 0 as target [ 786.191951][T19540] loop4: detected capacity change from 0 to 1024 [ 786.206297][T19540] EXT4-fs: Ignoring removed orlov option [ 786.223416][T19540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.465298][T19549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 786.493784][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4632'. [ 786.556535][T19551] wireguard0: entered promiscuous mode [ 786.562164][T19551] wireguard0: entered allmulticast mode [ 786.680830][T19550] wireguard0: entered promiscuous mode [ 786.686352][T19550] wireguard0: entered allmulticast mode [ 786.896013][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4635'. [ 786.908826][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.935321][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.135094][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4639'. [ 787.808914][T19584] siw: device registration error -23 [ 788.219394][T19598] wireguard0: entered promiscuous mode [ 788.224966][T19598] wireguard0: entered allmulticast mode [ 788.310444][T19601] wireguard0: entered promiscuous mode [ 788.316099][T19601] wireguard0: entered allmulticast mode [ 788.387408][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4647'. [ 788.481334][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4648'. [ 788.566582][T19611] Cannot find del_set index 0 as target [ 788.571110][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 788.571126][ T29] audit: type=1326 audit(2000000252.270:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.615467][ T29] audit: type=1326 audit(2000000252.310:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.639147][ T29] audit: type=1326 audit(2000000252.310:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.662964][ T29] audit: type=1326 audit(2000000252.310:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.686485][ T29] audit: type=1326 audit(2000000252.310:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.710842][ T29] audit: type=1326 audit(2000000252.310:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.736255][ T29] audit: type=1326 audit(2000000252.310:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.760757][ T29] audit: type=1326 audit(2000000252.310:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 788.784540][ T29] audit: type=1326 audit(2000000252.310:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe340d9df90 code=0x7ffc0000 [ 788.808287][ T29] audit: type=1326 audit(2000000252.310:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19607 comm="syz.0.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 789.109556][T19636] lo speed is unknown, defaulting to 1000 [ 790.095185][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4656'. [ 790.331006][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4657'. [ 790.350465][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4658'. [ 790.378106][T19688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4658'. [ 790.532449][T19700] loop0: detected capacity change from 0 to 1024 [ 790.542868][T19700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 790.642756][T19709] __nla_validate_parse: 1 callbacks suppressed [ 790.642770][T19709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4666'. [ 790.772522][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 791.003187][T19700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.020519][T19710] wireguard0: entered promiscuous mode [ 791.026391][T19710] wireguard0: entered allmulticast mode [ 791.124553][T19720] netlink: 'syz.0.4664': attribute type 30 has an invalid length. [ 791.525894][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4669'. [ 791.607857][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4669'. [ 791.661788][T19727] loop5: detected capacity change from 0 to 8192 [ 791.679582][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.691423][T19727] loop5: p1 < > p2 < > p3 p4 < > [ 791.697096][T19727] loop5: partition table partially beyond EOD, truncated [ 791.704541][T19730] loop3: detected capacity change from 0 to 164 [ 791.711693][T19727] loop5: p1 start 67108864 is beyond EOD, truncated [ 791.718301][T19727] loop5: p2 start 4278190080 is beyond EOD, truncated [ 791.725122][T19727] loop5: p3 start 100859904 is beyond EOD, truncated [ 791.735318][T19730] syz.3.4671: attempt to access beyond end of device [ 791.735318][T19730] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 791.765471][T19730] syz.3.4671: attempt to access beyond end of device [ 791.765471][T19730] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 791.839395][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4675'. [ 791.849134][T19740] wireguard0: entered promiscuous mode [ 791.854747][T19740] wireguard0: entered allmulticast mode [ 791.864770][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4675'. [ 792.023225][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'. [ 792.112370][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'. [ 792.151310][T19755] loop1: detected capacity change from 0 to 512 [ 792.159654][T19755] EXT4-fs (loop1): 1 truncate cleaned up [ 792.166012][T19755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.183262][T19755] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4680: bg 0: block 465: padding at end of block bitmap is not set [ 792.197916][T19755] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 792.210342][T19755] EXT4-fs (loop1): This should not happen!! Data will be lost [ 792.210342][T19755] [ 792.231689][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.510755][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4685'. [ 792.520391][T19770] wireguard0: entered promiscuous mode [ 792.526066][T19770] wireguard0: entered allmulticast mode [ 792.694242][T19778] loop5: detected capacity change from 0 to 1024 [ 792.700996][T19778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 792.753175][T19778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.051856][T19790] netlink: 'syz.5.4687': attribute type 30 has an invalid length. [ 793.240851][T19803] loop3: detected capacity change from 0 to 512 [ 793.251119][T19803] EXT4-fs (loop3): 1 truncate cleaned up [ 793.257894][T19803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.281613][T19803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4694: bg 0: block 465: padding at end of block bitmap is not set [ 793.296970][T19803] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 793.311783][T19803] EXT4-fs (loop3): This should not happen!! Data will be lost [ 793.311783][T19803] [ 793.323227][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4695'. [ 793.370741][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.576525][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.824893][T19829] loop3: detected capacity change from 0 to 512 [ 793.832245][T19829] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 794.387489][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 794.387503][ T29] audit: type=1326 audit(2000000258.090:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 794.579732][T19835] Cannot find del_set index 0 as target [ 795.253534][ T29] audit: type=1326 audit(2000000258.130:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.277344][ T29] audit: type=1326 audit(2000000258.130:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.301783][ T29] audit: type=1326 audit(2000000258.130:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.325539][ T29] audit: type=1326 audit(2000000258.130:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.350302][ T29] audit: type=1326 audit(2000000258.130:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.373967][ T29] audit: type=1326 audit(2000000258.130:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.398343][ T29] audit: type=1326 audit(2000000258.130:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.422977][ T29] audit: type=1326 audit(2000000258.140:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.446907][ T29] audit: type=1326 audit(2000000258.140:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe340d9f749 code=0x7ffc0000 [ 795.700249][T19869] __nla_validate_parse: 6 callbacks suppressed [ 795.700265][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'. [ 795.738083][T19868] loop3: detected capacity change from 0 to 8192 [ 795.802654][T19878] lo speed is unknown, defaulting to 1000 [ 795.871751][T19868] loop3: p1 < > p2 < > p3 p4 < > [ 795.876897][T19868] loop3: partition table partially beyond EOD, truncated [ 795.884415][T19868] loop3: p1 start 67108864 is beyond EOD, truncated [ 795.891257][T19868] loop3: p2 start 4278190080 is beyond EOD, truncated [ 795.898154][T19868] loop3: p3 start 100859904 is beyond EOD, truncated [ 796.569911][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4721'. [ 796.722087][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4719'. [ 797.076477][T19966] loop5: detected capacity change from 0 to 512 [ 797.083414][T19966] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 797.215630][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4721'. [ 797.421797][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 797.532225][T19983] loop4: detected capacity change from 0 to 1024 [ 797.591851][T19983] EXT4-fs: Ignoring removed orlov option [ 797.673636][T20000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4726'. [ 797.692932][T19983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.785105][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4726'. [ 797.958383][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4729'. [ 797.973879][T20025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.009461][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4725'. [ 798.320861][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.666611][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 799.242775][T20067] loop3: detected capacity change from 0 to 1024 [ 799.249782][T20067] EXT4-fs: Ignoring removed orlov option [ 799.264636][T20067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.558155][T20079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.585963][T20081] loop5: detected capacity change from 0 to 1024 [ 799.589991][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 799.590006][ T29] audit: type=1326 audit(2000000263.210:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.616715][T20081] EXT4-fs: Ignoring removed orlov option [ 799.622427][ T29] audit: type=1326 audit(2000000263.210:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.622455][ T29] audit: type=1326 audit(2000000263.220:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.622505][ T29] audit: type=1326 audit(2000000263.220:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.657674][T20081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.678234][ T29] audit: type=1326 audit(2000000263.220:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.738227][ T29] audit: type=1326 audit(2000000263.220:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.738301][ T29] audit: type=1326 audit(2000000263.220:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.738324][ T29] audit: type=1326 audit(2000000263.220:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.738383][ T29] audit: type=1326 audit(2000000263.220:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 799.738407][ T29] audit: type=1326 audit(2000000263.220:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.4.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 800.013689][T20090] lo speed is unknown, defaulting to 1000 [ 800.076084][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.207204][T20081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 800.399831][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.714252][T20116] __nla_validate_parse: 7 callbacks suppressed [ 800.714271][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4756'. [ 801.042519][T20115] wireguard0: entered promiscuous mode [ 801.048182][T20115] wireguard0: entered allmulticast mode [ 801.490081][T20130] netlink: 'syz.1.4761': attribute type 10 has an invalid length. [ 801.498426][T20130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4761'. [ 801.575728][T20123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.584301][T20123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.640430][T20129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 801.708942][T20133] wireguard0: entered promiscuous mode [ 801.714513][T20133] wireguard0: entered allmulticast mode [ 801.917991][T20126] lo speed is unknown, defaulting to 1000 [ 802.488620][T20164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4770'. [ 802.499239][T20150] wireguard0: entered promiscuous mode [ 802.505034][T20150] wireguard0: entered allmulticast mode [ 802.570700][T20161] lo speed is unknown, defaulting to 1000 [ 802.655197][T20167] Cannot find del_set index 0 as target [ 802.688881][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4770'. [ 802.979638][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4774'. [ 802.996329][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4774'. [ 803.136382][T20179] loop0: detected capacity change from 0 to 164 [ 803.148799][T20179] syz.0.4775: attempt to access beyond end of device [ 803.148799][T20179] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 803.180315][T20177] lo speed is unknown, defaulting to 1000 [ 803.341836][T20179] syz.0.4775: attempt to access beyond end of device [ 803.341836][T20179] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 803.595499][T20199] Cannot find del_set index 0 as target [ 804.157396][T20210] lo speed is unknown, defaulting to 1000 [ 804.610365][T20214] lo speed is unknown, defaulting to 1000 [ 804.870753][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4787'. [ 804.887460][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 804.887478][ T29] audit: type=1326 audit(2000000268.590:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.029337][T20224] loop1: detected capacity change from 0 to 1024 [ 805.036822][ T29] audit: type=1326 audit(2000000268.620:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.064147][ T29] audit: type=1326 audit(2000000268.620:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.088580][ T29] audit: type=1326 audit(2000000268.630:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.113764][ T29] audit: type=1326 audit(2000000268.630:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.138967][ T29] audit: type=1326 audit(2000000268.640:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.163331][ T29] audit: type=1326 audit(2000000268.640:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.186970][ T29] audit: type=1326 audit(2000000268.640:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.212758][ T29] audit: type=1326 audit(2000000268.640:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.237566][ T29] audit: type=1326 audit(2000000268.640:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.4.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997f90f749 code=0x7ffc0000 [ 805.264403][T20224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 805.311770][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4787'. [ 805.329186][T20227] loop3: detected capacity change from 0 to 512 [ 805.337093][T20227] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 805.351232][T20227] EXT4-fs (loop3): 1 truncate cleaned up [ 805.357484][T20227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.371014][T20224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.406806][T20227] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.4790: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 805.434100][T20227] EXT4-fs (loop3): Remounting filesystem read-only [ 805.442941][T20227] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.4790: Deleting old file: nlink 5, error=-117 [ 805.462100][T20233] netlink: 'syz.1.4789': attribute type 30 has an invalid length. [ 805.476049][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.566459][T20235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4791'. [ 805.582539][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'. [ 806.563808][T20251] __nla_validate_parse: 1 callbacks suppressed [ 806.563822][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4793'. [ 806.740848][T20247] lo speed is unknown, defaulting to 1000 [ 806.780327][T20246] lo speed is unknown, defaulting to 1000 [ 806.883739][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.906773][T20253] wireguard0: entered promiscuous mode [ 806.912381][T20253] wireguard0: entered allmulticast mode [ 806.929971][T20258] loop4: detected capacity change from 0 to 1024 [ 806.939677][T20256] Cannot find del_set index 0 as target [ 806.971864][T20258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 806.984046][T20258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.007666][T20262] loop3: detected capacity change from 0 to 512 [ 807.014903][T20262] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 807.028813][T20262] EXT4-fs (loop3): 1 truncate cleaned up [ 807.034801][T20262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.143347][T20267] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.4799: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 807.178945][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4796'. [ 807.209399][T20266] netlink: 'syz.4.4797': attribute type 30 has an invalid length. [ 807.284010][T20267] EXT4-fs (loop3): Remounting filesystem read-only [ 807.290818][T20267] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.4799: Deleting old file: nlink 5, error=-117 [ 807.483927][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4801'. [ 807.541715][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4801'. [ 807.820274][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.937033][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.459645][T20402] loop5: detected capacity change from 0 to 512 [ 808.551946][T20389] loop3: detected capacity change from 0 to 8192 [ 808.611314][T20402] EXT4-fs (loop5): 1 truncate cleaned up [ 808.618381][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 808.639412][T20402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.651589][T20389] loop3: p1 < > p2 < > p3 p4 < > [ 808.656792][T20389] loop3: partition table partially beyond EOD, truncated [ 808.683692][T20402] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4805: bg 0: block 465: padding at end of block bitmap is not set [ 808.705607][T20389] loop3: p1 start 67108864 is beyond EOD, truncated [ 808.712550][T20389] loop3: p2 start 4278190080 is beyond EOD, truncated [ 808.719356][T20389] loop3: p3 start 100859904 is beyond EOD, truncated [ 808.740516][T20402] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 808.752951][T20402] EXT4-fs (loop5): This should not happen!! Data will be lost [ 808.752951][T20402] [ 808.795213][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4808'. [ 808.806968][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4808'. [ 808.823559][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 808.859557][T15472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.983227][T20472] bridge_slave_0: left allmulticast mode [ 808.988933][T20472] bridge_slave_0: left promiscuous mode [ 808.994909][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.997572][T20473] netlink: 'syz.0.4810': attribute type 10 has an invalid length. [ 809.009886][T20473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4810'. [ 809.010802][T20474] Cannot find del_set index 0 as target [ 809.064571][T20472] bridge_slave_1: left allmulticast mode [ 809.070335][T20472] bridge_slave_1: left promiscuous mode [ 809.076183][T20472] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.134774][T20472] bond0: (slave bond_slave_0): Releasing backup interface [ 809.157904][T20472] bond0: (slave bond_slave_1): Releasing backup interface [ 809.187454][T20472] team0: Port device team_slave_0 removed [ 809.207563][T20472] team0: Port device team_slave_1 removed [ 809.224746][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.232205][T20472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.258213][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.265753][T20472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.301425][T20472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 809.336083][T20479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4811'. [ 809.343191][T20473] batman_adv: batadv0: Adding interface: veth1_vlan [ 809.351827][T20473] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.392681][T20473] batman_adv: batadv0: Interface activated: veth1_vlan [ 809.508648][T20489] loop1: detected capacity change from 0 to 1024 [ 809.517823][T20487] loop0: detected capacity change from 0 to 1024 [ 809.525225][T20489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 809.531650][T20487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 809.543151][T20489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.543649][T20487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.624131][T20494] netlink: 'syz.1.4815': attribute type 30 has an invalid length. [ 809.655661][T20487] netlink: 'syz.0.4814': attribute type 30 has an invalid length. [ 809.751808][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.880727][T20501] loop0: detected capacity change from 0 to 512 [ 809.888558][T20501] EXT4-fs (loop0): 1 truncate cleaned up [ 809.891966][ T29] kauditd_printk_skb: 847 callbacks suppressed [ 809.891980][ T29] audit: type=1326 audit(2000000273.600:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 809.894769][T20501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.940124][ T29] audit: type=1326 audit(2000000273.640:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 809.952217][T20501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4816: bg 0: block 465: padding at end of block bitmap is not set [ 809.964011][ T29] audit: type=1326 audit(2000000273.640:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.003304][ T29] audit: type=1326 audit(2000000273.640:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.028389][ T29] audit: type=1326 audit(2000000273.640:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.029116][T20501] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 810.053643][ T29] audit: type=1326 audit(2000000273.640:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.066163][T20501] EXT4-fs (loop0): This should not happen!! Data will be lost [ 810.066163][T20501] [ 810.101067][ T29] audit: type=1326 audit(2000000273.640:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.125568][ T29] audit: type=1326 audit(2000000273.640:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.149412][ T29] audit: type=1326 audit(2000000273.640:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.173262][ T29] audit: type=1326 audit(2000000273.640:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20488 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f4e672005 code=0x7ffc0000 [ 810.214221][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.390098][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.510211][T20520] lo speed is unknown, defaulting to 1000 [ 811.972649][T20533] lo speed is unknown, defaulting to 1000 [ 812.212923][T20539] __nla_validate_parse: 9 callbacks suppressed [ 812.212939][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4828'. [ 812.294402][T20547] siw: device registration error -23 [ 812.379889][T20549] netlink: 'syz.5.4829': attribute type 3 has an invalid length. [ 812.509248][T20554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4830'. [ 812.588702][T20556] loop3: detected capacity change from 0 to 164 [ 812.643000][T20556] syz.3.4832: attempt to access beyond end of device [ 812.643000][T20556] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 812.684420][T20556] syz.3.4832: attempt to access beyond end of device [ 812.684420][T20556] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 812.781442][T20566] loop3: detected capacity change from 0 to 1024 [ 812.788347][T20566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 812.803013][T20566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.827782][T20567] lo speed is unknown, defaulting to 1000 [ 812.908445][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.929951][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.009227][T20574] loop0: detected capacity change from 0 to 1024 [ 813.051552][T20574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 813.061359][T20575] netlink: 'syz.3.4836': attribute type 30 has an invalid length. [ 813.083288][T20574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.254366][T20579] netlink: 'syz.0.4837': attribute type 30 has an invalid length. [ 813.295753][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4838'. [ 813.558000][T20588] loop1: detected capacity change from 0 to 1024 [ 813.565501][T20588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 813.583873][T20588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.629798][T13775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.657159][T20588] netlink: 'syz.1.4840': attribute type 30 has an invalid length. [ 813.730423][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.741274][T20593] SET target dimension over the limit! [ 813.769251][T20595] loop1: detected capacity change from 0 to 1024 [ 813.779923][T20595] EXT4-fs: Ignoring removed orlov option [ 813.793326][T20595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.858620][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.967279][T20602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 814.005326][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 814.024062][T20599] ================================================================== [ 814.032182][T20599] BUG: KCSAN: data-race in filemap_read / filemap_read [ 814.039058][T20599] [ 814.041375][T20599] read to 0xffff888154919228 of 8 bytes by task 20595 on cpu 0: [ 814.048998][T20599] filemap_read+0x6f/0xa00 [ 814.053626][T20599] generic_file_read_iter+0x79/0x330 [ 814.058950][T20599] ext4_file_read_iter+0x1cc/0x290 [ 814.064227][T20599] copy_splice_read+0x442/0x660 [ 814.069089][T20599] splice_direct_to_actor+0x290/0x680 [ 814.074475][T20599] do_splice_direct+0xda/0x150 [ 814.079604][T20599] do_sendfile+0x380/0x650 [ 814.084131][T20599] __x64_sys_sendfile64+0x105/0x150 [ 814.089445][T20599] x64_sys_call+0x2bb4/0x3000 [ 814.094336][T20599] do_syscall_64+0xd2/0x200 [ 814.099473][T20599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.105478][T20599] [ 814.107813][T20599] write to 0xffff888154919228 of 8 bytes by task 20599 on cpu 1: [ 814.115999][T20599] filemap_read+0x974/0xa00 [ 814.120608][T20599] generic_file_read_iter+0x79/0x330 [ 814.125931][T20599] ext4_file_read_iter+0x1cc/0x290 [ 814.131407][T20599] copy_splice_read+0x442/0x660 [ 814.136449][T20599] splice_direct_to_actor+0x290/0x680 [ 814.142117][T20599] do_splice_direct+0xda/0x150 [ 814.147504][T20599] do_sendfile+0x380/0x650 [ 814.151946][T20599] __x64_sys_sendfile64+0x105/0x150 [ 814.157183][T20599] x64_sys_call+0x2bb4/0x3000 [ 814.162137][T20599] do_syscall_64+0xd2/0x200 [ 814.166821][T20599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.172988][T20599] [ 814.175739][T20599] value changed: 0x00000000000002e8 -> 0x00000000000002e9 [ 814.183029][T20599] [ 814.185408][T20599] Reported by Kernel Concurrency Sanitizer on: [ 814.191562][T20599] CPU: 1 UID: 0 PID: 20599 Comm: syz.1.4842 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 814.203222][T20599] Tainted: [W]=WARN [ 814.207075][T20599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.217313][T20599] ================================================================== [ 814.352627][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.393343][T20603] wireguard0: entered promiscuous mode [ 814.398978][T20603] wireguard0: entered allmulticast mode