last executing test programs: 15.862890447s ago: executing program 3 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000010000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000005040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r10) 14.529020343s ago: executing program 3 (id=1284): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b000100766574"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140006001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684a100d0000e96ca4b72643dd3689729568e9", '\\\v\x00:', "29a78ab9b0a4e8ae"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11", 0x12}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000ff010000050000000200000000800000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0308000000000000000000000000000000000000ddf62cacb0d84e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000005124a70a000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.412957415s ago: executing program 3 (id=1285): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) 8.378684435s ago: executing program 3 (id=1302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001f9d30076657468"], 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4018004) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0xffffffffffffff21) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000740)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0180000000000b00000004000000400001"], 0x54}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r10, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) 6.161335229s ago: executing program 1 (id=1315): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r8, 0x330f, 0x4) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r9, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r10 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4.862873884s ago: executing program 2 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB]) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_ino']) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r2, 0x5, &(0x7f0000000500)={0x0, 0x2, 0xa, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2a}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="02030002020000002cbd7000fcdbdf255cb307e3f1730f796a45b0a18e924472f6d16a3970c60f987fa7ff689249339504351b19cf0358d3c010f51b9876e0c356a25ab2234ff6237211764ab235689260539f0b51f0a2aeba9f5cca77d584fec30890c6c25361189682ef5a81010f6e9fcdede9e30ddc80e82bb06470d1436d6a0314755be21856fdfb356a727f11857de9ff3137f4387c248fc3854093b45fffffaeef32c92425b36f503b800ddbea8ebe4e9b92d8eaca7117010966e83551428066a321"], 0x10}, 0x1, 0x7}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_mempolicy(&(0x7f0000000300), &(0x7f0000000400), 0x2, &(0x7f0000000000/0x4000)=nil, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x6, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x52, &(0x7f00000004c0)=""/11, 0xb}, 0x5}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x138, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xe}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0x100, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x9c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc706}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0xd, 0x2, 0x2, 0x9, 0xe, 0x8, 0x5, 0x10, 0x1, 0xd, 0x8, 0xa, 0xe, 0x6, 0x3, 0xa], 0x1, [0x1, 0x1, 0x2, 0x5, 0x4, 0x6, 0xe, 0x4, 0x1, 0x5, 0x3, 0x9, 0x2, 0x4, 0x6, 0x8], [0x4800, 0x4, 0x6, 0x100, 0x0, 0xfff7, 0x0, 0x8e9a, 0x9, 0x8, 0x4, 0x4, 0x0, 0x1, 0x9, 0x9]}}]}}]}, 0x138}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000300)=@ethtool_stats}) 4.815302655s ago: executing program 1 (id=1319): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x43d4, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f00000006c0)=""/134, 0x86, 0x12162, 0x0, 0x0) mlockall(0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00:'], 0x48) 4.767378996s ago: executing program 2 (id=1320): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_io_uring_setup(0x66f, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000380)='cpu~=0||!') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='xen_mmu_set_pud\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c1042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) io_uring_enter(r8, 0xd81, 0x0, 0x0, 0x0, 0x0) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r14, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r12) fallocate(r6, 0x1, 0x6, 0xfff) io_uring_enter(r0, 0x6e36, 0x0, 0x0, 0x0, 0x0) 4.517516371s ago: executing program 0 (id=1321): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/79, 0x4f, 0x77) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) recvmsg$kcm(r1, &(0x7f0000000880)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000680)=""/193, 0xc1}], 0x7, &(0x7f0000000800)=""/66, 0x42}, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') mount$bind(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x8000, 0x0) futex_waitv(0x0, 0x0, 0xca9a3b, 0x0, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) write$selinux_user(r3, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x25) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @loopback}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000480)={r6, 0x9}, 0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000002c0)={r6, 0x401, 0x8, 0x40, 0x8, 0xff7f, 0x3, 0x0, {r7, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x3}}, 0x4, 0x3, 0x10, 0x75, 0x8}}, &(0x7f0000000400)=0xb0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x1c, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x10, @empty, 0xffff}]}, &(0x7f0000000040)=0x10) shutdown(r9, 0x2) socket$nl_route(0x10, 0x3, 0x0) 3.655280808s ago: executing program 1 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffdfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xc, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, 0x7800, 0x8, 0x3, 0x8001}}) 3.031847711s ago: executing program 2 (id=1326): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x20}, {0x6}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x1f, &(0x7f0000000200)=ANY=[@ANYBLOB="180002000000ffff0000ac4fd471000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=0x1, @ANYBLOB="0000000062820000184a0000080000000000000000000000185800000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000600000041745000ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x86, &(0x7f0000001500)=""/134, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001640)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001680)=[{0x1, 0x1, 0xc, 0x2}, {0x5, 0x4, 0x10, 0x1}, {0x5, 0x5, 0xd, 0x7}, {0x1, 0x1, 0x1, 0x8}, {0x4, 0x4, 0x4, 0x7}], 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70400000800000085000100000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan1\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f00000017c0)={0x0, r3}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1819d4ebe68428c5f3f8127511e99808006309"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) 2.986590872s ago: executing program 0 (id=1327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001f7eb9fd733946cda9f7af000000000000", @ANYRES32=r1, @ANYRES8], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffece, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xce) faccessat(r6, &(0x7f0000000640)='./file0\x00', 0xf4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x48}}, 0x4048000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000006000000090000000000000e04000000000000000f00000001000085090000000200000000000000030000000d00000000000007000000810e000000000000010000000071006e02005f5f303000b9e36b76959abedda57f489143e1c31a71a505bddc863fd9802797239790fc348493d395d05a3ec9b3bbe6a05125d91bf3d701361558659a308350933f92b212a54e3c4f"], &(0x7f0000000700)=""/124, 0x62, 0x7c, 0x0, 0xb1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000ffffffff010000000800000020340000", @ANYRES32=0x1, @ANYBLOB="cd00"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0100007e733eb800000000000c00"/28], 0x50) setitimer(0x2, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r12 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r12, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r13, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 2.848510494s ago: executing program 0 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000003c0)={{0x0, 0x0, 0x846, 0x1, 0xe6}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) syz_emit_ethernet(0x22, &(0x7f0000000380)={@link_local, @remote, @void, {@arp={0x8902, @generic={0x101, 0x17a, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r5, 0x1, 0x123, 0x234}, 0x14}}, 0x0) r6 = dup2(r3, r3) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000500030000010008000200000f0f00fe4286b987386d3c0c339b42d5433b5a70919b277c38e233af72cc56910f62713918e5ca4e31826577169dadde2b90890c39d3f76c0a1210d6b24aebf0f41d7401effd5b0d8a747f77bfdcf2f447d988833f2c63f81c32ca9ca2d32a99de4b3fe5d559ec829a197b7c5a0d2b013f3c9a83b4ee062e1a65e632f7dd24af6ceec1aef55855f9348e791d9dd7dbc80b539964b4bacca7195aa27e009b4852734b02e1c501dbd48d66027bbc05c1726cfac492427fc44a5cab079c2e6f288a4bc435de499880418e503f502f6164b172056bb39eeaf606b7"], 0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f000001d540)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0x12c}]}, 0x14}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$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") r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9, 0x0, 0x9}, 0x18) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r12, &(0x7f0000004200)='t', 0x1) sendfile(r12, r11, 0x0, 0x7ffff019) fallocate(r8, 0x0, 0x0, 0x1001f0) 2.617175729s ago: executing program 1 (id=1329): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) getitimer(0x0, &(0x7f0000000080)) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 2.53728273s ago: executing program 1 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r9) 2.125490409s ago: executing program 4 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="4a0002"], 0x8) creat(0x0, 0xecf86c37d53049cc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x800003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0x8, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x3, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x7, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0xa78, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0xffffffff, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x11, 0x5, 0x3, 0x10000, 0x6, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x7, 0x2, 0x81, 0xd44, 0x8, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0xa, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x3a9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x2, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x7, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x101, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x81, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r12, 0xf3a, 0x4) mount$nfs(&(0x7f0000000040)='GPL\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x40800, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c7365636c6162656c2c646f6e745f686173682c6673757569643d64663665346361612d633430622d666300622d322310302d31340036336363342c00"]) write$binfmt_elf64(r5, &(0x7f0000000500)=ANY=[], 0x18c6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x5) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000000314010028bd7000fddbdf250900020073797a31000000000800410073697700140033006d61637674617030"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.966823112s ago: executing program 4 (id=1333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202040, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x36, "4372071e845c1497c855383000000002000000372a72ee4dfeed37968b00905020000055965737d2aaec032b9753384b00000000ef86"}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ufshcd_upiu\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='T', 0x1, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) 1.887213373s ago: executing program 2 (id=1334): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b000100766574"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140006001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684a100d0000e96ca4b72643dd3689729568e9", '\\\v\x00:', "29a78ab9b0a4e8ae"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000005124a70a000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.868296064s ago: executing program 0 (id=1335): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r10], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000180)={0xffffffff}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001abed30a900", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x2404c455}, 0x20040000) io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x295}) 1.863543544s ago: executing program 4 (id=1336): io_uring_setup(0x4c2e, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_emit_ethernet(0xc6, &(0x7f0000000680)={@broadcast, @remote, @void, {@x25={0x805, {0x0, 0xff, 0xb, "5652905f755d7e6a94f8141a7fb68f5934446c06b01e80813e317a9683bac8439d6c13a1f72da649b86fd6e5429d91b5dad7ac64b8868869f6f1c506ffed94877909ef59b956c07e1bed36ca616b11f507af1f28ce0b5166096c88aaee89b872a46e0877aef4c0ea7e389f2e1e9c0120dca1f4232c599585df54e720a575cf45409b7efabf165ad60e670795e6e938de5bea5f1e4f77ceaee65413ee27f01c8bbc578ec59bf577bd6320689577bd7214e72196affb"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x675, 0x5c5, 0xfe, 0x9a0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r2, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/mdstat\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100028bd7000fedbdf250d0000001c00018008000100", @ANYRES32=r10, @ANYBLOB="e5880a010000000000000000", @ANYRES32=r14, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 1.854698504s ago: executing program 2 (id=1337): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x5380}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x9}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000010000000000000000008018110000", @ANYRES32=r1], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0x80000000, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xe, 0xa}, {0x5, 0x5, 0x1, 0x9}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x9, 0x5}], 0x10, 0x92}, 0x94) 1.58000519s ago: executing program 0 (id=1338): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000640)=0x13) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x6) shutdown(r3, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x7f) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x39, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xc5, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x6, 0xcb, 0x1, {0x22, 0x8b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40, 0x1a, 0x52}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x9, 0x3}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x9, 0x40, 0x89, 0xff, 0x3}, 0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f4e000514100402cdf86d5330b35d6de6629dea3f3f108c1410040404a52ee7cf1616047dd1e307dfab8d5803100b1410040867a76c91493286ccf1278c386e5e18d80ace01051003000600020081ff"], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_disconnect(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000012, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000101000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) syz_usb_ep_read(r4, 0x0, 0x57, &(0x7f0000000400)=""/87) socket$nl_generic(0x10, 0x3, 0x10) 1.095534259s ago: executing program 4 (id=1339): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000020400"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc1500003c000900000000000200000005000000b81502"], 0x15cc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r3, 0x10001, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0xf0, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2c105519ceb51b56}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xf0}}, 0x24000041) syz_genetlink_get_family_id$tipc2(0x0, r0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$usbmon(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x6a1b) lseek(r4, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x16) ptrace(0x4211, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getrlimit(0x5, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 745.454206ms ago: executing program 1 (id=1340): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x100, 0xfffd, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4002, 0xb, 0x3, 0x2, 0x20005, 0x400b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) creat(&(0x7f0000000240)='./file1\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) r8 = getpid() tgkill(r8, r5, 0xf) syz_clone(0x2d000, &(0x7f0000001700)="d1a77ab958cf68d4704549966e86b05106ab80bf4df16aae62072cd7f9912092738444a17a65c08b17e304a795f93d440ac6fc017bff25070809f9a9fe8f0a25fd2bad4cd8b473d783319bab4724632da3084757609f88483e75e9ccee4d2d729779a83a4fe760975e5e662080962f28d2477de63ad91a385300a5fbf108e4c2412acf479bfb397bed9c9463afc3cf0b2cc4dab77eaeea1b91a594f57b9b110793e94b4e6f87dae9a5bae3c771701bff1f6db123955c3d72faf834c7fc48ae381d89b5f931c65e41f02a78226eeb186c7aee99eb71bc9b4a6221fa1ece99d9667b519789a76889b081b993a0ae4e2297ff4200ae0e8c80382d3eee9922b49ecef51a03003fac7e4736bbbdf4f2465aa69b8410d5f17e691ad58b8f6e57075683896a0dcd669aa18d7b4e029279e664f063555c83b3547c0630c089979aff1b8949e894969f30eccbcb5cde4e68ef1200067d9297b3bc2ee571a7b7d598c5821dfeabb7241f16b1912468cffd36a53bd8d8721fc0a98e86e1931ac1c1e4625678f6ac9c1c65237f74a6a4ea9e3ae53ec48c23254a1fbcccd2dd726daef281fe102120396e684cf70d7d3c7ef459359ebcc722d7cafe8a346ac4fb7355bf51c3952bca754b65ac3d3b19d17b1ae8f8bb61c7fc359a42f18eab359509724bf6c6e1a8cc86334cf9981727399e40ea8bfdaaba73045c1132d443aa442e25d9940427e0db3d27aed8bdd27c6173c0ae453202b4121f05797a3dff7767feb693ca192657cb0f8fd261670db0b12e964b1fe12ea80782f38b2c47d7631b1ce913a63ca33060ce4c8690acc0816a04f54628db79a892060eb552d06d2419bb51569e42e3a88037ea671c919f2aba3d255b481689c87e6a051589c41499503fc98e5637ae5c1c13992669199ec598c156bb22a6603ff2ae181b8b2a877e9f4de92d450a3cef3970fdfe92945003781db5d355afa2186877990ef095368267096c4186a735356f5c27b15f2192c82b1bf4ebef7a96dca8b1b02580e5903bbfcc6d22ccbbfc8c9643d0967b6c7b47caf9b8361a02f3a5828404e136142abcbb2f1adcfc92919405c174e4eb1b7afd8d0ca096f593239492fed383eb4bb8cab0296f085c7e508c6a0b50ccd8bb2d2aef8a6ca1ab379414f0b6814b6dabc92eaacffd2f24855c803f912a5b14dcc890f6bcca38353d3ce6310edcd906c8dafe700426a9e4f6d194ab9346ba33990728e20dae97b144dd67b8562969d136662aba29952db1cba0f3d54cd0a0b71740629be2b9b0f2479b04b9a0c6eda270495f4e305c56d6abef49d3894d480757f6e45deeb5d83f4511ba82d123ba2c7705f7ba4db57a5672ae4dd08d96afbf82b99e526440127d5f7fa7543006b53840b5ad89ecff574167704379c517d3a4f48c34255e075261914820b1e0638c634d49edb579eb3a352a2313dff0ec51d94392663bb0884f7ab959b36bd0c0fe1855e07571e2cbf1598bbeee0ade6480c026658a46ca1168c4be454cc1044d425a83f0c33362d563688ddf609a24037ae485d302cceaba882ccf3fd0849ca25c3058870dbf1c965f3c5d1d172358bcb597d9443c7230b26bdce7aae3b4b10cc0f833106e2699a178b0d89ca87748288ad0dee618585074b40ee073a876c9d8fce78f7a5c7f85f65fed9677fbd20626569a62f2b363447684325054824fe23f9f19757c0fa0ae45531b23ed91f16d383f4bcba1c035e0a8fd91e03a2cb7d5a22074d31b0ade1cf397492cbb9cbaed566fced7064e6fdfa722fda2a763f191e0a3fe2c732c820f8b4c5d9e808290afdff520b351c20b6a4d41e9d7428c8b78ffdde60fc6f96fa8f20ef7afeec91093821f20ab1d0b9065cebb6cf06867a0ba03e46651622556b3edde24c04adc90919bc9afd6cbbbbdec99ef655b3361e59f06398f0f428f31e6c6b71abe634591f9808d78aa5614195fb28cf260f2b015f7dca80150a3f565e2390fea2c7314ef047de47b265e00f8933a4db044ec8d5ff9949635990c91e75580983a6b60b339a024edd9b02071184abe2c9c297ca909afe02c1f756162b889ed5b7b03e40016959c7339209d5f1d4e45f798f98ba6e81ad60975b2f65ce9cb0e5ac931d4107988755a37b436b7ed97cde6dee531753c81dbf9e01736557ecb367ecdedeb7bed3fdae8fbf511d01a37e8cb926e580353b4690c6c26ab0c0fc0e5a3b39725121a2228be5fa0ae195eb0bb706e775643fa1648bb60d659a6f890bc0f22dc33e12cb78ea8d9f28587835e054f6f6ce1fcbdf31efe17f9c48134a927ce19896f1352d2f0e07d22757e40ba3640707471cf1552f799e3591fc7f7e5500c17b14ffd8e79779ccf66dae9bf764afdcd2f7934193c47d8686ce99262cdf6a2da8fa587b26273791c099cd97ca2dead67793be550dcfc544560bedf8dafa9fa89ba41a001c665770563b1d3936af5ca4225e798b1235594a7498fc4f8bec7f6cf35a103ef10a4a6e75cca4fac5e801c3a3dd94ad951845de9b210b53de3f6ba7c56e0037c62d8765cd3cb9a99f55068ce22703a5d2cdff45d7704b17e608b03ef7f0049708bf3b4d70ee6e1edb8be7683eec4dde8bd429c927baa8c365147059c2a131131518617926624c886a0b2bab2ca4025730d5a8cd54c1e07970fab63edf0ef72ab9ce83fb169bbcfeb82ea10a65c16fa8b51afd7f0431be52633c92ef05f3d8162987118450065af2dc6a0bdfc7f18efb8915ddded318b319dad556fbe180b09c6b406f6af3427a77ffbbd5bfd0ef18b27b89c03885e99cec0435af86bcbbfccded16a75ff9b75d83e403c9c5b7b6a5697dd6e66c8a95816b6cd79dff7b63ad69d2f08d1ba05498757320b773bbcc201fc83a7da40f3edb2a52cf6ba889bf113eafe3f5e0d092329fffb0f92e4f8ffeab35c8ff7ebbe3683248651cb6cb32286d0f99f1815fad72200c45724fc7a26e86446946966ce6ad0acfb1288a857ff3e655d177a51c9339723033725eacd9f4f920c4a662fc9bca393bd1e80a89d452d654df55682e61c393f7fda3dd145f3422615a855655d75ca90d1259ea7cc6e301cb4100f779e5d7a95e2a337a547a23798ab53d2ee9ea75d3fead5c399306145a7463937cf73b90f90a3fcc4dc9f14c8fde4b21def74b55c51a6cad6e46c21435d18981925fedcd988f683cb6ddc9ad51ed66b4dce1e626cbd8f4c534daa79f8d00e7a3dcda393188d01ca470f70ea5313e508713da498ac554dd4e607e043756470fdc3e4dccc6a5583d95e33c38042efe75384becbe8b1d9a9f6994d259800b119d4955b9c92c9ee1a5193f0534cd3aa268e4762a4bfcfe0c7ba26599e7d15f909ed7cc6311d172e2c184dc581a1d990eaba002c617e717b1abeb47bcbd11cb26b83a63afa645598e325eda218d8a259444252cd86989b99cb82c9bdd28f64ce1ac980644c3e63824f47a98c6ca957ed5f51a38b222a93cbdce73f61b958d3881ec3e63912662efef2a5888eda55d45202d30e83ee7b501e3b06e9b5cb11c065e6236486aa44a1de3bb67032fa67ad950cef885d41e3030c5125742aab5efd6d90eeb04d33ce90335e4c48d3669a31892eeb686f59d530c6e27089601a7ab10819dbb7a5654c17a812a9d2f4f86b6b2d007385227daa8dadaf7c4529f2905e13595c521f33a426f115455115b77c30dd1f7f9d3eb4b2489668f948492a2ae903b2f7494dac2c1602ec3ff5e21c9f7a99a0e32d6fb3e3c24425e7a0e8b7958cd8cf48c80a508b7e6d8aada2ac7ab5857941626e65707e88dce9af92a1c49fa99cf95d574da5a8985ff0ef7f44e3baf3aa6284304ecf1ceb5f95d7ef018caa0fb404d9a26cbfb94e960302d10d0109ebe0d385f2b0f5b5faeb1c724d25d307ba22475855f5a027bacff878d82fa90d38d50d3c89c1fc75d47204d95e3ca12b8461a51c6727babb79e5af89cbbbcde3f6a9c163dc4ff5910d7b0822e57934ab4177c365bbdb286865d3c2a74c2875e37795bb36cb2c5bc29dbd72e98e3f163bc983c6199984fe563383317ae921c4c7af347fa62a7182a061b53d6893fc8eb04c3e585d4d40d2cc3f4961af09b8347e3dce0b2335eee5598164d7d246d6269203ea9663c7093c1e38451e831a6468f985732c530694f20164276324fac7457b669e4ed6bd0af73a6ca22d7d9fe6ed9849cf2a40c0fc0c7489601a16491dc2f9b3fd97df4a616ce64a1878e29d71a3663af96f050603eb30346854b77d9cdf1dbb56637abfed144a4ede110a1466fe7561ff649a26dc8e3bc08551c235aabe0ddb529f8ea0d5005ff823baad66cbe6f818e4b349a789514d8755cdefea8413a16c146ca79deeb6238fff2090b0bfce09fe434bd2e9a9567886a1daac5c183a35485eb91fbd7670fda1d974e21c89a7c4d0d6724f76da67026385a9a5a59480c13540232ff45e3f13d3c002863cf996bf3a7b2ac0cca616039322baea102333e68756aac3c99a3afd01940ea9c73e4291bf045e1c8545b4c9cbe7c263ad0df4c70ddecf7f733a3819f3796db539b2447559861eeb1571bd3fd1d49c75c7ca10d79bfbc7748d6d28237675a00ff966bd3c9254e1c44ffe442e2b6fff18cb54062f3e0a41380f568f699dbf15f764f8526497fcb9d2df306b9d26388da3acd805a7125a5dbce8cb85279bb175d1061965b2b73ed6cfdd70f1ebbf8dfbaaaef375f5ad1dbe55b56643a0e48a579efdeb8dff823f9a5e5892a4b00eac716db684c7892b469ba1c889d110477e1ab2db0626730b569a42e1baeb4470a5b3d31fbeb42b2676f2d9763096e0e8120e74607277766bf6a3ff7eeaef4d8edce3e70071a5d837fde1e59bf40e7bd755c907138507aa7b428d75ef245cd8ba737e9ce9dd7a0b14861df8a0849be84dfc62ab8572d5a3fc8c85faf0f5db9acf31e200b1c76291b4b1e46b2ce73efc893384a62efc494da6a71ffc6273c6aa874e47e6e61ff8c12728b7a9ce8c1c7d7449f3197d344d8ba26a5d48cd0158f39101e310bfa973b902e5d276dcd66ad84053b62d8999704f773d9b1db8f4400e88b5c8beeec91218af4f1d213149573b033770981b5159b0ef1d22c459a09778083941d53bdc094856e5ba594c6cddf38f20b786d4b5fa288990e0c27d56c4929699414f5d9a1302c5aae43a17e219e4682b531a9e06b6cc0fd9bf9a62c87e1d36b502f9f87413e38bd79e40ee340e7f4cae6d93a7ce7aa41b83d0ca8ff26d941cb102261f4eba4f0935624bec5f22fdb12f569a2590a14ae187d594d30787fe6df6a1074005340ae31fbc7a593008af5bd1b71efa48879c0cde71b11142ebd11f431e94ca61e2d0a4506ae8979d70c83f95f70f2528b1b8c585453dee8356e76436aca12771fc5b6a72e9d082051b4b6dffb61dc2031fcc4021d1e8e899163cacddc97ef79a710c4a3eb1298be118b68428c5c225ab05a56c90146d1f767882ab03503cec228198ba3055311be80a35371e30a5ce8d40a0450fb89989b709042c1dc3635ed95c0c82e64cc88d037d60430b6a4769c24dca409c7ac2ab08ced97263d5010d14fc64eace2e7501a56862a78e54ffe4867495232536f6d393e51c2bbe1c24186f58a6eab72498536002b4123764dd2c45c1c5a6a3774405d8a492a365027658dabcc7c1d4604cc469e870117c6b0279b87c9f01861f3b64497d978b3eb9b790a020bf9aedc30ca61fbec227e84a3119d10c5e1232c65a0df4762b3cbd32e1ed9f34c63ee27ee5c2896ba3e3c7e23113fd14f8e7f06ddac65ea0ea7c50ff68e42594d3", 0x1000, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000580)="27969f6f3183f77a41e817b3693b149c528b9f04cc0fabe21d6d2cce2439e2f93bf3edcb9f1ccd703aae24021879223373dc9b361b2ff04f4247438518859470f48f4958e34a4dfdcf28d4491e0404bdcd1105150cca59117cdafc1a5ebdab0c0244d210e2fc0df3ffffeb810c928715991d719ce9648fdcedcfca7bdd7f8263b086753de244f0d91297e236ca79a24e5487c1783f4787708bde8f261fbc0dbdf67fa07d0fa7cba0816fc31543861f25147563768d9c08769fc70d6f72c8ca45f9d261860b4d3c426ab753fec230b8c86bbd5798e0") connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @local, 0xd}, 0x57) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) fsetxattr$security_evm(r1, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x2, "331b3b851483b6a79d262c630f92ac0a"}, 0x11, 0x3) 628.022498ms ago: executing program 4 (id=1341): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="0040000000000000000000000000000300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup(r7) fsetxattr$security_selinux(r8, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x9}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0xf8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xb1, 0x7, 0x1, 0x0, "615dc914eab29081c045152a38ea69192f4bb79c7720301afb1d4a10ed70f722a9e14beaf0d29d1dc2d43f4f4ea635f0a8663ef40dd7df16b58c46b15f87475f856b740d544ce56f019995be4f34579a7e4eee52dcfe3c099b244915e2c6f194ac9e6ff619841a4870e3944f66a20f8bf746a517f31d1e6eb3b0d1154787923db2fea8246cab2226617390c6596d179b1dfea9b40fe235d628e4f8212a6fb8ff9a5f311caa8f88e64f282c4eff"}, @NFTA_RULE_USERDATA={0xb, 0x7, 0x1, 0x0, "c97a657997a3c1"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) 572.582599ms ago: executing program 2 (id=1342): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRES16], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x5f, 0x7ffc0002}]}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x20000000, 0x0) io_uring_enter(r2, 0x15f1, 0x6184, 0x23, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10800d, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x40000000000000, r6, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)="e72c74080a4b4aadb3463a0b739c3264603520abda8c5bf58ba774e2d23c0a88de08b4e9e7dbd349a9f766610647b038c0e76e082a2e") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1900000004000000040000000200010000", @ANYBLOB], 0x48) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000400)=0x3) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x2200, 0x0, 0x0) 559.51923ms ago: executing program 4 (id=1343): bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032bbd7000fedb3dc8a169ed16a2d7dc1e83acfe93"], 0x1c}}, 0x44) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd0500fbdbdf25210000000c009900054500005a000000040087000500f600070000001c002c8008000000030000000800000000000000080000000400ed001c002d80170000006c9ba130943f859b141649c5b5fada635a384f9bd63523af88dd056759fafd0008007700050000000a000600ffffffffffff0000"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000006c0)="b91f04076003008cb89e00f086dd7e342129e230674eef333ace73267eed05b1c235736617cd9073f3018408e840128417d382092eb3", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r7, r3, 0x0, 0x3ffff) sendfile(r7, r3, 0x0, 0x7fffeffd) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r10 = socket(0x10, 0x803, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 175.041907ms ago: executing program 0 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) flistxattr(r1, 0x0, 0x58) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x52b4969de0fd418c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="11000000520001010000b4e0fb6d39f702"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$binfmt_script(r5, &(0x7f0000000080), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2, 0x3, 0x8, 0xfffffffffffffff7, r10}) syz_pidfd_open(r10, 0x0) 0s ago: executing program 3 (id=1345): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) ioperm(0x0, 0xd, 0x4000000000000020) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @rand_addr, 0x6}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): adm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.657665][ T29] audit: type=1326 audit(171.829:17803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.680939][ T29] audit: type=1326 audit(171.829:17804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.703775][ T29] audit: type=1326 audit(171.829:17805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.726954][ T29] audit: type=1326 audit(171.829:17806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.750077][ T29] audit: type=1326 audit(171.829:17807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.773426][ T29] audit: type=1326 audit(171.829:17808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 180.787598][ T7329] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.922: bad orphan inode 11862016 [ 180.797295][ T7326] syz.4.920: attempt to access beyond end of device [ 180.797295][ T7326] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 180.820850][ T7326] Buffer I/O error on dev loop4, logical block 2068, async page read [ 180.829199][ T7326] syz.4.920: attempt to access beyond end of device [ 180.829199][ T7326] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 180.842406][ T7326] Buffer I/O error on dev loop4, logical block 2069, async page read [ 180.850779][ T7326] syz.4.920: attempt to access beyond end of device [ 180.850779][ T7326] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 180.864081][ T7326] Buffer I/O error on dev loop4, logical block 2070, async page read [ 180.872363][ T7326] syz.4.920: attempt to access beyond end of device [ 180.872363][ T7326] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 180.886221][ T7326] Buffer I/O error on dev loop4, logical block 2071, async page read [ 180.894536][ T7326] syz.4.920: attempt to access beyond end of device [ 180.894536][ T7326] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 180.907910][ T7326] Buffer I/O error on dev loop4, logical block 2072, async page read [ 180.916473][ T7326] syz.4.920: attempt to access beyond end of device [ 180.916473][ T7326] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 180.929862][ T7326] Buffer I/O error on dev loop4, logical block 2065, async page read [ 180.938102][ T7326] Buffer I/O error on dev loop4, logical block 2066, async page read [ 181.113828][ T7329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 181.165020][ T7340] net_ratelimit: 3 callbacks suppressed [ 181.165030][ T7340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.217036][ T7342] __nla_validate_parse: 3 callbacks suppressed [ 181.217057][ T7342] netlink: 200 bytes leftover after parsing attributes in process `syz.3.924'. [ 181.412594][ T7349] serio: Serial port ptm0 [ 181.541688][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 181.666500][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 181.701474][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.926'. [ 182.208326][ T7360] lo speed is unknown, defaulting to 1000 [ 182.214760][ T7360] lo speed is unknown, defaulting to 1000 [ 183.022794][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 183.250980][ T7384] 9pnet_fd: Insufficient options for proto=fd [ 183.287571][ T7384] loop1: detected capacity change from 0 to 512 [ 183.317064][ T7382] atomic_op ffff8881241aa128 conn xmit_atomic 0000000000000000 [ 183.465382][ T7391] lo speed is unknown, defaulting to 1000 [ 183.471964][ T7391] lo speed is unknown, defaulting to 1000 [ 183.731428][ T7390] netem: change failed [ 184.086677][ T7397] loop0: detected capacity change from 0 to 128 [ 184.097950][ T7397] vfat: Unknown parameter '0xffffffffffffffff' [ 184.451021][ T7403] loop1: detected capacity change from 0 to 512 [ 184.502144][ T7403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.651144][ T7410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'. [ 184.808253][ T7414] lo speed is unknown, defaulting to 1000 [ 184.878576][ T7414] lo speed is unknown, defaulting to 1000 [ 184.978521][ T7420] netlink: 'syz.4.939': attribute type 4 has an invalid length. [ 184.986229][ T7420] netlink: 17 bytes leftover after parsing attributes in process `syz.4.939'. [ 186.093124][ T7424] netlink: 9 bytes leftover after parsing attributes in process `syz.4.941'. [ 186.147848][ T7426] netlink: 5 bytes leftover after parsing attributes in process `syz.4.941'. [ 186.203932][ T7424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7424 comm=syz.4.941 [ 186.228979][ T7426] 0ªX¹¦D: renamed from gretap0 [ 186.258385][ T7426] 0ªX¹¦D: left promiscuous mode [ 186.263316][ T7426] 0ªX¹¦D: entered allmulticast mode [ 186.309759][ T7426] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 186.540350][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.706288][ T7440] loop1: detected capacity change from 0 to 512 [ 186.747707][ T7440] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.765166][ T7443] loop3: detected capacity change from 0 to 128 [ 186.788781][ T7440] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.944: invalid indirect mapped block 4294967295 (level 0) [ 186.807210][ T7444] atomic_op ffff8881023d2928 conn xmit_atomic 0000000000000000 [ 186.816731][ T7440] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.944: invalid indirect mapped block 4294967295 (level 1) [ 186.851706][ T7440] EXT4-fs (loop1): 1 orphan inode deleted [ 186.857573][ T7440] EXT4-fs (loop1): 1 truncate cleaned up [ 186.872827][ T7440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.942705][ T7440] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.944: iget: bad extra_isize 46 (inode size 256) [ 187.042442][ T7448] 0ªX¹¦D: left allmulticast mode [ 187.067087][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.110246][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.139034][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.161812][ T7448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.179519][ T7435] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 187.187409][ T7435] FAT-fs (loop3): Filesystem has been set read-only [ 187.194814][ T7435] bio_check_eod: 38295 callbacks suppressed [ 187.194830][ T7435] syz.3.943: attempt to access beyond end of device [ 187.194830][ T7435] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 187.216101][ T7435] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 187.224003][ T7435] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 187.234828][ T7435] syz.3.943: attempt to access beyond end of device [ 187.234828][ T7435] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 187.249045][ T7443] syz.3.943: attempt to access beyond end of device [ 187.249045][ T7443] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 187.262456][ T7443] buffer_io_error: 38294 callbacks suppressed [ 187.262474][ T7443] Buffer I/O error on dev loop3, logical block 2065, async page read [ 187.285442][ T7443] syz.3.943: attempt to access beyond end of device [ 187.285442][ T7443] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 187.298905][ T7443] Buffer I/O error on dev loop3, logical block 2066, async page read [ 187.317981][ T7443] syz.3.943: attempt to access beyond end of device [ 187.317981][ T7443] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 187.331883][ T7443] Buffer I/O error on dev loop3, logical block 2067, async page read [ 187.344063][ T7443] syz.3.943: attempt to access beyond end of device [ 187.344063][ T7443] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 187.358120][ T7443] Buffer I/O error on dev loop3, logical block 2068, async page read [ 187.371973][ T7456] netlink: 'syz.1.958': attribute type 6 has an invalid length. [ 187.386161][ T7443] syz.3.943: attempt to access beyond end of device [ 187.386161][ T7443] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 187.399483][ T7443] Buffer I/O error on dev loop3, logical block 2069, async page read [ 187.429100][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 187.429185][ T29] audit: type=1326 audit(178.152:18208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.442660][ T7461] loop1: detected capacity change from 0 to 1024 [ 187.466597][ T7443] syz.3.943: attempt to access beyond end of device [ 187.466597][ T7443] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 187.479917][ T7443] Buffer I/O error on dev loop3, logical block 2070, async page read [ 187.489307][ T7443] syz.3.943: attempt to access beyond end of device [ 187.489307][ T7443] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 187.502631][ T7443] Buffer I/O error on dev loop3, logical block 2071, async page read [ 187.512953][ T7461] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.519665][ T7461] EXT4-fs: Ignoring removed bh option [ 187.531374][ T7462] loop4: detected capacity change from 0 to 1024 [ 187.538214][ T7443] syz.3.943: attempt to access beyond end of device [ 187.538214][ T7443] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 187.539823][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 187.551436][ T7443] Buffer I/O error on dev loop3, logical block 2072, async page read [ 187.565765][ T29] audit: type=1326 audit(178.189:18209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.568861][ T7435] Buffer I/O error on dev loop3, logical block 2065, async page read [ 187.591503][ T29] audit: type=1326 audit(178.189:18210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.601360][ T7461] ext3: Unknown parameter 'subj_type' [ 187.622687][ T29] audit: type=1326 audit(178.189:18211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.629641][ T7462] EXT4-fs: Ignoring removed orlov option [ 187.650904][ T29] audit: type=1326 audit(178.189:18212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.679683][ T29] audit: type=1326 audit(178.189:18213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.700022][ T7463] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 187.702766][ T29] audit: type=1326 audit(178.189:18214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.711171][ T7435] Buffer I/O error on dev loop3, logical block 2066, async page read [ 187.734110][ T29] audit: type=1326 audit(178.189:18215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.765812][ T29] audit: type=1326 audit(178.189:18216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.788893][ T29] audit: type=1326 audit(178.189:18217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 187.883337][ T7462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.976432][ T7454] program syz.4.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.033298][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 188.248221][ T7478] netlink: 'syz.0.952': attribute type 4 has an invalid length. [ 188.256155][ T7478] netlink: 17 bytes leftover after parsing attributes in process `syz.0.952'. [ 189.207453][ T7483] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.321206][ T7483] lo speed is unknown, defaulting to 1000 [ 189.346319][ T7483] lo speed is unknown, defaulting to 1000 [ 189.377804][ T7486] netlink: 96 bytes leftover after parsing attributes in process `syz.2.954'. [ 189.387816][ T7483] lo speed is unknown, defaulting to 1000 [ 189.409140][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.431716][ T7483] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 189.501789][ T7490] loop4: detected capacity change from 0 to 512 [ 189.519666][ T7488] lo speed is unknown, defaulting to 1000 [ 189.530350][ T7483] lo speed is unknown, defaulting to 1000 [ 189.537027][ T7483] lo speed is unknown, defaulting to 1000 [ 189.544771][ T7483] lo speed is unknown, defaulting to 1000 [ 189.551665][ T7490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.553338][ T7483] lo speed is unknown, defaulting to 1000 [ 189.570704][ T7483] lo speed is unknown, defaulting to 1000 [ 189.570654][ T7488] lo speed is unknown, defaulting to 1000 [ 189.592045][ T7483] lo speed is unknown, defaulting to 1000 [ 189.605462][ T7490] EXT4-fs (loop4): 1 truncate cleaned up [ 189.616514][ T7490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.848071][ T7501] netlink: 'syz.3.961': attribute type 6 has an invalid length. [ 189.931889][ T7504] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.016848][ T7507] lo speed is unknown, defaulting to 1000 [ 190.023779][ T7507] lo speed is unknown, defaulting to 1000 [ 190.270357][ T7507] lo speed is unknown, defaulting to 1000 [ 190.862832][ T7509] SELinux: syz.1.960 (7509) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 190.884006][ T7504] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.174203][ T7504] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.203784][ T7511] lo speed is unknown, defaulting to 1000 [ 191.260104][ T7504] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.362379][ T7511] lo speed is unknown, defaulting to 1000 [ 191.381390][ T1592] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.390124][ T1592] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.420365][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.485364][ T1592] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.516260][ T1592] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.532381][ T7515] netlink: 32 bytes leftover after parsing attributes in process `syz.0.964'. [ 191.582544][ T7513] loop3: detected capacity change from 0 to 512 [ 191.600390][ T7519] wireguard0: entered promiscuous mode [ 191.605951][ T7519] wireguard0: entered allmulticast mode [ 191.624203][ T7515] SELinux: failed to load policy [ 191.637384][ T7518] bond0: (slave dummy0): Releasing backup interface [ 191.646526][ T7515] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 191.654257][ T7515] netlink: 17 bytes leftover after parsing attributes in process `syz.0.964'. [ 191.663048][ T7513] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.672463][ T7518] batman_adv: batadv0: Adding interface: dummy0 [ 191.678812][ T7518] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.694101][ T7513] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #11: block 1728053262: comm syz.3.962: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 191.704562][ T7518] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 191.822292][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 191.835629][ T7511] lo speed is unknown, defaulting to 1000 [ 191.858081][ T7529] netlink: zone id is out of range [ 191.894853][ T7529] netlink: zone id is out of range [ 191.927560][ T7529] netlink: zone id is out of range [ 191.932901][ T7529] netlink: zone id is out of range [ 191.941429][ T7513] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.964964][ T7528] IPVS: Error joining to the multicast group [ 192.004686][ T7529] netlink: zone id is out of range [ 192.053780][ T7529] netlink: zone id is out of range [ 192.064876][ T7513] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.962: corrupted inode contents [ 192.067760][ T7529] netlink: zone id is out of range [ 192.129952][ T7529] netlink: zone id is out of range [ 192.151073][ T7529] netlink: zone id is out of range [ 192.203013][ T7513] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.962: mark_inode_dirty error [ 192.265417][ T7513] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.962: corrupted inode contents [ 192.284748][ T7513] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.962: mark_inode_dirty error [ 192.333216][ T7513] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.962: mark inode dirty (error -117) [ 192.348350][ T7513] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 192.376848][ T7513] EXT4-fs (loop3): 1 orphan inode deleted [ 192.390753][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.721445][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.371521][ T7547] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 196.385840][ T7546] netlink: 'syz.3.978': attribute type 21 has an invalid length. [ 196.386697][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 196.386712][ T29] audit: type=1326 audit(186.422:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.0.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 196.393598][ T7546] netlink: 156 bytes leftover after parsing attributes in process `syz.3.978'. [ 196.399808][ T29] audit: type=1326 audit(186.422:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.0.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 196.448594][ T7549] loop3: detected capacity change from 0 to 764 [ 196.462375][ T7547] lo speed is unknown, defaulting to 1000 [ 196.468196][ T7547] lo speed is unknown, defaulting to 1000 [ 196.479574][ T7547] lo speed is unknown, defaulting to 1000 [ 196.480047][ T29] audit: type=1326 audit(186.486:18441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 196.508487][ T29] audit: type=1326 audit(186.486:18442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 196.510465][ T7547] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.531487][ T29] audit: type=1326 audit(186.496:18443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 196.561612][ T29] audit: type=1326 audit(186.496:18444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 196.580643][ T7547] lo speed is unknown, defaulting to 1000 [ 196.584819][ T29] audit: type=1326 audit(186.496:18445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 196.597990][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 196.613955][ T29] audit: type=1326 audit(186.496:18446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 196.634436][ T7547] lo speed is unknown, defaulting to 1000 [ 196.645672][ T29] audit: type=1326 audit(186.496:18447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 196.645711][ T29] audit: type=1326 audit(186.496:18448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 196.656440][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.1.967'. [ 196.715898][ T7547] lo speed is unknown, defaulting to 1000 [ 196.722792][ T7547] lo speed is unknown, defaulting to 1000 [ 196.729198][ T7547] lo speed is unknown, defaulting to 1000 [ 196.742600][ T7546] rock: directory entry would overflow storage [ 196.749062][ T7546] rock: sig=0x4f50, size=4, remaining=3 [ 196.754759][ T7546] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 196.896000][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 197.020044][ T7570] netlink: 'syz.4.972': attribute type 6 has an invalid length. [ 197.123529][ T7567] loop0: detected capacity change from 0 to 128 [ 197.189193][ T7573] netlink: 7 bytes leftover after parsing attributes in process `syz.4.973'. [ 197.229341][ T7575] lo speed is unknown, defaulting to 1000 [ 197.236877][ T7575] lo speed is unknown, defaulting to 1000 [ 197.251045][ T7567] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 197.259011][ T7567] FAT-fs (loop0): Filesystem has been set read-only [ 197.267099][ T7567] bio_check_eod: 18232 callbacks suppressed [ 197.267115][ T7567] syz.0.969: attempt to access beyond end of device [ 197.267115][ T7567] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 197.287481][ T7567] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 197.295369][ T7567] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 197.331331][ T7577] syz.0.969: attempt to access beyond end of device [ 197.331331][ T7577] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 197.344601][ T7577] buffer_io_error: 18230 callbacks suppressed [ 197.344620][ T7577] Buffer I/O error on dev loop0, logical block 2065, async page read [ 197.398881][ T7577] syz.0.969: attempt to access beyond end of device [ 197.398881][ T7577] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 197.412285][ T7577] Buffer I/O error on dev loop0, logical block 2066, async page read [ 197.428340][ T7577] syz.0.969: attempt to access beyond end of device [ 197.428340][ T7577] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 197.441830][ T7577] Buffer I/O error on dev loop0, logical block 2067, async page read [ 197.452092][ T7577] syz.0.969: attempt to access beyond end of device [ 197.452092][ T7577] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 197.465466][ T7577] Buffer I/O error on dev loop0, logical block 2068, async page read [ 197.500729][ T7577] syz.0.969: attempt to access beyond end of device [ 197.500729][ T7577] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 197.514208][ T7577] Buffer I/O error on dev loop0, logical block 2069, async page read [ 197.526854][ T7580] loop1: detected capacity change from 0 to 512 [ 197.529564][ T7577] syz.0.969: attempt to access beyond end of device [ 197.529564][ T7577] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 197.543641][ T7575] lo speed is unknown, defaulting to 1000 [ 197.546555][ T7577] Buffer I/O error on dev loop0, logical block 2070, async page read [ 197.562458][ T7577] syz.0.969: attempt to access beyond end of device [ 197.562458][ T7577] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 197.563181][ T7580] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.575911][ T7577] Buffer I/O error on dev loop0, logical block 2071, async page read [ 197.576569][ T7577] syz.0.969: attempt to access beyond end of device [ 197.576569][ T7577] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 197.586700][ T7575] lo speed is unknown, defaulting to 1000 [ 197.594298][ T7577] Buffer I/O error on dev loop0, logical block 2072, async page read [ 197.622228][ T7577] syz.0.969: attempt to access beyond end of device [ 197.622228][ T7577] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 197.635785][ T7577] Buffer I/O error on dev loop0, logical block 2065, async page read [ 197.644269][ T7577] Buffer I/O error on dev loop0, logical block 2066, async page read [ 197.664581][ T7580] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 197.700168][ T7580] EXT4-fs (loop1): 1 truncate cleaned up [ 197.706442][ T7580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.901928][ T7593] loop3: detected capacity change from 0 to 512 [ 197.927808][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.978006][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.151530][ T7601] loop4: detected capacity change from 0 to 1764 [ 198.191612][ T7594] lo speed is unknown, defaulting to 1000 [ 198.265413][ T7594] lo speed is unknown, defaulting to 1000 [ 198.364392][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 198.441283][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 198.676532][ T7621] loop1: detected capacity change from 0 to 128 [ 198.676837][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 198.716425][ T7621] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.842976][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 198.853771][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.875672][ T7628] netlink: 'syz.4.987': attribute type 6 has an invalid length. [ 198.889503][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 198.994744][ T7594] lo speed is unknown, defaulting to 1000 [ 199.001980][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.015427][ T7594] lo speed is unknown, defaulting to 1000 [ 199.098688][ T7633] wireguard0: entered promiscuous mode [ 199.104404][ T7633] wireguard0: entered allmulticast mode [ 199.132757][ T7638] net_ratelimit: 2 callbacks suppressed [ 199.132777][ T7638] netlink: zone id is out of range [ 199.210246][ T7638] netlink: zone id is out of range [ 199.235270][ T7638] netlink: zone id is out of range [ 199.240564][ T7638] netlink: zone id is out of range [ 199.303384][ T7638] netlink: zone id is out of range [ 199.339876][ T7638] netlink: zone id is out of range [ 199.352641][ T7638] netlink: zone id is out of range [ 199.358686][ T7643] IPVS: Error joining to the multicast group [ 199.394766][ T7638] netlink: zone id is out of range [ 199.412723][ T7638] netlink: zone id is out of range [ 199.418086][ T7638] netlink: zone id is out of range [ 199.781147][ T7652] loop3: detected capacity change from 0 to 512 [ 199.790244][ T7651] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 199.824165][ T7652] EXT4-fs: Ignoring removed nobh option [ 199.855632][ T7652] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.993: corrupted inode contents [ 199.899965][ T7652] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.993: mark_inode_dirty error [ 199.935796][ T7652] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.993: corrupted inode contents [ 200.005177][ T7652] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.993: mark_inode_dirty error [ 200.043145][ T7652] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.993: Failed to acquire dquot type 0 [ 200.095193][ T7652] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.993: corrupted inode contents [ 200.108695][ T7652] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.993: mark_inode_dirty error [ 200.132375][ T7652] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.993: corrupted inode contents [ 200.174253][ T7652] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.993: mark_inode_dirty error [ 200.215326][ T7666] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.241626][ T7652] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.993: corrupted inode contents [ 200.266006][ T7652] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 200.271599][ T7668] loop1: detected capacity change from 0 to 128 [ 200.285379][ T7652] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.993: corrupted inode contents [ 200.313569][ T7652] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.993: mark_inode_dirty error [ 200.332601][ T7666] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.354700][ T7652] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 200.386779][ T7652] EXT4-fs (loop3): 1 truncate cleaned up [ 200.392966][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.414350][ T7666] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.428776][ T7652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.437300][ T7678] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 200.532653][ T7678] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 200.545443][ T7690] netlink: 'syz.1.1002': attribute type 6 has an invalid length. [ 200.678163][ T7666] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.780541][ T2295] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.819634][ T7715] batman_adv: batadv0: Adding interface: dummy0 [ 200.825931][ T7715] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.868016][ T7715] batman_adv: batadv0: Interface activated: dummy0 [ 200.880413][ T2295] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.924943][ T2295] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.965990][ T2295] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.168217][ T7738] loop4: detected capacity change from 0 to 128 [ 201.190143][ T7738] vfat: Unknown parameter '0xffffffffffffffff' [ 201.380424][ T7747] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.406976][ T7747] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 201.467349][ T7753] loop3: detected capacity change from 0 to 164 [ 201.484200][ T7753] Unable to read rock-ridge attributes [ 201.501331][ T7753] : renamed from bond0 [ 201.534330][ T7756] hsr_slave_0: left promiscuous mode [ 201.544786][ T7756] hsr_slave_1: left promiscuous mode [ 201.898343][ T29] kauditd_printk_skb: 1086 callbacks suppressed [ 201.898361][ T29] audit: type=1400 audit(191.508:19533): avc: denied { write } for pid=7761 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.956014][ T29] audit: type=1400 audit(191.535:19534): avc: denied { nlmsg_write } for pid=7761 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.052785][ T29] audit: type=1326 audit(191.655:19535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.076148][ T29] audit: type=1326 audit(191.655:19536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.101997][ T29] audit: type=1326 audit(191.692:19537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.125331][ T29] audit: type=1326 audit(191.692:19538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.148700][ T29] audit: type=1326 audit(191.692:19539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.173701][ T29] audit: type=1326 audit(191.692:19540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.200521][ T29] audit: type=1326 audit(191.692:19541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.223822][ T29] audit: type=1326 audit(191.692:19542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 202.566966][ T7771] __nla_validate_parse: 12 callbacks suppressed [ 202.566985][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1014'. [ 202.582319][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 203.547609][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 203.587736][ T7773] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 203.643410][ T7775] netlink: 'syz.0.1017': attribute type 6 has an invalid length. [ 203.776105][ T7781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1021'. [ 203.832480][ T3411] IPVS: starting estimator thread 0... [ 203.845331][ T7781] loop3: detected capacity change from 0 to 512 [ 203.883248][ T7781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.904374][ T7781] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1021: corrupted inode contents [ 203.945058][ T7781] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1021: mark_inode_dirty error [ 203.962356][ T7783] IPVS: using max 3072 ests per chain, 153600 per kthread [ 203.981450][ T7781] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1021: corrupted inode contents [ 204.019602][ T7781] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1021: mark_inode_dirty error [ 204.054854][ T7781] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1021: Failed to acquire dquot type 1 [ 204.111196][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.200155][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 205.172116][ T7758] syz.2.1012 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 205.186745][ T7758] CPU: 1 UID: 0 PID: 7758 Comm: syz.2.1012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.186777][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.186788][ T7758] Call Trace: [ 205.186795][ T7758] [ 205.186804][ T7758] __dump_stack+0x1d/0x30 [ 205.186885][ T7758] dump_stack_lvl+0xe8/0x140 [ 205.186908][ T7758] dump_stack+0x15/0x1b [ 205.186929][ T7758] dump_header+0x81/0x220 [ 205.187020][ T7758] oom_kill_process+0x342/0x400 [ 205.187057][ T7758] out_of_memory+0x979/0xb80 [ 205.187096][ T7758] try_charge_memcg+0x5e6/0x9e0 [ 205.187201][ T7758] obj_cgroup_charge_pages+0xa6/0x150 [ 205.187240][ T7758] __memcg_kmem_charge_page+0x9f/0x170 [ 205.187282][ T7758] __alloc_frozen_pages_noprof+0x188/0x360 [ 205.187327][ T7758] alloc_pages_mpol+0xb3/0x250 [ 205.187357][ T7758] alloc_pages_noprof+0x90/0x130 [ 205.187394][ T7758] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 205.187611][ T7758] __kvmalloc_node_noprof+0x30f/0x4e0 [ 205.187689][ T7758] ? ip_set_alloc+0x1f/0x30 [ 205.187709][ T7758] ? ip_set_alloc+0x1f/0x30 [ 205.187732][ T7758] ? __kmalloc_cache_noprof+0x189/0x320 [ 205.187826][ T7758] ip_set_alloc+0x1f/0x30 [ 205.187850][ T7758] hash_netiface_create+0x282/0x740 [ 205.187913][ T7758] ? __pfx_hash_netiface_create+0x10/0x10 [ 205.187935][ T7758] ip_set_create+0x3c9/0x960 [ 205.187970][ T7758] ? __nla_parse+0x40/0x60 [ 205.188005][ T7758] nfnetlink_rcv_msg+0x4c3/0x590 [ 205.188089][ T7758] netlink_rcv_skb+0x123/0x220 [ 205.188118][ T7758] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 205.188149][ T7758] nfnetlink_rcv+0x16b/0x1690 [ 205.188171][ T7758] ? trace_clock_local+0x3f/0x60 [ 205.188221][ T7758] ? __rb_reserve_next+0x43e/0x6f0 [ 205.188271][ T7758] ? rb_commit+0x3e9/0x420 [ 205.188298][ T7758] ? ring_buffer_unlock_commit+0x324/0x370 [ 205.188421][ T7758] ? trace_buffer_unlock_commit_regs+0x111/0x310 [ 205.188452][ T7758] ? trace_event_buffer_commit+0x196/0x5d0 [ 205.188481][ T7758] ? should_fail_ex+0x30/0x280 [ 205.188590][ T7758] ? selinux_nlmsg_lookup+0x99/0x890 [ 205.188683][ T7758] ? __rcu_read_unlock+0x34/0x70 [ 205.188710][ T7758] ? __netlink_lookup+0x266/0x2a0 [ 205.188743][ T7758] netlink_unicast+0x5bd/0x690 [ 205.188798][ T7758] netlink_sendmsg+0x58b/0x6b0 [ 205.188824][ T7758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.188854][ T7758] __sock_sendmsg+0x142/0x180 [ 205.188961][ T7758] ____sys_sendmsg+0x31e/0x4e0 [ 205.189059][ T7758] ___sys_sendmsg+0x17b/0x1d0 [ 205.189095][ T7758] __x64_sys_sendmsg+0xd4/0x160 [ 205.189125][ T7758] x64_sys_call+0x191e/0x2ff0 [ 205.189231][ T7758] do_syscall_64+0xd2/0x200 [ 205.189311][ T7758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.189382][ T7758] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.189418][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.189441][ T7758] RIP: 0033:0x7f31fd1eeec9 [ 205.189458][ T7758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.189533][ T7758] RSP: 002b:00007f31fbc15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.189553][ T7758] RAX: ffffffffffffffda RBX: 00007f31fd446180 RCX: 00007f31fd1eeec9 [ 205.189568][ T7758] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 205.189584][ T7758] RBP: 00007f31fd271f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.189598][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.189612][ T7758] R13: 00007f31fd446218 R14: 00007f31fd446180 R15: 00007ffca66cf2a8 [ 205.189635][ T7758] [ 205.189643][ T7758] memory: usage 307200kB, limit 307200kB, failcnt 854 [ 205.543400][ T7758] memory+swap: usage 312288kB, limit 9007199254740988kB, failcnt 0 [ 205.551324][ T7758] kmem: usage 295712kB, limit 9007199254740988kB, failcnt 0 [ 205.558725][ T7758] Memory cgroup stats for /syz2: [ 205.559896][ T7758] cache 4096 [ 205.568027][ T7758] rss 11755520 [ 205.571416][ T7758] shmem 0 [ 205.574417][ T7758] mapped_file 0 [ 205.577894][ T7758] dirty 0 [ 205.580820][ T7758] writeback 0 [ 205.584117][ T7758] workingset_refault_anon 72 [ 205.588785][ T7758] workingset_refault_file 1061 [ 205.593561][ T7758] swap 5210112 [ 205.596971][ T7758] swapcached 0 [ 205.600361][ T7758] pgpgin 251725 [ 205.603875][ T7758] pgpgout 248853 [ 205.607533][ T7758] pgfault 231242 [ 205.611094][ T7758] pgmajfault 42 [ 205.614820][ T7758] inactive_anon 0 [ 205.618770][ T7758] active_anon 0 [ 205.622298][ T7758] inactive_file 11763712 [ 205.627018][ T7758] active_file 0 [ 205.630493][ T7758] unevictable 0 [ 205.633969][ T7758] hierarchical_memory_limit 314572800 [ 205.639467][ T7758] hierarchical_memsw_limit 9223372036854771712 [ 205.645677][ T7758] total_cache 4096 [ 205.649508][ T7758] total_rss 11755520 [ 205.653467][ T7758] total_shmem 0 [ 205.657002][ T7758] total_mapped_file 0 [ 205.661097][ T7758] total_dirty 0 [ 205.664650][ T7758] total_writeback 0 [ 205.668806][ T7758] total_workingset_refault_anon 72 [ 205.674214][ T7758] total_workingset_refault_file 1061 [ 205.679660][ T7758] total_swap 5210112 [ 205.683743][ T7758] total_swapcached 0 [ 205.687700][ T7758] total_pgpgin 251725 [ 205.691743][ T7758] total_pgpgout 248853 [ 205.695815][ T7758] total_pgfault 231242 [ 205.699879][ T7758] total_pgmajfault 42 [ 205.703886][ T7758] total_inactive_anon 0 [ 205.708143][ T7758] total_active_anon 0 [ 205.712135][ T7758] total_inactive_file 11763712 [ 205.717150][ T7758] total_active_file 0 [ 205.721117][ T7758] total_unevictable 0 [ 205.725130][ T7758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1012,pid=7752,uid=0 [ 205.740379][ T7758] Memory cgroup out of memory: Killed process 7752 (syz.2.1012) total-vm:96136kB, anon-rss:12608kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 206.981103][ T7794] qrtr: Invalid version 183 [ 207.004847][ T7799] loop1: detected capacity change from 0 to 512 [ 207.012515][ T7793] net_ratelimit: 33 callbacks suppressed [ 207.012530][ T7793] netlink: zone id is out of range [ 207.024727][ T7793] netlink: zone id is out of range [ 207.029890][ T7793] netlink: zone id is out of range [ 207.035183][ T7793] netlink: zone id is out of range [ 207.040690][ T7793] netlink: zone id is out of range [ 207.044647][ T7799] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 207.045983][ T7793] netlink: zone id is out of range [ 207.059319][ T7793] netlink: zone id is out of range [ 207.065373][ T7793] netlink: zone id is out of range [ 207.066288][ T7799] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.1024: iget: bad i_size value: 12154757448730 [ 207.070943][ T7803] netlink: zone id is out of range [ 207.090494][ T7793] netlink: zone id is out of range [ 207.093393][ T7799] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1024: couldn't read orphan inode 13 (err -117) [ 207.119243][ T7799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.168591][ T7809] tipc: Enabling of bearer rejected, failed to enable media [ 207.187255][ T7799] EXT4-fs warning (device loop1): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 207.188637][ T7793] loop0: detected capacity change from 0 to 1764 [ 207.210452][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1024'. [ 207.256587][ T7811] pim6reg1: entered promiscuous mode [ 207.262177][ T7811] pim6reg1: entered allmulticast mode [ 207.333421][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 207.333439][ T29] audit: type=1400 audit(196.529:19847): avc: denied { block_suspend } for pid=7810 comm="syz.2.1028" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.371746][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.422353][ T29] audit: type=1326 audit(196.556:19848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31fd1eeec9 code=0x0 [ 207.445268][ T29] audit: type=1326 audit(196.575:19849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.469549][ T29] audit: type=1326 audit(196.575:19850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.493356][ T29] audit: type=1326 audit(196.575:19851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.516586][ T29] audit: type=1326 audit(196.575:19852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.539728][ T29] audit: type=1326 audit(196.584:19853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.562688][ T29] audit: type=1326 audit(196.584:19854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.585826][ T29] audit: type=1326 audit(196.584:19855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.609056][ T29] audit: type=1326 audit(196.584:19856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 207.633327][ T7814] netlink: 'syz.0.1030': attribute type 6 has an invalid length. [ 207.648932][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 207.703641][ T7817] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 207.708987][ T7820] loop0: detected capacity change from 0 to 512 [ 207.719101][ T7817] batman_adv: batadv0: Interface deactivated: dummy0 [ 207.725918][ T7820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.739616][ T7817] batman_adv: batadv0: Removing interface: dummy0 [ 207.761790][ T7817] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 207.838005][ T7825] lo speed is unknown, defaulting to 1000 [ 207.844843][ T7825] lo speed is unknown, defaulting to 1000 [ 208.003717][ T7825] lo speed is unknown, defaulting to 1000 [ 208.010640][ T7825] lo speed is unknown, defaulting to 1000 [ 208.159096][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 208.383387][ T7830] loop3: detected capacity change from 0 to 1764 [ 208.539673][ T7820] EXT4-fs (loop0): 1 truncate cleaned up [ 208.552407][ T7834] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 208.560423][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1037'. [ 208.572533][ T7820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.973448][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.048855][ T3411] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.128297][ T3411] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.147275][ T7853] netlink: 'syz.0.1042': attribute type 6 has an invalid length. [ 209.263226][ T7857] lo speed is unknown, defaulting to 1000 [ 209.270221][ T7857] lo speed is unknown, defaulting to 1000 [ 209.441699][ T7857] lo speed is unknown, defaulting to 1000 [ 209.448044][ T7857] lo speed is unknown, defaulting to 1000 [ 209.741856][ T7864] qrtr: Invalid version 183 [ 209.905083][ T7871] netlink: 'syz.3.1048': attribute type 6 has an invalid length. [ 209.934581][ T7871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7871 comm=syz.3.1048 [ 209.968870][ T7871] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1048'. [ 210.071416][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 210.282880][ T7880] netlink: 'syz.3.1051': attribute type 4 has an invalid length. [ 210.295527][ T7880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 210.302168][ T7880] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.309995][ T7880] vhci_hcd vhci_hcd.0: Device attached [ 210.322289][ T7874] loop1: detected capacity change from 0 to 128 [ 210.340751][ T7881] vhci_hcd: connection closed [ 210.340908][ T3438] vhci_hcd: stop threads [ 210.349902][ T3438] vhci_hcd: release socket [ 210.354618][ T3438] vhci_hcd: disconnect device [ 210.681671][ T7885] loop0: detected capacity change from 0 to 1764 [ 210.851532][ T7887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1053'. [ 210.869185][ T7874] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 210.877550][ T7874] FAT-fs (loop1): Filesystem has been set read-only [ 210.883625][ T7887] loop0: detected capacity change from 0 to 512 [ 210.885596][ T7874] bio_check_eod: 93083 callbacks suppressed [ 210.885671][ T7874] syz.1.1047: attempt to access beyond end of device [ 210.885671][ T7874] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 210.913754][ T7874] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 210.921971][ T7874] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 210.959612][ T7892] syz.1.1047: attempt to access beyond end of device [ 210.959612][ T7892] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 210.973243][ T7892] buffer_io_error: 93068 callbacks suppressed [ 210.973261][ T7892] Buffer I/O error on dev loop1, logical block 2065, async page read [ 210.990930][ T7891] netlink: 'syz.3.1054': attribute type 6 has an invalid length. [ 211.000653][ T7887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.022193][ T7894] batman_adv: batadv0: Interface activated: dummy0 [ 211.054744][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.054744][ T7892] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 211.068160][ T7892] Buffer I/O error on dev loop1, logical block 2066, async page read [ 211.080309][ T10] lo speed is unknown, defaulting to 1000 [ 211.085313][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.085313][ T7892] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 211.099522][ T7892] Buffer I/O error on dev loop1, logical block 2067, async page read [ 211.108031][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.108031][ T7892] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 211.120512][ T7887] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.1053: corrupted inode contents [ 211.121302][ T7892] Buffer I/O error on dev loop1, logical block 2068, async page read [ 211.154154][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.154154][ T7892] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 211.167605][ T7892] Buffer I/O error on dev loop1, logical block 2069, async page read [ 211.173922][ T7887] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.1053: mark_inode_dirty error [ 211.176096][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.176096][ T7892] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 211.200422][ T7892] Buffer I/O error on dev loop1, logical block 2070, async page read [ 211.210195][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.210195][ T7892] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 211.223606][ T7892] Buffer I/O error on dev loop1, logical block 2071, async page read [ 211.231802][ T7892] syz.1.1047: attempt to access beyond end of device [ 211.231802][ T7892] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 211.245082][ T7892] Buffer I/O error on dev loop1, logical block 2072, async page read [ 211.250714][ T7887] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.1053: corrupted inode contents [ 211.253765][ T7874] syz.1.1047: attempt to access beyond end of device [ 211.253765][ T7874] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 211.278984][ T7874] Buffer I/O error on dev loop1, logical block 2065, async page read [ 211.289906][ T7874] Buffer I/O error on dev loop1, logical block 2066, async page read [ 211.312050][ T7887] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1053: mark_inode_dirty error [ 211.363698][ T7887] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1053: Failed to acquire dquot type 1 [ 211.446711][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.487962][ T7909] netlink: 'syz.0.1058': attribute type 21 has an invalid length. [ 211.495888][ T7909] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1058'. [ 211.516400][ T7907] 0ªX¹¦D: left promiscuous mode [ 211.555739][ T7910] loop0: detected capacity change from 0 to 764 [ 211.575597][ T7907] 8021q: adding VLAN 0 to HW filter on device  [ 211.652041][ T7909] rock: directory entry would overflow storage [ 211.658678][ T7909] rock: sig=0x4f50, size=4, remaining=3 [ 211.664462][ T7909] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 211.777306][ T7918] netlink: 'syz.3.1060': attribute type 6 has an invalid length. [ 211.800041][ T7918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7918 comm=syz.3.1060 [ 211.838682][ T7918] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1060'. [ 212.055203][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 212.080040][ T7923] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.148471][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 212.172501][ T7923] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.229627][ T7923] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.326668][ T7923] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.387971][ T7927] qrtr: Invalid version 183 [ 212.450348][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.482072][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.525749][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.560412][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.758151][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 212.758168][ T29] audit: type=1326 audit(201.531:20642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 212.787502][ T29] audit: type=1326 audit(201.531:20643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 212.811045][ T29] audit: type=1326 audit(201.531:20644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 212.872014][ T7933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.878937][ T7933] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 212.901075][ T7933] audit: backlog limit exceeded [ 212.912588][ T7935] loop4: detected capacity change from 0 to 512 [ 212.950576][ T29] audit: type=1326 audit(201.531:20645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 212.974089][ T29] audit: type=1326 audit(201.531:20646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 212.997769][ T29] audit: type=1326 audit(201.531:20647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 213.021342][ T29] audit: type=1326 audit(201.531:20648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1491deec9 code=0x7ffc0000 [ 213.054654][ T7935] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 213.113058][ T7935] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.1064: iget: bad i_size value: 12154757448730 [ 213.137813][ T7935] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1064: couldn't read orphan inode 13 (err -117) [ 213.163090][ T7935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.190555][ T7935] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 213.210996][ T7935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1064'. [ 213.489508][ T7948] loop3: detected capacity change from 0 to 512 [ 213.519137][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.531773][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.579147][ T7948] lo speed is unknown, defaulting to 1000 [ 213.585996][ T7948] lo speed is unknown, defaulting to 1000 [ 213.745304][ T7948] lo speed is unknown, defaulting to 1000 [ 213.752206][ T7948] lo speed is unknown, defaulting to 1000 [ 213.988993][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 214.351861][ T7957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1069'. [ 214.450570][ T7957] loop4: detected capacity change from 0 to 512 [ 214.457317][ T7961] hub 9-0:1.0: USB hub found [ 214.468191][ T7961] hub 9-0:1.0: 8 ports detected [ 214.509375][ T7957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.566001][ T7957] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1069: corrupted inode contents [ 214.580315][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.594604][ T7957] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1069: mark_inode_dirty error [ 214.673415][ T7957] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1069: corrupted inode contents [ 214.687112][ T7957] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1069: mark_inode_dirty error [ 214.699919][ T7957] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1069: Failed to acquire dquot type 1 [ 214.756299][ T7973] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1085'. [ 214.795223][ T7980] netlink: 'syz.3.1075': attribute type 6 has an invalid length. [ 214.816674][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.836283][ T7973] loop1: detected capacity change from 0 to 764 [ 214.837382][ T7982] loop0: detected capacity change from 0 to 512 [ 214.854426][ T7973] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 214.878471][ T7980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7980 comm=syz.3.1075 [ 214.895507][ T7980] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1075'. [ 214.897227][ T7982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.278290][ T7996] atomic_op ffff8881317c9d28 conn xmit_atomic 0000000000000000 [ 215.420246][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.710495][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 215.729001][ T8004] loop0: detected capacity change from 0 to 512 [ 215.738386][ T8004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.755629][ T8004] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1081: invalid indirect mapped block 4294967295 (level 0) [ 215.788403][ T8004] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1081: invalid indirect mapped block 4294967295 (level 1) [ 215.805060][ T8004] EXT4-fs (loop0): 1 orphan inode deleted [ 215.810974][ T8004] EXT4-fs (loop0): 1 truncate cleaned up [ 215.817379][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.836940][ T8004] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1081: iget: bad extra_isize 46 (inode size 256) [ 215.903871][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.057724][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 216.195290][ T8022] atomic_op ffff888132b6b528 conn xmit_atomic 0000000000000000 [ 217.086160][ T8019] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 217.093998][ T8019] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1087'. [ 217.179217][ T8028] netlink: 'syz.4.1090': attribute type 13 has an invalid length. [ 217.190436][ T8028] 0ªX¹¦D: refused to change device tx_queue_len [ 217.197163][ T8028] net_ratelimit: 34 callbacks suppressed [ 217.197181][ T8028] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 217.275881][ T3411] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 217.307897][ T3411] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.356408][ T8040] netlink: 'syz.1.1095': attribute type 6 has an invalid length. [ 217.498549][ T8044] loop1: detected capacity change from 0 to 512 [ 217.529074][ T8044] EXT4-fs (loop1): failed to initialize system zone (-117) [ 217.559121][ T8044] EXT4-fs (loop1): mount failed [ 217.630076][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 217.776243][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 218.067447][ T8067] atomic_op ffff888143796528 conn xmit_atomic 0000000000000000 [ 218.194748][ T8068] loop3: detected capacity change from 0 to 1024 [ 218.722607][ T8070] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 218.876837][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 218.876856][ T29] audit: type=1326 audit(207.106:21252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 219.020228][ T23] lo speed is unknown, defaulting to 1000 [ 219.026049][ T23] sz1: Port: 1 Link DOWN [ 219.064241][ T29] audit: type=1326 audit(207.355:21253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 219.087867][ T29] audit: type=1326 audit(207.355:21254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 219.089552][ T3411] lo speed is unknown, defaulting to 1000 [ 219.131785][ T8068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.150472][ T8077] pim6reg1: entered promiscuous mode [ 219.155830][ T8077] pim6reg1: entered allmulticast mode [ 219.163898][ T29] audit: type=1326 audit(207.429:21255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 219.187201][ T29] audit: type=1400 audit(207.429:21256): avc: denied { read write } for pid=8064 comm="syz.3.1102" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.210095][ T29] audit: type=1400 audit(207.429:21257): avc: denied { open } for pid=8064 comm="syz.3.1102" path="/239/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.232777][ T29] audit: type=1326 audit(207.448:21258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 219.256448][ T29] audit: type=1326 audit(207.448:21259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 219.284611][ T29] audit: type=1400 audit(207.512:21260): avc: denied { ioctl } for pid=8064 comm="syz.3.1102" path="/239/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.309496][ T29] audit: type=1326 audit(207.540:21261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31fd1eeec9 code=0x7ffc0000 [ 219.341491][ T8080] loop4: detected capacity change from 0 to 512 [ 219.350344][ T8080] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.404097][ T8080] EXT4-fs (loop4): 1 truncate cleaned up [ 219.411792][ T8080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.552100][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.669273][ T8088] loop3: detected capacity change from 0 to 2048 [ 219.694252][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.737485][ T8088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 219.814585][ T8088] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.1106: inline data xattr refers to an external xattr inode [ 219.930367][ T8088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 219.999927][ T8102] loop3: detected capacity change from 0 to 2048 [ 220.047933][ T8102] loop3: p1 < > p4 [ 220.060018][ T8102] loop3: p4 size 8388608 extends beyond EOD, truncated [ 220.332154][ T3383] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 220.378662][ T3383] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.452295][ T8119] atomic_op ffff888123446d28 conn xmit_atomic 0000000000000000 [ 220.754079][ T8122] loop4: detected capacity change from 0 to 2048 [ 220.839196][ T8122] Alternate GPT is invalid, using primary GPT. [ 220.845625][ T8122] loop4: p1 p2 p3 [ 221.078698][ T8127] qrtr: Invalid version 183 [ 221.515019][ T8132] loop3: detected capacity change from 0 to 2048 [ 221.576447][ T8132] loop3: p1 < > p4 [ 221.587577][ T8132] loop3: p4 size 8388608 extends beyond EOD, truncated [ 222.238135][ T8143] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1122'. [ 223.439992][ T8157] loop3: detected capacity change from 0 to 512 [ 223.466713][ T8152] tipc: Enabled bearer , priority 0 [ 223.477980][ T8152] syzkaller0: MTU too low for tipc bearer [ 223.483837][ T8152] tipc: Disabling bearer [ 223.528946][ T8160] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1135'. [ 224.331037][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 224.331132][ T29] audit: type=1326 audit(212.210:21532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.382020][ T8163] loop0: detected capacity change from 0 to 128 [ 224.406147][ T8163] EXT4-fs: Ignoring removed nobh option [ 224.436324][ T29] audit: type=1326 audit(212.247:21533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.461476][ T29] audit: type=1326 audit(212.247:21534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.484948][ T29] audit: type=1326 audit(212.247:21535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.509396][ T29] audit: type=1326 audit(212.247:21536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.532859][ T29] audit: type=1326 audit(212.247:21537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.556365][ T29] audit: type=1326 audit(212.247:21538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.579698][ T29] audit: type=1326 audit(212.257:21539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.603271][ T29] audit: type=1326 audit(212.257:21540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.626985][ T29] audit: type=1326 audit(212.257:21541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 224.682427][ T8163] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.697281][ T8168] loop1: detected capacity change from 0 to 128 [ 224.698037][ T8157] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 224.726758][ T8168] vfat: Unknown parameter 'utf8½1' [ 224.727410][ T8157] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1125: iget: bad i_size value: 12154757448730 [ 224.750668][ T8157] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1125: couldn't read orphan inode 13 (err -117) [ 224.763885][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.765633][ T8157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.901553][ T8157] EXT4-fs warning (device loop3): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 224.912512][ T8175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1125'. [ 225.040508][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.076036][ T8183] atomic_op ffff888143796928 conn xmit_atomic 0000000000000000 [ 225.207521][ T8188] loop1: detected capacity change from 0 to 1024 [ 225.228949][ T8188] EXT4-fs: Ignoring removed orlov option [ 225.261084][ T8188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.353491][ T8192] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1132'. [ 225.443663][ T8182] loop0: detected capacity change from 0 to 128 [ 225.719682][ T8182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 225.727806][ T8182] FAT-fs (loop0): Filesystem has been set read-only [ 225.798693][ T8182] bio_check_eod: 19223 callbacks suppressed [ 225.798714][ T8182] syz.0.1130: attempt to access beyond end of device [ 225.798714][ T8182] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 225.841004][ T8182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 225.849470][ T8182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 225.872126][ T8198] syz.0.1130: attempt to access beyond end of device [ 225.872126][ T8198] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 225.885953][ T8198] buffer_io_error: 19222 callbacks suppressed [ 225.885991][ T8198] Buffer I/O error on dev loop0, logical block 2065, async page read [ 225.932539][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.972120][ T8198] syz.0.1130: attempt to access beyond end of device [ 225.972120][ T8198] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 225.985570][ T8198] Buffer I/O error on dev loop0, logical block 2066, async page read [ 226.048368][ T8198] syz.0.1130: attempt to access beyond end of device [ 226.048368][ T8198] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 226.061863][ T8198] Buffer I/O error on dev loop0, logical block 2067, async page read [ 226.084020][ T8203] loop1: detected capacity change from 0 to 764 [ 226.093457][ T8198] syz.0.1130: attempt to access beyond end of device [ 226.093457][ T8198] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 226.106904][ T8198] Buffer I/O error on dev loop0, logical block 2068, async page read [ 226.147539][ T8198] syz.0.1130: attempt to access beyond end of device [ 226.147539][ T8198] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 226.161066][ T8198] Buffer I/O error on dev loop0, logical block 2069, async page read [ 226.211998][ T8198] syz.0.1130: attempt to access beyond end of device [ 226.211998][ T8198] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 226.226732][ T8198] Buffer I/O error on dev loop0, logical block 2070, async page read [ 226.270723][ T8198] syz.0.1130: attempt to access beyond end of device [ 226.270723][ T8198] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 226.284521][ T8198] Buffer I/O error on dev loop0, logical block 2071, async page read [ 226.290173][ T8210] loop1: detected capacity change from 0 to 512 [ 226.332022][ T8210] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.339046][ T8198] syz.0.1130: attempt to access beyond end of device [ 226.339046][ T8198] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 226.352310][ T8198] Buffer I/O error on dev loop0, logical block 2072, async page read [ 226.352600][ T8210] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 226.374136][ T8182] syz.0.1130: attempt to access beyond end of device [ 226.374136][ T8182] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 226.375011][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 226.387619][ T8182] Buffer I/O error on dev loop0, logical block 2065, async page read [ 226.450521][ T8210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 226.458591][ T8210] System zones: 1-12 [ 226.462989][ T8182] Buffer I/O error on dev loop0, logical block 2066, async page read [ 226.484944][ T8210] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1138: corrupted in-inode xattr: e_value size too large [ 226.604161][ T8210] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1138: couldn't read orphan inode 15 (err -117) [ 226.681818][ T8210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.901175][ T8223] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1142'. [ 227.111559][ T8230] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 227.119427][ T8230] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1143'. [ 227.155689][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 227.164930][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 227.186718][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 227.256249][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.469611][ T3383] usb usb6-port1: attempt power cycle [ 227.509743][ T8245] loop0: detected capacity change from 0 to 764 [ 227.860832][ T8262] atomic_op ffff88813ce1fd28 conn xmit_atomic 0000000000000000 [ 227.872744][ T8261] __nla_validate_parse: 6 callbacks suppressed [ 227.872764][ T8261] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1152'. [ 228.012496][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 228.022206][ T8265] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1153'. [ 228.031271][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 228.044152][ T8265] random: crng reseeded on system resumption [ 228.058098][ T8265] Restarting kernel threads ... [ 228.063423][ T8265] Done restarting kernel threads. [ 228.182028][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 228.696157][ T8274] loop1: detected capacity change from 0 to 128 [ 228.753061][ T8274] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 228.761100][ T8274] FAT-fs (loop1): Filesystem has been set read-only [ 228.779268][ T8274] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 228.787278][ T8274] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 228.815640][ T8274] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 228.833427][ T8274] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 228.841468][ T8274] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 229.485126][ T3383] usb usb6-port1: unable to enumerate USB device [ 229.864885][ T8293] loop3: detected capacity change from 0 to 764 [ 230.218851][ T8306] atomic_op ffff88813ce1ed28 conn xmit_atomic 0000000000000000 [ 230.559806][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 230.559825][ T29] audit: type=1400 audit(217.951:21990): avc: denied { write } for pid=8307 comm="syz.3.1166" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.614817][ T8318] netlink: 'syz.2.1167': attribute type 4 has an invalid length. [ 231.622646][ T8318] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1167'. [ 231.651909][ T29] audit: type=1400 audit(218.958:21991): avc: denied { mount } for pid=8315 comm="syz.2.1167" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 231.673837][ T29] audit: type=1400 audit(218.958:21992): avc: denied { unmount } for pid=8315 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 232.150581][ T8321] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1168'. [ 232.164446][ T8298] loop1: detected capacity change from 0 to 128 [ 232.195540][ T8321] loop3: detected capacity change from 0 to 764 [ 232.232007][ T8321] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 232.483268][ T8330] loop3: detected capacity change from 0 to 2048 [ 232.619010][ T8332] loop4: detected capacity change from 0 to 128 [ 232.626105][ T8332] msdos: Unknown parameter 'dos1xflopp' [ 233.733596][ T8338] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 233.742488][ T8338] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1174'. [ 234.502282][ T8340] loop4: detected capacity change from 0 to 128 [ 234.515404][ T29] audit: type=1326 audit(221.616:21993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.545573][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 234.564624][ T29] audit: type=1326 audit(221.634:21994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.587767][ T29] audit: type=1326 audit(221.634:21995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.610853][ T29] audit: type=1326 audit(221.634:21996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.633789][ T29] audit: type=1326 audit(221.634:21997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.656714][ T29] audit: type=1326 audit(221.634:21998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.679928][ T29] audit: type=1326 audit(221.634:21999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.0.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 234.895875][ T8338] bio_check_eod: 17609 callbacks suppressed [ 234.895896][ T8338] syz.4.1174: attempt to access beyond end of device [ 234.895896][ T8338] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 234.967420][ T8348] sz1: rxe_newlink: already configured on lo [ 235.576765][ T8335] loop1: detected capacity change from 0 to 8192 [ 235.659412][ T8335] loop1: p1 p2 < > p3 p4 < p5 > [ 235.664382][ T8335] loop1: partition table partially beyond EOD, truncated [ 235.673172][ T8335] loop1: p1 size 100663296 extends beyond EOD, truncated [ 235.681258][ T8335] loop1: p2 start 591104 is beyond EOD, truncated [ 235.687755][ T8335] loop1: p3 start 33572980 is beyond EOD, truncated [ 235.696922][ T8335] loop1: p5 size 100663296 extends beyond EOD, truncated [ 235.717717][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 238.024048][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 238.029310][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 238.029325][ T29] audit: type=1326 audit(224.855:22020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.033940][ T8351] ipvlan2: entered promiscuous mode [ 238.062609][ T29] audit: type=1326 audit(224.865:22021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.092632][ T29] audit: type=1326 audit(224.865:22022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.116864][ T29] audit: type=1400 audit(224.865:22023): avc: denied { open } for pid=8352 comm="syz.4.1181" path="/217/file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 238.117101][ T8351] loop1: detected capacity change from 0 to 1024 [ 238.141329][ T29] audit: type=1326 audit(224.865:22024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.151575][ T8351] EXT4-fs: Ignoring removed orlov option [ 238.172235][ T29] audit: type=1326 audit(224.883:22025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.202555][ T29] audit: type=1326 audit(224.883:22026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.226883][ T29] audit: type=1326 audit(224.883:22027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.250950][ T29] audit: type=1326 audit(224.883:22028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.274193][ T29] audit: type=1326 audit(224.883:22029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.0.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 238.383669][ T8354] loop4: detected capacity change from 0 to 2048 [ 238.388664][ T8351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.391905][ T8354] EXT4-fs: Ignoring removed orlov option [ 238.456376][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.476656][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.577594][ T8369] loop1: detected capacity change from 0 to 2048 [ 238.654468][ T8378] lo speed is unknown, defaulting to 1000 [ 238.662155][ T8378] lo speed is unknown, defaulting to 1000 [ 238.914341][ T8378] lo speed is unknown, defaulting to 1000 [ 238.921939][ T8378] lo speed is unknown, defaulting to 1000 [ 240.367613][ T8388] loop0: detected capacity change from 0 to 512 [ 240.424452][ T8391] lo speed is unknown, defaulting to 1000 [ 240.431015][ T8391] lo speed is unknown, defaulting to 1000 [ 240.598325][ T8391] lo speed is unknown, defaulting to 1000 [ 240.604962][ T8391] lo speed is unknown, defaulting to 1000 [ 240.991943][ T8388] EXT4-fs (loop0): too many log groups per flexible block group [ 240.999837][ T8388] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 241.008728][ T8388] EXT4-fs (loop0): mount failed [ 241.347628][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.383178][ T8369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.431968][ T8369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.663451][ T8413] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1188'. [ 241.867498][ T8423] rdma_rxe: rxe_newlink: failed to add lo [ 241.906478][ T8421] loop3: detected capacity change from 0 to 164 [ 241.917320][ T8422] loop1: detected capacity change from 0 to 512 [ 241.941185][ T8421] iso9660: Unknown parameter '' [ 241.989526][ T8421] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=8421 comm=syz.3.1192 [ 242.018801][ T8422] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.114259][ T8422] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1191: bg 0: block 248: padding at end of block bitmap is not set [ 242.187955][ T8430] lo speed is unknown, defaulting to 1000 [ 242.241256][ T8422] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1191: Failed to acquire dquot type 1 [ 242.334843][ T8430] lo speed is unknown, defaulting to 1000 [ 242.340942][ T8434] netlink: 'syz.2.1194': attribute type 29 has an invalid length. [ 242.354247][ T8422] EXT4-fs (loop1): 1 truncate cleaned up [ 242.387854][ T8422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.422782][ T8435] netlink: 'syz.2.1194': attribute type 29 has an invalid length. [ 242.504403][ T8434] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1194'. [ 242.570543][ T8434] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1194'. [ 242.706286][ T8439] loop3: detected capacity change from 0 to 512 [ 242.743058][ T8430] lo speed is unknown, defaulting to 1000 [ 242.766606][ T8430] lo speed is unknown, defaulting to 1000 [ 242.766967][ T8439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.843738][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.087877][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.185724][ T8446] SELinux: failed to load policy [ 243.407011][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 243.449263][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 243.449280][ T29] audit: type=1326 audit(229.867:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.478726][ T29] audit: type=1326 audit(229.867:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.505001][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 243.521382][ T8458] vlan2: entered allmulticast mode [ 243.526704][ T8458] bridge_slave_0: entered allmulticast mode [ 243.527418][ T29] audit: type=1326 audit(229.914:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.556883][ T29] audit: type=1326 audit(229.914:22429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.580323][ T29] audit: type=1326 audit(229.914:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.603728][ T29] audit: type=1326 audit(229.914:22431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.627181][ T29] audit: type=1326 audit(229.914:22432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.650562][ T29] audit: type=1326 audit(229.914:22433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.673648][ T29] audit: type=1400 audit(229.914:22434): avc: denied { bind } for pid=8454 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.693171][ T29] audit: type=1326 audit(229.914:22435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 243.746603][ T8461] ref_ctr increment failed for inode: 0x5ac offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a124500 [ 243.998768][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 244.156538][ T8461] uprobe: syz.3.1203:8461 failed to unregister, leaking uprobe [ 244.344402][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 244.446347][ T8482] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 244.454712][ T8482] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1208'. [ 244.472546][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 244.482057][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 245.975585][ T8501] $Hÿ: (slave dummy0): Releasing backup interface [ 246.145587][ T8509] atomic_op ffff888132b6b928 conn xmit_atomic 0000000000000000 [ 247.148594][ T8512] netlink: 'syz.3.1216': attribute type 4 has an invalid length. [ 247.156487][ T8512] __nla_validate_parse: 9 callbacks suppressed [ 247.156499][ T8512] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1216'. [ 247.544986][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1217'. [ 247.582527][ T8518] random: crng reseeded on system resumption [ 248.338312][ T8528] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1220'. [ 249.081181][ T8528] $Hÿ (unregistering): Released all slaves [ 249.095672][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 249.095690][ T29] audit: type=1326 audit(235.073:22656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 249.125160][ T29] audit: type=1326 audit(235.073:22657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 249.304866][ T29] audit: type=1400 audit(235.165:22658): avc: denied { create } for pid=8535 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.324767][ T29] audit: type=1400 audit(235.165:22659): avc: denied { setopt } for pid=8535 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.345015][ T29] audit: type=1400 audit(235.165:22660): avc: denied { write } for pid=8535 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.364978][ T29] audit: type=1326 audit(235.165:22661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 249.388573][ T29] audit: type=1326 audit(235.165:22662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 249.411976][ T29] audit: type=1326 audit(235.165:22663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 249.435044][ T29] audit: type=1326 audit(235.165:22664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 249.458265][ T29] audit: type=1326 audit(235.165:22665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 249.528876][ T8536] usb usb8: usbfs: process 8536 (syz.0.1222) did not claim interface 0 before use [ 249.602608][ T8542] rdma_rxe: rxe_newlink: failed to add lo [ 250.737286][ T8544] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 250.745220][ T8544] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 250.753088][ T8544] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1225'. [ 250.796537][ T8544] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 250.804502][ T8544] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 250.812397][ T8544] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1225'. [ 250.894345][ T8544] netlink: 'syz.3.1225': attribute type 10 has an invalid length. [ 251.006051][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 251.091038][ T8559] loop0: detected capacity change from 0 to 512 [ 251.098340][ T8561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=8561 comm=syz.2.1230 [ 251.146782][ T8559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.428360][ T8572] loop4: detected capacity change from 0 to 2048 [ 251.520936][ T8572] loop4: p1 < > p4 [ 251.540413][ T8572] loop4: p4 size 8388608 extends beyond EOD, truncated [ 252.197585][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.197752][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 252.345224][ T8587] vlan0: entered allmulticast mode [ 252.345244][ T8587] bridge_slave_0: entered allmulticast mode [ 252.397112][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'. [ 252.847189][ T8613] loop1: detected capacity change from 0 to 164 [ 252.847747][ T8613] iso9660: Unknown parameter '' [ 252.851298][ T8613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=8613 comm=syz.1.1243 [ 253.164768][ T8622] loop0: detected capacity change from 0 to 512 [ 253.171736][ T8622] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.179244][ T8622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 253.192113][ T8622] EXT4-fs (loop0): 1 truncate cleaned up [ 253.198962][ T8622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.674584][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 253.732663][ T8641] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 253.824562][ T8642] syzkaller0: entered promiscuous mode [ 253.830656][ T8642] syzkaller0: entered allmulticast mode [ 253.974905][ T8646] loop3: detected capacity change from 0 to 128 [ 253.984820][ T8646] FAT-fs (loop3): Directory bread(block 162) failed [ 253.991997][ T8646] FAT-fs (loop3): Directory bread(block 163) failed [ 253.998928][ T8646] FAT-fs (loop3): Directory bread(block 164) failed [ 254.006141][ T8646] FAT-fs (loop3): Directory bread(block 165) failed [ 254.024747][ T8646] FAT-fs (loop3): Directory bread(block 166) failed [ 254.031593][ T8646] FAT-fs (loop3): Directory bread(block 167) failed [ 254.039129][ T8646] FAT-fs (loop3): Directory bread(block 168) failed [ 254.057433][ T8646] FAT-fs (loop3): Directory bread(block 169) failed [ 254.145453][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.260538][ T8654] lo speed is unknown, defaulting to 1000 [ 254.273875][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'. [ 254.283528][ T8654] lo speed is unknown, defaulting to 1000 [ 254.350464][ T8668] netlink: 'syz.1.1257': attribute type 29 has an invalid length. [ 254.371274][ T8668] netlink: 'syz.1.1257': attribute type 29 has an invalid length. [ 254.388659][ T8668] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1257'. [ 254.388971][ T8654] lo speed is unknown, defaulting to 1000 [ 254.405370][ T8654] lo speed is unknown, defaulting to 1000 [ 254.413084][ T8658] siw: device registration error -23 [ 254.421350][ T8668] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1257'. [ 254.485206][ T8656] dummy0: entered allmulticast mode [ 254.494152][ T8655] dummy0: left allmulticast mode [ 254.534545][ T8676] ref_ctr increment failed for inode: 0x5d4 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005ae00 [ 254.570313][ T29] kauditd_printk_skb: 1198 callbacks suppressed [ 254.570331][ T29] audit: type=1400 audit(240.122:23864): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.621413][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'. [ 254.635999][ T29] audit: type=1400 audit(240.187:23865): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 254.660591][ T8678] random: crng reseeded on system resumption [ 254.710850][ T8681] netlink: 'syz.4.1263': attribute type 3 has an invalid length. [ 254.747848][ T29] audit: type=1400 audit(240.288:23866): avc: denied { bind } for pid=8680 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.778409][ T29] audit: type=1326 audit(240.307:23867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 254.802388][ T29] audit: type=1326 audit(240.307:23868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 254.826298][ T29] audit: type=1326 audit(240.307:23869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 254.850072][ T29] audit: type=1326 audit(240.307:23870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b4ff6ef03 code=0x7ffc0000 [ 254.873142][ T29] audit: type=1326 audit(240.307:23871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b4ff6ef03 code=0x7ffc0000 [ 254.896371][ T29] audit: type=1326 audit(240.307:23872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 254.920087][ T29] audit: type=1326 audit(240.307:23873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 255.322364][ T8676] uprobe: syz.2.1262:8676 failed to unregister, leaking uprobe [ 255.416768][ T8696] atomic_op ffff8881217b4528 conn xmit_atomic 0000000000000000 [ 256.362604][ T8705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.375302][ T8705] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1268'. [ 256.408952][ T8702] tls_set_device_offload_rx: netdev not found [ 256.881886][ T8717] loop1: detected capacity change from 0 to 512 [ 256.906351][ T8717] EXT4-fs (loop1): too many log groups per flexible block group [ 256.914277][ T8717] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 256.922277][ T8717] EXT4-fs (loop1): mount failed [ 256.940133][ T8720] siw: device registration error -23 [ 256.981139][ T8728] loop0: detected capacity change from 0 to 512 [ 257.005699][ T8728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.152726][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.520906][ T8738] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 257.615715][ T8740] SELinux: ebitmap: truncated map [ 257.642482][ T8740] SELinux: failed to load policy [ 257.894159][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1280'. [ 257.911666][ T8760] loop4: detected capacity change from 0 to 512 [ 257.922141][ T8760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.006262][ T8760] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1279: bg 0: block 248: padding at end of block bitmap is not set [ 258.024377][ T8760] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1279: Failed to acquire dquot type 1 [ 258.038852][ T8760] EXT4-fs (loop4): 1 truncate cleaned up [ 258.046090][ T8760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.884034][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 259.463544][ T8779] rdma_rxe: rxe_newlink: failed to add lo [ 259.870358][ T8781] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 259.989664][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 260.058706][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'. [ 261.224591][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 261.224611][ T29] audit: type=1326 audit(246.269:24209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.254534][ T29] audit: type=1326 audit(246.269:24210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.376491][ T29] audit: type=1326 audit(246.343:24211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.399985][ T29] audit: type=1326 audit(246.343:24212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.423626][ T29] audit: type=1326 audit(246.343:24213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.446919][ T29] audit: type=1326 audit(246.352:24214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.470146][ T29] audit: type=1326 audit(246.352:24215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.493701][ T29] audit: type=1326 audit(246.352:24216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.518035][ T29] audit: type=1326 audit(246.361:24217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.542346][ T29] audit: type=1326 audit(246.361:24218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078707eec9 code=0x7ffc0000 [ 261.708074][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.773547][ T8787] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 261.851743][ T8791] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 261.859929][ T8791] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1289'. [ 261.914510][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 261.923641][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 261.987967][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 262.034095][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1290'. [ 262.084606][ T8796] random: crng reseeded on system resumption [ 262.089020][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 262.099878][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 262.263108][ T8799] atomic_op ffff888173643928 conn xmit_atomic 0000000000000000 [ 262.543610][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.552649][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.843004][ T8813] SELinux: ebitmap: truncated map [ 262.858777][ T8813] SELinux: failed to load policy [ 263.190232][ T8824] loop1: detected capacity change from 0 to 2048 [ 263.222510][ T8824] loop1: p3 p4 < > [ 263.226560][ T8824] loop1: p3 size 57344 extends beyond EOD, truncated [ 263.280170][ T8824] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 263.335632][ T8831] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 263.347109][ T8831] bond0 (unregistering): Released all slaves [ 263.407816][ T8833] loop1: detected capacity change from 0 to 1024 [ 263.436777][ T8833] EXT4-fs: Ignoring removed orlov option [ 263.810701][ T8837] lo speed is unknown, defaulting to 1000 [ 263.817452][ T8837] lo speed is unknown, defaulting to 1000 [ 264.122181][ T8837] lo speed is unknown, defaulting to 1000 [ 264.128997][ T8837] lo speed is unknown, defaulting to 1000 [ 265.349174][ T8842] loop3: detected capacity change from 0 to 1024 [ 265.387719][ T8842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.405884][ T8846] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 265.413861][ T8846] netlink: 'syz.4.1304': attribute type 4 has an invalid length. [ 265.421697][ T8846] __nla_validate_parse: 6 callbacks suppressed [ 265.421710][ T8846] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1304'. [ 265.450188][ T8842] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 265.461243][ T8842] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 265.483103][ T8850] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 265.491097][ T8850] netlink: 'syz.4.1304': attribute type 4 has an invalid length. [ 265.499131][ T8850] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1304'. [ 265.543461][ T8842] JBD2: no valid journal superblock found [ 265.549299][ T8842] EXT4-fs (loop3): Could not load journal inode [ 265.594257][ T8846] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 265.635583][ T8846] macvlan1: entered promiscuous mode [ 265.641042][ T8846] macvlan1: entered allmulticast mode [ 265.746906][ T8833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.753695][ T8846] veth1_vlan: entered allmulticast mode [ 265.800433][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 265.822272][ T8846] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 265.822897][ T8858] loop3: detected capacity change from 0 to 1024 [ 265.831569][ T8842] macsec0: entered promiscuous mode [ 265.843076][ T8842] macsec0: entered allmulticast mode [ 265.903354][ T8858] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 265.914543][ T8858] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 266.023979][ T8858] JBD2: no valid journal superblock found [ 266.029922][ T8858] EXT4-fs (loop3): Could not load journal inode [ 266.509035][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.829863][ T8864] tls_set_device_offload_rx: netdev not found [ 266.962125][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 266.962139][ T29] audit: type=1326 audit(251.565:24511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 266.992753][ T8858] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 267.068554][ T29] audit: type=1326 audit(251.602:24512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.091887][ T29] audit: type=1326 audit(251.602:24513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.114973][ T29] audit: type=1326 audit(251.602:24514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.137998][ T29] audit: type=1326 audit(251.602:24515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.161245][ T29] audit: type=1326 audit(251.602:24516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.184218][ T29] audit: type=1326 audit(251.602:24517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.207442][ T29] audit: type=1326 audit(251.602:24518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.230888][ T29] audit: type=1326 audit(251.602:24519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.254094][ T29] audit: type=1326 audit(251.602:24520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4ff6eec9 code=0x7ffc0000 [ 267.289103][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.299096][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.363661][ T8883] loop1: detected capacity change from 0 to 8192 [ 267.371063][ T8883] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 267.438414][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 267.447423][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 267.462869][ T8880] vlan0: entered allmulticast mode [ 267.752308][ T8897] lo speed is unknown, defaulting to 1000 [ 267.758863][ T8897] lo speed is unknown, defaulting to 1000 [ 267.919426][ T8897] lo speed is unknown, defaulting to 1000 [ 267.925865][ T8897] lo speed is unknown, defaulting to 1000 [ 268.776662][ T8903] netlink: 'syz.4.1318': attribute type 10 has an invalid length. [ 268.785030][ T8903] batman_adv: batadv0: Interface deactivated: dummy0 [ 268.801123][ T8903] batman_adv: batadv0: Removing interface: dummy0 [ 268.814848][ T8903] team0: Port device dummy0 added [ 268.926216][ T8903] syzkaller0: entered promiscuous mode [ 268.931931][ T8903] syzkaller0: entered allmulticast mode [ 269.418668][ T8928] rdma_rxe: rxe_newlink: failed to add lo [ 270.668553][ T8941] netlink: 'syz.2.1326': attribute type 7 has an invalid length. [ 270.676779][ T8941] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.1326'. [ 270.705125][ T8943] sch_fq: defrate 4294967295 ignored. [ 270.804799][ T8938] loop4: detected capacity change from 0 to 512 [ 270.816715][ T8938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.838115][ T8938] EXT4-fs (loop4): 1 truncate cleaned up [ 270.844827][ T8938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.859846][ T8938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.880220][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1325'. [ 270.890160][ T8938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8938 comm=syz.4.1325 [ 271.061998][ T8952] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 271.068611][ T8952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.076267][ T8952] vhci_hcd vhci_hcd.0: Device attached [ 271.259631][ T10] usb usb6-port1: attempt power cycle [ 271.335019][ T3383] usb 3-1: new low-speed USB device number 5 using vhci_hcd [ 271.654755][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 271.751996][ T8970] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 271.760460][ T8970] netlink: 'syz.0.1335': attribute type 4 has an invalid length. [ 271.768523][ T8970] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1335'. [ 271.780121][ T8970] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 271.787982][ T8970] netlink: 'syz.0.1335': attribute type 4 has an invalid length. [ 271.795810][ T8970] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1335'. [ 271.829205][ T8973] syz!: rxe_newlink: already configured on team_slave_0 [ 271.852260][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.861281][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.887637][ T8970] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 271.895702][ T8970] macvlan1: entered promiscuous mode [ 271.902082][ T8970] macvlan1: entered allmulticast mode [ 271.908606][ T8970] veth1_vlan: entered allmulticast mode [ 271.916334][ T8970] : (slave macvlan1): Enslaving as an active interface with an up link [ 271.929220][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 271.990733][ T8975] rdma_rxe: rxe_newlink: failed to add lo [ 272.007857][ T8953] vhci_hcd: connection reset by peer [ 272.182748][ T12] vhci_hcd: stop threads [ 272.187450][ T12] vhci_hcd: release socket [ 272.191988][ T12] vhci_hcd: disconnect device [ 272.388000][ T29] kauditd_printk_skb: 642 callbacks suppressed [ 272.388046][ T29] audit: type=1326 audit(256.579:25163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.420980][ T29] audit: type=1326 audit(256.607:25164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.451310][ T29] audit: type=1326 audit(256.625:25165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.502561][ T8984] netlink: 'syz.4.1339': attribute type 2 has an invalid length. [ 272.511620][ T29] audit: type=1326 audit(256.662:25166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.534830][ T29] audit: type=1326 audit(256.671:25167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.558242][ T29] audit: type=1326 audit(256.680:25168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.867929][ T8987] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.875325][ T8987] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 272.883501][ T8987] audit: backlog limit exceeded [ 272.889427][ T29] audit: type=1326 audit(256.754:25169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d204eec9 code=0x7ffc0000 [ 272.979020][ T8991] netlink: 'syz.4.1341': attribute type 6 has an invalid length. [ 272.992105][ T8989] lo speed is unknown, defaulting to 1000 [ 273.022330][ T8989] lo speed is unknown, defaulting to 1000 [ 273.048175][ T8995] loop4: detected capacity change from 0 to 512 [ 273.066377][ T8995] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.085287][ T8995] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.112634][ T8995] EXT4-fs (loop4): 1 truncate cleaned up [ 273.119243][ T8995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.447898][ T9007] sd 0:0:1:0: device reset [ 273.534646][ T10] usb usb6-port1: unable to enumerate USB device [ 273.605010][ T8989] lo speed is unknown, defaulting to 1000 [ 273.625508][ T8989] lo speed is unknown, defaulting to 1000 [ 273.663148][ T9002] ================================================================== [ 273.668505][ T9010] lo speed is unknown, defaulting to 1000 [ 273.671544][ T9002] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 273.685681][ T9002] [ 273.688038][ T9002] write to 0xffff888119cac6e4 of 4 bytes by task 8995 on cpu 0: [ 273.695715][ T9002] xas_set_mark+0x12b/0x140 [ 273.698247][ T9010] lo speed is unknown, defaulting to 1000 [ 273.700325][ T9002] __folio_start_writeback+0x1dd/0x440 [ 273.700359][ T9002] ext4_bio_write_folio+0x5ad/0x9f0 [ 273.717269][ T9002] mpage_process_page_bufs+0x4a1/0x620 [ 273.722791][ T9002] mpage_prepare_extent_to_map+0x786/0xc00 [ 273.728628][ T9002] ext4_do_writepages+0xa05/0x2750 [ 273.733766][ T9002] ext4_writepages+0x176/0x300 [ 273.738555][ T9002] do_writepages+0x1c3/0x310 [ 273.743251][ T9002] file_write_and_wait_range+0x156/0x2c0 [ 273.748929][ T9002] generic_buffers_fsync_noflush+0x45/0x120 [ 273.755057][ T9002] ext4_sync_file+0x1ab/0x690 [ 273.760119][ T9002] vfs_fsync_range+0x10a/0x130 [ 273.764934][ T9002] ext4_buffered_write_iter+0x34f/0x3c0 [ 273.770607][ T9002] ext4_file_write_iter+0xdbf/0xf00 [ 273.776453][ T9002] iter_file_splice_write+0x666/0xa60 [ 273.781859][ T9002] direct_splice_actor+0x156/0x2a0 [ 273.787024][ T9002] splice_direct_to_actor+0x312/0x680 [ 273.792520][ T9002] do_splice_direct+0xda/0x150 [ 273.797498][ T9002] do_sendfile+0x380/0x650 [ 273.802142][ T9002] __x64_sys_sendfile64+0x105/0x150 [ 273.807828][ T9002] x64_sys_call+0x2bb0/0x2ff0 [ 273.812906][ T9002] do_syscall_64+0xd2/0x200 [ 273.817621][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.823547][ T9002] [ 273.825900][ T9002] read to 0xffff888119cac6e4 of 4 bytes by task 9002 on cpu 1: [ 273.833476][ T9002] filemap_write_and_wait_range+0xfc/0x340 [ 273.839522][ T9002] filemap_invalidate_pages+0xa4/0x1a0 [ 273.845018][ T9002] kiocb_invalidate_pages+0x6e/0x80 [ 273.850244][ T9002] __iomap_dio_rw+0x5d4/0x1250 [ 273.855138][ T9002] iomap_dio_rw+0x40/0x90 [ 273.859505][ T9002] ext4_file_write_iter+0xad9/0xf00 [ 273.864737][ T9002] iter_file_splice_write+0x666/0xa60 [ 273.870147][ T9002] direct_splice_actor+0x156/0x2a0 [ 273.875297][ T9002] splice_direct_to_actor+0x312/0x680 [ 273.881137][ T9002] do_splice_direct+0xda/0x150 [ 273.886023][ T9002] do_sendfile+0x380/0x650 [ 273.890581][ T9002] __x64_sys_sendfile64+0x105/0x150 [ 273.895838][ T9002] x64_sys_call+0x2bb0/0x2ff0 [ 273.900557][ T9002] do_syscall_64+0xd2/0x200 [ 273.905634][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.911661][ T9002] [ 273.914127][ T9002] value changed: 0x0a000021 -> 0x04000021 [ 273.920043][ T9002] [ 273.922561][ T9002] Reported by Kernel Concurrency Sanitizer on: [ 273.928904][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.4.1343 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.938841][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.948996][ T9002] ================================================================== [ 274.039850][ T9010] lo speed is unknown, defaulting to 1000 [ 274.068745][ T9010] lo speed is unknown, defaulting to 1000 [ 274.205548][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.773140][ T3383] usb 3-1: enqueue for inactive port 0 [ 276.779024][ T3383] usb 3-1: enqueue for inactive port 0 [ 276.859807][ T3383] vhci_hcd: vhci_device speed not set