last executing test programs: 6.958145889s ago: executing program 4 (id=963): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000e6ff00000000000000001811", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x80, 0x32, 0x829, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3, 0x6, 0x9, 0xffffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xb3ef, 0x10000007, 0x1ff, 0x2}}]}, {0x9, 0x6, "f9fb72363e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x80}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 6.604653206s ago: executing program 4 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000002e40)=0x10) recvmmsg(r1, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/73, 0x49}, 0x8}, {{0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000000b00)=""/129, 0x81}, {&(0x7f0000000bc0)=""/134, 0x86}, {&(0x7f0000000c80)=""/224, 0xe0}], 0x6}, 0x5}, {{&(0x7f0000001680)=@xdp, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/87, 0x57}, 0x3}, {{0x0, 0x0, 0x0}, 0xffffff56}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {&(0x7f0000001c00)=""/198, 0xc6}, {&(0x7f0000001d00)=""/242, 0xf2}, {0x0}, {0x0}, {&(0x7f0000002e80)=""/94, 0x5e}], 0x6, &(0x7f0000002f80)=""/34, 0x22}, 0xdf3}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/186, 0xba}, {0x0}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f0000005300)=""/141, 0x8d}], 0x5}}], 0x6, 0x100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x80004, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'pim6reg\x00', 0x2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r5 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0xf1c38fa000000000}, 0x18) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x1d39, 0xcec, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='macvlan0\x00', 0x10) socket$kcm(0x2b, 0x1, 0x0) 3.553668948s ago: executing program 3 (id=1011): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000004c0)={{0x10, 0xc}, 0x1, 0x2, 0xfffffff9, {0x8, 0x96}, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2000000005}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x4, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r8, 0x1, 0x4002) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 2.601007497s ago: executing program 3 (id=1030): ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0x9111b000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x0, 0x448, &(0x7f0000000bc0)="$eJzs28tvG8UfAPDvrpP29+sroZRHS4FAQUQ8kiYt0AMXEEgcQEKCQzkGJ61K3QY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXk0sIpaNe7qePGbh4OTuPPR9p2xjv2zNez453d2QTQs4ayf5KIPRHxW0QM1LPLCwzV/7uxMFf9e2GumsTi4pt/Jnm56wtz1bJo+b7dRWY4jUg/TYpKlpu5eOnsRK02daHIj86ee2905uKlZ86cmzg9dXrq/PiJE8ePjT3/3Pizqw8mSVru2pu19dCH04cPvvr2lderJ6+889M3Wek9xf7GODYibUgPZYH/tZhrLvd4JyrbQvY2pJO+25dha6hERNZd/fn4H4hK3Oy8gXjlk642DthU2blpZ+vd84vANpZEt1sAdEd5os+uf8vtP5p6bAnXXqxfAF1P5qo3FupbfU/f0rV8/yZeuw5FxMn5f77MtujgfQgAgFa+y+Y/T680/0vj3oZy+4q1ocGIuCsi9kfE3RFxICLuicjL3hcR999SQ9q2/ualoVvnP+nVdQe3Ctn874VibWv5/G+p3YOVIrc3j78/OXWmNnW0+E6Go39nlh9rU8f3L//6eat9jfO/bMvqL+eCRTuu9jXdoJucmJ3IJ6UdcO3jiEN9K8WfLK0EJBFxMCIOre2j95WJM09+fbhVodvH30aLdaa1WPwq4ol6/89HU/ylpP365Oj/ojZ1dLQ8Km718y+X32hV/4bi74Cs/3ctP/6biwwmjeu1M2uv4/Lvn7W8plnv8b8jeSvvlx3Fax9MzM5eGIvYkbyW55e9Pn7zvWW+LJ/FP3xk5fG/v3hPVs8DEZEdxA9GxEMR8XDR9kci4tGIONIm/h9feuzd9ce/ubL4J1f8/Vs6/pv6f+2Jytkfvm1V/+r6/3ieGi5eyX//bmO1DdzIdwcAAAB3ijR/Bj5JR5bSaToyUn+G/0DsSmvTM7NPnZp+//xk/Vn5wehPyztdAw33Q8eS+eIT6/nx4l5xuf9Ycd/4i8r/8/xIdbo22eXYodftbjH+M39Uut06YNN1YB0NuEM1j//2j2wA24nzP/Qu4x96l/EPvWul8f9RU95aAGxPzv/Qu4x/6F3GP/Qu4x960kb+rl+ilxORbolmSGxSotu/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Q+vspg==") mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0xfffffe44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) shmget$private(0x0, 0x4000, 0x2, &(0x7f00006ff000/0x4000)=nil) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) 2.255488154s ago: executing program 2 (id=1024): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0600000004000000040000040b0000000000000059a793ece4eeaaecbcaae6c5d70c99ec1aaaa756c884293824d749083cc9fa996f4e9cb88e331d9cce90a90347373a6bcebf28910a13a2054326c0b5f9b64837e62186e1bc1e2240ead3c7a4cca0096acfbf0aec117bd38423b188ef672c2f5470aa5fde75f13c8bfd2126640bdbb670ee29d5b24936e56357473f68aca2f30df4614f23291f28e822b5ef22599ca8f45a7ee56aff9ee24249d248c3aae0267ff9e2ca6bf76fa368dadf4c53cd9c087d3f45611d", @ANYBLOB="000000000100"/25, @ANYRES8=r1, @ANYRES64=r0], 0x50) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = dup(r4) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB="200000000000000084000000020000000300020009000000d90f0000", @ANYRES32=0x0, @ANYBLOB="1800000000000000000000f87600"/24], 0x38, 0x40010}], 0x1, 0x240000c0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000440)=""/171, 0xab}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="0a5a753872f8", 0x6}], 0x1}, 0x5744935563dc1402) sendmsg$kcm(r8, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r8, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={0x0, r9}}, 0x20) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x8101}}) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x3605, 0x80, 0xfffffffc, 0x2ac, 0x0, r5}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x49, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0xc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0x0, 0x4ac, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="70521b8aa47b271b0000ef", @ANYRES32=r2, @ANYBLOB="ff0300"/20, @ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="02000000e2ff63340500"/28], 0x50) 2.197937756s ago: executing program 3 (id=1025): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) openat$autofs(0xffffffffffffff9c, 0x0, 0x202040, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x36, "4372071e845c1497c855383000000002000000372a72ee4dfeed37968b00905020000055965737d2aaec032b9753384b00000000ef86"}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ufshcd_upiu\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='T', 0x1, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) 2.093176058s ago: executing program 1 (id=1027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000, &(0x7f00000006c0)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x20000000000bb4d}}, {@discard}]}, 0x21, 0x469, &(0x7f0000000100)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x4, 0x402400) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x28201, 0x0) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000380)='cpu==0||!') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r12, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r12], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000001500)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES64=r10, @ANYRES64=r6, @ANYRESOCT=r4, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.059087428s ago: executing program 4 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008888}, 0x40c0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000804) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x0, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x9a23, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x6, '\x00', 0x0, r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) socket$inet6(0xa, 0xa, 0xfff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d6e376c53da90f2ba900001800000000000000000000ac8d56143c9da4fd96fbe50e6d68d5b7d9ddd3c3522fc41b586007360277c4a45a0eb66dee39262fd45cab1263212ba939ffd4bc713aff2930f84067c49a91ba5bece707fc94b4fc9dd718df58e15e38ce30c7e4c0694078780d5530fcddf0c7268c2c239250bcd2c2c370799e93315108a3e78a084ad125dad06726bd"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x400000ffc020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sync() r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) sendfile(0xffffffffffffffff, r9, &(0x7f00000000c0)=0x1, 0x7fffffffffffffff) epoll_pwait(r9, &(0x7f0000000000)=[{}, {}], 0x2, 0x7, &(0x7f0000000040)={[0x5]}, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8080410}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x18, 0x0, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.848000703s ago: executing program 2 (id=1029): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000004c0)={{0x10, 0xc}, 0x1, 0x2, 0xfffffff9, {0x8, 0x96}, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2000000005}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x4, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r8, 0x1, 0x4002) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.843917033s ago: executing program 3 (id=1031): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000004c0)={{0x10, 0xc}, 0x1, 0x2, 0xfffffff9, {0x8, 0x96}, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2000000005}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x4, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r8, 0x1, 0x4002) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.840381213s ago: executing program 0 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r7) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000b80)=0x400, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="05000000000000006b118900000000008510000002000000850000000500000095003300000000009500a50500000000c6bff4571b2c4d848c9b2fd7e0ed5ea27dc441daabff5a5c1f9c07d7d16c08d0617109dbaa29f2067a54dce38981ea7f26749b251616896c3c5f171e6a61afa4745d9aac91c819"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000003c0)="25d7", 0x2, 0x8014, 0x0, 0x0) 1.764618135s ago: executing program 0 (id=1033): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000004c0)={{0x10, 0xc}, 0x1, 0x2, 0xfffffff9, {0x8, 0x96}, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2000000005}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x4, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r8, 0x1, 0x4002) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.762690375s ago: executing program 1 (id=1034): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000780)={r4, 0x3, 0x1ff}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x800, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x24a000) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="fcadb90bdfcce341b989dbf3b49a0e2caecd134587820d0eb8f48d2ed672b0e76d4dafc96a6144734ac392cceac36400a8cfeb6c1b8fb0a1058b804322ef6b77fc677d421f10d9abe6ccb61ec91df774cee88f14ce1f6715acf004cd562ccb151d", 0x61}, {&(0x7f00000004c0)="a00811a62663966b0b575c0261b596bd9e72dc97c8a64d46422b3a7f02c0325ed07657d0407a28c955ed8517ffc54773a8e0b93f49ecb4bd8e66e3b40ee7222dd93906654131cbe68ccbbdebdaf9a513ab308b11f5f597a6ca88b6c366d7c60f102f7768f114778c09fcb649074f3a4d6d059c6fbeb3fdcb70d8b9b69a97c71345e19834b57c9fd34232ddb010b78bf095ae2d6c2511c3ebf97b42ea7130aa4090c0b64c186be4e8ed8489ff026cf3eff37504547b362b61e1", 0xb9}, {&(0x7f0000000380)="1503606e385dd5372c0c798b31c82bae52be8341b902e3953786711438b9a8", 0x1f}], 0x3, 0x7fffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r8, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x74, r9, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2000000, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="db35870b68da"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="940c882e8779"}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008080) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.705797836s ago: executing program 4 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r3, &(0x7f0000000000)=""/4096, 0x1000, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)=@newtaction={0x84, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x70, 0x1, [@m_mirred={0x6c, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x9, 0x3}, 0x3}}]}, {0x1f, 0x6, "c1929c119d73fa5e6023e2269e98084a9efd26d2e4a7a22c618a53"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000010000000000000004000000850000007b00000095a4675ddf914d6bda468d6a68d86318144a61259ec3bac6d19a18f9ec7955bb7689396089ac65a3d6eed617ba4e9ee16bcb9edbc282939344b88eba8e2449aedae79d8c7627c48f2ff3531ff37d235708f589d2ffa3a7fbde1d99f41d96c000064edd915ce107d048292056b3099705ef7c74cbe664dde1945d0bf7a4ebe3eb6f8779775ae327addb"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xb, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000958d2023acb79be519fe5557c5395f021e8dd51889e398a3c4c4f01b03c4bc2f76549e4e583f3e91dac0f8"], &(0x7f0000000040)='GPL\x00', 0xb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r7}, 0x18) syz_clone(0x6200, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="048000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xd8, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='f2fs_direct_IO_exit\x00', r6, 0x0, 0x8}, 0x18) 1.550632298s ago: executing program 4 (id=1037): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe1d) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4, 0x2, 0x0, 0x59, 0x0, 0x4, 0x4809, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000200)}, 0x204, 0x8, 0x1, 0x1, 0xfe4c, 0x1, 0x4, 0x0, 0x6, 0x0, 0x400}, 0x0, 0x7, 0xffffffffffffffff, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014", @ANYRES64], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="00000004e738a0a0af6011203baf401bb0c20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) 998.07043ms ago: executing program 2 (id=1038): getxattr(0x0, &(0x7f0000000300)=@known='user.incfs.size\x00', 0x0, 0x0) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x1, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000e803010000000000000000000000000a14000000fb03000aa51e3cfc66d09e65de4fc3"], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$link(0x8, r5, r4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x56b0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}, 0x24) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100f394d864942fadf93554850000c1e971860000010000e3c3d179000051a8800c0001800800010003000000"], 0x28}}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r7}, 0x10) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r8, &(0x7f0000000480)=[{&(0x7f0000002640)="91eb51a7914356", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x5], 0x0, 0x0, 0x1}}, 0x40) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r11, 0x2284, &(0x7f0000000080)) 996.00959ms ago: executing program 1 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) waitid(0x2, 0x0, 0x0, 0x8, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000fa00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000542ff71e18d020e6002020702500000000002020205b1af8ff00000000bfa100000000000007070000f8ffffffb702000000000000b7030000000000008500000070000000e4f2b3467211d48120cde9bacac376b80c1916ba732ac6a795f85c00c7dd4698c45a19611ad5e2920e6360c8d027891c47d27422ac25028a4d6b737b45826fe1ef4f16dea061148e896a7e85f446b13674841b33890107dedf234335ee87db09ec05f1939fdfad43fc6f39fa11705574535f53e5e7a57174ab8f642ce1ee0ae6aa8dae4fece9673468023102eba04ddc68adfe9cd7a9946236", @ANYRES8=r4, @ANYRES64=r0, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x6d653bf3b72f4b87, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000001f40)={0xc04, 0x3ff, 0x0, 0x2, 0xfffffffffffff000, 0x5, 0x2df0, 0x6}, &(0x7f0000001f80)={0x6, 0x98, 0x3, 0x1, 0x8, 0x9aa, 0x1, 0x992}, &(0x7f0000001fc0)={0x8, 0x4, 0xac0, 0x7, 0x6, 0x8, 0x2, 0x7ffffffd}, &(0x7f0000002000)={0x0, 0x989680}, &(0x7f0000002080)={&(0x7f0000002040)={[0x5]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r7, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r8, 0x11a, 0x4, &(0x7f0000000000), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r11, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 973.89071ms ago: executing program 3 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000df0547460a3a10a000000000004000000009e19ae7451b334", @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)="90bf9c71e0478393c8a4154bd0593918e93cb4c172befde80af4eedd4e98f3cf937dd8", &(0x7f00000005c0)="5b4a56b22e821b0db37754d02a4eb769a7139c8ec98b7b479dd9942a0890baf9cda55bf814d0baa2d7e00a062833", 0xfffffff8, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 949.939111ms ago: executing program 1 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r2}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa2800, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x48) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)}, {0x0}], 0x2) syz_read_part_table(0x104f, &(0x7f0000001dc0)="$eJzsz7sNwkAQBNA5/JEJ6IGm6AcHtEJACyR0RAcYnX0BDSCE9F6wq52b5MJP3fd1dkmpe0qGJY9Sr/6jdaitea1k17JlyJCpP16nrp6v7TVl3Paz1VqceZ3nfrx0pYUlp9u3/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/+AdAAD//zvjCaY=") 843.538393ms ago: executing program 0 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r2}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, &(0x7f00000001c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180900000023008100000000000000008500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa2800, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x48) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) signalfd4(r3, &(0x7f00000002c0)={[0xfa3]}, 0x8, 0x80000) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef80"], 0xfe33) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)}, {0x0}], 0x2) 429.799522ms ago: executing program 1 (id=1042): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0600000004000000040000040b0000000000000059a793ece4eeaaecbcaae6c5d70c99ec1aaaa756c884293824d749083cc9fa996f4e9cb88e331d9cce90a90347373a6bcebf28910a13a2054326c0b5f9b64837e62186e1bc1e2240ead3c7a4cca0096acfbf0aec117bd38423b188ef672c2f5470aa5fde75f13c8bfd2126640bdbb670ee29d5b24936e56357473f68aca2f30df4614f23291f28e822b5ef22599ca8f45a7ee56aff9ee24249d248c3aae0267ff9e2ca6bf76fa368dadf4c53cd9c087d3f45611d", @ANYBLOB="000000000100"/25, @ANYRES8=r1, @ANYRES64=r0], 0x50) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = dup(r4) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB="200000000000000084000000020000000300020009000000d90f0000", @ANYRES32=0x0, @ANYBLOB="1800000000000000000000f87600"/24], 0x38, 0x40010}], 0x1, 0x240000c0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000440)=""/171, 0xab}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="0a5a753872f8", 0x6}], 0x1}, 0x5744935563dc1402) sendmsg$kcm(r8, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r8, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={0x0, r9}}, 0x20) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x8101}}) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x3605, 0x80, 0xfffffffc, 0x2ac, 0x0, r5}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x49, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0xc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0x0, 0x4ac, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="70521b8aa47b271b0000ef", @ANYRES32=r2, @ANYBLOB="ff0300"/20, @ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="02000000e2ff63340500"/28], 0x50) 429.185542ms ago: executing program 2 (id=1043): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202040, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x36, "4372071e845c1497c855383000000002000000372a72ee4dfeed37968b00905020000055965737d2aaec032b9753384b00000000ef86"}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ufshcd_upiu\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='T', 0x1, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) 428.687282ms ago: executing program 4 (id=1044): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_vif\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) lseek(r0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1051, &(0x7f0000001280)="$eJzsz7EJwlAUBdAbTIIiSBp7LR3jD+Em9gouo87jJLY2kpg4gqQ4Bz58Hvc+eGEuXqmS/r3HwTLJ4vttk6yn4PNXuez2uZbzEK36eOmG1mab1Wms3kubqmtSp0lyO0zrUtc5Pv55IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM1ScAAP//gqkI3g==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000000)={'geneve1\x00', @ifru_addrs=@nl=@unspec}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0xc, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x8000010000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x6, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="491c9ee6906c74f8c021b63cda262a00"/28], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002061b5f642ac224703000000000000000000007e460dcec9d44af50fd1be21547465572f25260c5a89feb36fab121092708e62e6091747f3c188e24853a4ae9e0245df9758363390c3ae1d640b1eec12c28605964d349105358cc1d0cb8022e0bf3e6c8980dec359a49ecba491cc5101aa"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) 428.195232ms ago: executing program 0 (id=1053): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000780)={r4, 0x3, 0x1ff}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x800, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x24a000) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="fcadb90bdfcce341b989dbf3b49a0e2caecd134587820d0eb8f48d2ed672b0e76d4dafc96a6144734ac392cceac36400a8cfeb6c1b8fb0a1058b804322ef6b77fc677d421f10d9abe6ccb61ec91df774cee88f14ce1f6715acf004cd562ccb151d", 0x61}, {&(0x7f00000004c0)="a00811a62663966b0b575c0261b596bd9e72dc97c8a64d46422b3a7f02c0325ed07657d0407a28c955ed8517ffc54773a8e0b93f49ecb4bd8e66e3b40ee7222dd93906654131cbe68ccbbdebdaf9a513ab308b11f5f597a6ca88b6c366d7c60f102f7768f114778c09fcb649074f3a4d6d059c6fbeb3fdcb70d8b9b69a97c71345e19834b57c9fd34232ddb010b78bf095ae2d6c2511c3ebf97b42ea7130aa4090c0b64c186be4e8ed8489ff026cf3eff37504547b362b61e1", 0xb9}, {&(0x7f0000000380)="1503606e385dd5372c0c798b31c82bae52be8341b902e3953786711438b9a8", 0x1f}], 0x3, 0x7fffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r8, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x74, r9, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2000000, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="db35870b68da"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="940c882e8779"}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008080) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 182.416187ms ago: executing program 0 (id=1045): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) r5 = memfd_create(0x0, 0x2) fallocate(r5, 0x0, 0x0, 0x509a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x40800) r6 = socket$key(0xf, 0x3, 0x2) close(r6) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) rseq(0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000004000000000100000100", @ANYRES32, @ANYBLOB="0090789ec08099f7da7788c006035de35c7ff5ecefc26dc1ed8e4becc9ff16d2ffff0968a372a4210b2949a94cfef73dec7ed54eb65a4cc79d69314fb6ac31dd0497ad41419f0891c1144e690307ccedb1a7611f14136ec1ddbd6f985bcc5bae2976f55a7e62", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x8, 0x886}, {0x0, 0x1, 0x8, 0x7ff}]}) time(0x0) semget$private(0x0, 0x4000000009, 0x0) 158.328967ms ago: executing program 1 (id=1046): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc100"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r2, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r11}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 145.466157ms ago: executing program 2 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x100800, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, 0x0, &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) fcntl$notify(r11, 0x402, 0x1) r12 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') getdents64(r12, 0xffffffffffffffff, 0x43) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) 77.708229ms ago: executing program 3 (id=1049): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000580)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40003012, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) setreuid(0xffffffffffffffff, 0xee01) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0xfc], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) r8 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$eventfd(r8, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000001400000000000000", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="03000000040000000400000000000000000000000100000000000000"], 0x50) bind(r5, &(0x7f00000004c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null]}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='hugepage_update\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet(0x2, 0x1, 0x0) 5.928911ms ago: executing program 0 (id=1050): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x0, 0x1f9}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x200000d8, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000007207a5d45bfd05ac8df1ec00000000000000a3e8f94188e80315650fac9180d70a7fc30cf4d1266ce8a0652e6a2086974819000c8fce6e2869bce11d534caabfbe011a08a7398a5d8b060ddbbb1f", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000", @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xc72b}, 0x18) memfd_secret(0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x40080) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x1c3e00, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8108010}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="201225bd700017cbdf25270000f107000300", @ANYRES32=r9, @ANYRES8], 0x1c8}, 0x1, 0x0, 0x0, 0x44040}, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB="749f9a3584ac41d3c39e75619be786f5ef160fc231ee03e68b3647e180974a85fcc02361f832f31df9663b8a69043f9b948527bf1744210f4c98eea39aee890b1d5dd38d6fca049516e3d7046bc833129b2bae3d0070b179574623adfd83d0bb783bdfcf6662db063273f7e84e3564dde0379e13b9eb60fd31a7a0e20b4658ae69db2ad03aa064fff7aeddc3368a70000b0fae1726635fa671fc9170bb2ddb253053db0d9d00b643ee0500000000000000a7df8e15e701597ff46624fd2704d5a0cc221bb482dfb83e3c5cc1bfd2b5249d936efb0c01bc8894a72b7f1841715f8a625e1e5c1431"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x811) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x6, 0x21, 0x6, 0x0, 0x9, 0x20a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x8000}, 0x400, 0xfd1f, 0x4, 0x5, 0x3, 0x80000001, 0x9, 0x0, 0x4, 0x0, 0x8}, r4, 0x1, r2, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = memfd_create(&(0x7f0000000040)='/dev/nullb0\x00', 0x8) fcntl$addseals(r5, 0x409, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x448241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x38, &(0x7f0000000100)={@random="651af945124a", @remote, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@generic={0x8906, "859041e022b4dc8a4752f5f0521fa3db3e6191dab61051978bf5523377025673d5bd4818553f"}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000001d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd5\xaa\xb7\x10\x80>\xbc \x1f\xa6\r\xd2=v\xd1\x14\x99\x1d\x7f\xc0\x8f\x88\x9a\x1f\xb9\xc5\xd7h^9\xb7\x8a\xac\xea\x93\x05\x80\xa9\xb3\x03\xbf\xb4\\\xc2\x86\a\xbbF>\x1dY]&\xce\x0e\x8c$\x1b\x10\x05\xda\xafs\xca-\xcd?q\x94Z\xd8\xfa\x17\xa3\x8f\x9a\xbc\xb5p/\xad\xfb\x80\xf2\xbb\x9d\xf1:\x82m\xc5\xadf\x98l\x9e\xe3;\x1dV\xe51P\xce\x1f\xbe\xb1\xbb\x99\'M\x90(\xccTa\xa1V\xf1\x84O\x87\xc2\xfc\xf3H\xf7\xfc\xc7\xc1F\'n\xd2\xe4M\r\x83\xd4s\xd5\xa4\xbf\xca\x8b\tZ\xc9\x14\x11F\xd2\x85F1\xb0k\x15\x14\xf1\x06\xc2\xc8g\xfb5c*9MYsX\xdc\xd7\xb6b\xa8\x9d}-\x9ab\x801\xdd\xa4\xfb\xaey\xb1v\xa8\x16ueE\x1e\xae\xfb\xf6I\x8c@\x91\xc9)N9\xfa\x05\x15\xb1\xfaB\xa8\x8a\xc5\xc4\xbf\x80\x19?\xfb\x15\xf2 \\\x8d9\';\xc3RY\xbd\x900\xb8\xcf>\x11h4+;\xe7\xf1n\xe1\xc3\x9d\x97L5\x82\xca\xee\x85Z\x99\x17\xa7c\xc4\x8c\xde\x12\xf1\xe1!\x90lL\x00\x00\x00\x00\x00\x00\x00\x00\xc0i\x9ac\x7f8\x91Kp\xad\a\xe7r\x7f\x87A\x17\xac\xe7\xeb\xf4\xfb\xcd\xef_\x02\xab\x8d\xfa\xc9\xd6\v\xe2\xe1\x1dL){\xf6G\x81\x8e\xee@ ^\x88\xd4\xc1\xa3\n{\xa5\x98YOg\x94\xc5D8\xb4`\x85\x13\xfbn\x8a\xc0\xfdrFm\xfc\xf7\xfd\xdcp\xac\xfbm+\x06F\xd2A\xff$\x1b\x12M\xba\x8a\x19M\xaf\xce\xe8\x15)aD\xd6x\x89\xb1\x8ad\xd0\xdc2\x81\x97\x19&\x8f\xd8\x1c\xed\"\xa1\xaf\x8e\x1f^\xcd\x80M\xfe\x7f\xeee\xe0\x833\xc4\xe5\xb9=\x84\xa6\xd9\xa2\x98\xb3\xc4Ll]]\xca\x9d\x89\"\xb5}W/De\x05\xf5\xa6\xca\x7fR8\x8dH\xbfJ)\x8c\'\x9b\xc8\xd42\xcb\x8c7a\x85\xe4\xdaM=z\xbd\xa0\xa6\xc0\x93z\xe5s8\xd4\xe3\xdb\xcdY\x94\x83d\x81\xeb\xbb\'e\xe5R\xbc\xdd\x8ax\xf3\xf3Yh\xb2\xaf\xaf\xe5\xfb3\x1ey\x1f\x9a\'\xc2\xf7\'Lf\x92\x88\n\xc2\x96\x1am\x18\xe5\":G\x90;2h\xc0\x1eCeJ\xc7\x04\xa2\xd9\xea\xa0\xe9\x01,\xecXo\xd3\xca\xa6\x85\x02\xe0@g\xad\x19o\xe3\xdd\x1fW\xee`\xc3\x99\x91\xda\xd7iE<\xc6\xb1\xc2\x84\xebJG\x857\xffb\xbe\xac/4d\xda\xec\x14\x0f.\xeb\xad\xf0\xd1\xa9\xe5*\x18c\x87\x1d\xa6\x05Z\x9e\x11\xafx(\xa2\x96\f\xd7\xe9\xcd2\xd6\xf5\x97\x17\xb6\xa2G\x15Y\xd2\xc7\xa1\xb5\x8e\xcb\xa0\xcd\xad\x82\xd2\xa5\xc4\xdd\x83\xb2\xe68$Y_hI\xe7g\x87-\f\xce\xdf5\x0e\xcb\x94\xba\xde]$\x1cT\xcd\xc4e\xed\xeb\xe2\xbb\f\xbb\xc6\xb5\x84\x93\x05x\xef@?\x01\xef)\xdb\x91\xa0\xce\xfe\xb3\xbb!\xd8\xaawyKw;a\xcd\xb7\xec\xf2\xed$\x1c\xdbUC\x1f\x9cb\xcc[\x93_<%VKr\xcb\xb7`\x93n+)\xb5\xbb\xb2\x9a<\xad\x94X\xa5\x92\x80\xb5=\x0fh\x1c\xef\xa1\xd2\x1a)W\xc6[ax<(\x1b\x90pO7\xb8\x15\x8f\xe0\xc2\x04\xc8[\x8d\xac\x00\fP\xbcK\xa7\xbc46\x86\xa6U>\xca\x14\xad\xf3C\xbe\xbc\x1c\x10>\x12\xdb\x0e\xba-\x1c(Y\x1c\xfb3\x80tl\x8dq+\xb1\x1f\xecs\xee\x10\xa9\x00R\x90\xd4u\xcdl\xd7\xf2\x82\xcbJ\\l\xd8\x1e\xf9\x8f\xac~\xa9\x92j\xe5\x81\x1d\x19\x922\x00\xd6\x06') prctl$PR_SET_NAME(0xf, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) write$ppp(r6, &(0x7f00000002c0)='O', 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) socket$inet6(0xa, 0x6, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$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") socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): t /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.239714][ T4620] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 74.290045][ T4649] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 74.301402][ T4649] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.350924][ T4620] bond0: (slave dummy0): Releasing backup interface [ 74.371915][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 74.427431][ T4620] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 74.431544][ T4654] netlink: 176 bytes leftover after parsing attributes in process `syz.2.281'. [ 74.436615][ T4620] team0: Port device dummy0 added [ 74.482509][ T4659] net_ratelimit: 5 callbacks suppressed [ 74.482528][ T4659] openvswitch: netlink: Message has 6 unknown bytes. [ 74.486467][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.753167][ T4667] hub 8-0:1.0: USB hub found [ 74.758915][ T4667] hub 8-0:1.0: 8 ports detected [ 74.822300][ T4687] syzkaller0: entered allmulticast mode [ 74.837933][ T4687] syzkaller0: entered promiscuous mode [ 74.859438][ T4687] syzkaller0: left promiscuous mode [ 74.864967][ T4687] syzkaller0: left allmulticast mode [ 75.090758][ T4705] pimreg: entered allmulticast mode [ 75.130449][ T4703] loop0: detected capacity change from 0 to 8192 [ 75.137428][ T4705] pimreg: left allmulticast mode [ 75.154562][ T4681] lo speed is unknown, defaulting to 1000 [ 75.161005][ T4681] lo speed is unknown, defaulting to 1000 [ 75.178918][ T4703] loop0: p1 p4 < > [ 75.182895][ T4703] loop0: p1 start 4261412864 is beyond EOD, truncated [ 75.271741][ T4717] netlink: 'syz.0.297': attribute type 27 has an invalid length. [ 75.350909][ T4712] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 75.360619][ T4709] netlink: 'syz.2.295': attribute type 21 has an invalid length. [ 75.375492][ T4722] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 75.376062][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.391265][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.425261][ T29] kauditd_printk_skb: 1560 callbacks suppressed [ 75.425276][ T29] audit: type=1326 audit(2000002606.864:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f421b9ed65f code=0x7ffc0000 [ 75.485056][ T4721] loop4: detected capacity change from 0 to 8192 [ 75.492536][ T29] audit: type=1326 audit(2000002606.924:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f421b9eec37 code=0x7ffc0000 [ 75.515899][ T29] audit: type=1326 audit(2000002606.924:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421b9ed510 code=0x7ffc0000 [ 75.539602][ T29] audit: type=1326 audit(2000002606.924:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f421b9ee7ab code=0x7ffc0000 [ 75.563132][ T29] audit: type=1326 audit(2000002606.934:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f421b9ed80a code=0x7ffc0000 [ 75.586358][ T29] audit: type=1326 audit(2000002606.934:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f421b9ed80a code=0x7ffc0000 [ 75.609650][ T29] audit: type=1326 audit(2000002606.934:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f421b9ed417 code=0x7ffc0000 [ 75.633191][ T29] audit: type=1326 audit(2000002606.934:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f421b9f034a code=0x7ffc0000 [ 75.658019][ T29] audit: type=1326 audit(2000002607.004:8751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421b9ed510 code=0x7ffc0000 [ 75.660381][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.681481][ T29] audit: type=1326 audit(2000002607.004:8752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f421b9ed8f7 code=0x7ffc0000 [ 75.717143][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.743638][ T4717] macsec0: left promiscuous mode [ 75.751269][ T3414] lo speed is unknown, defaulting to 1000 [ 75.767057][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.775471][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.789028][ T4719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.828861][ T3565] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.849451][ T10] lo speed is unknown, defaulting to 1000 [ 75.856325][ T3565] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.865671][ T4729] sd 0:0:1:0: device reset [ 75.874896][ T3565] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.900699][ T3565] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.932929][ T4729] loop1: detected capacity change from 0 to 1024 [ 75.940250][ T4729] EXT4-fs: Ignoring removed nobh option [ 75.945904][ T4729] EXT4-fs: Ignoring removed bh option [ 75.960118][ T4729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.972819][ T4729] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.010281][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.043923][ T4740] loop1: detected capacity change from 0 to 1024 [ 76.050823][ T4740] ext4: Unknown parameter 'uid<00000000000000000000' [ 76.385361][ T4754] loop4: detected capacity change from 0 to 512 [ 76.399860][ T4750] loop1: detected capacity change from 0 to 1024 [ 76.408809][ T4750] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 76.445075][ T4754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.478621][ T4754] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.606302][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.652388][ T4767] netlink: 'syz.4.313': attribute type 6 has an invalid length. [ 76.673792][ T4765] openvswitch: netlink: Message has 6 unknown bytes. [ 76.681230][ T4767] loop4: detected capacity change from 0 to 764 [ 76.691451][ T4767] rock: directory entry would overflow storage [ 76.697745][ T4767] rock: sig=0x4f50, size=4, remaining=3 [ 76.703315][ T4767] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.719537][ T4767] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.810182][ T4776] 0·: renamed from hsr0 [ 76.816671][ T4776] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.826922][ T4776] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.837428][ T4776] 0·: entered allmulticast mode [ 76.842312][ T4776] hsr_slave_0: entered allmulticast mode [ 76.848126][ T4776] hsr_slave_1: entered allmulticast mode [ 76.858374][ T4776] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 76.988877][ T4767] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.080546][ T4767] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.219235][ T4767] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.354965][ T70] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.413054][ T70] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467130][ T70] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.526558][ T70] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.643586][ T4788] ------------[ cut here ]------------ [ 77.649357][ T4788] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 77.673548][ T4788] WARNING: CPU: 1 PID: 4788 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 77.683910][ T4788] Modules linked in: [ 77.687889][ T4788] CPU: 1 UID: 0 PID: 4788 Comm: syz.2.320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.697735][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.707858][ T4788] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 77.714182][ T4788] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 81 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 77.733856][ T4788] RSP: 0018:ffffc9000162f440 EFLAGS: 00010292 [ 77.739963][ T4788] RAX: af4172ff435c8100 RBX: ffff8881199591a8 RCX: 0000000000080000 [ 77.747976][ T4788] RDX: ffffc900033bd000 RSI: 0000000000010333 RDI: 0000000000010334 [ 77.755973][ T4788] RBP: fffffffe00000030 R08: 0001c9000162f27f R09: 0000000000000000 [ 77.764019][ T4788] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119959168 [ 77.772077][ T4788] R13: ffff888109ac8000 R14: ffff888109ac8000 R15: ffff8881199591a0 [ 77.780123][ T4788] FS: 00007fd8c71276c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 77.789310][ T4788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.796068][ T4788] CR2: 0000200000004000 CR3: 000000013e722000 CR4: 00000000003506f0 [ 77.804297][ T4788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.812344][ T4788] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 77.820367][ T4788] Call Trace: [ 77.823696][ T4788] [ 77.826656][ T4788] reg_set_min_max+0x215/0x260 [ 77.831511][ T4788] check_cond_jmp_op+0x1080/0x16e0 [ 77.836692][ T4788] do_check+0x332a/0x7a10 [ 77.841117][ T4788] do_check_common+0xc3a/0x12a0 [ 77.846039][ T4788] bpf_check+0x942b/0xd9e0 [ 77.850513][ T4788] ? __rcu_read_unlock+0x4f/0x70 [ 77.855545][ T4788] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 77.861688][ T4788] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 77.867557][ T4788] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 77.873486][ T4788] ? try_charge_memcg+0x200/0x9e0 [ 77.878570][ T4788] ? pcpu_block_update+0x232/0x3b0 [ 77.883755][ T4788] ? _find_next_zero_bit+0x64/0xa0 [ 77.888966][ T4788] ? pcpu_block_refresh_hint+0x157/0x170 [ 77.894624][ T4788] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 77.900785][ T4788] ? css_rstat_updated+0xb7/0x240 [ 77.905854][ T4788] ? __rcu_read_unlock+0x4f/0x70 [ 77.910858][ T4788] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 77.916689][ T4788] ? should_fail_ex+0x30/0x280 [ 77.921509][ T4788] ? selinux_bpf_prog_load+0x36/0xf0 [ 77.926831][ T4788] ? should_failslab+0x8c/0xb0 [ 77.931676][ T4788] ? __kmalloc_cache_noprof+0x189/0x320 [ 77.937364][ T4788] ? selinux_bpf_prog_load+0xbf/0xf0 [ 77.942681][ T4788] ? security_bpf_prog_load+0x2c/0xa0 [ 77.948145][ T4788] bpf_prog_load+0xedd/0x1070 [ 77.953129][ T4788] ? security_bpf+0x2b/0x90 [ 77.957706][ T4788] __sys_bpf+0x462/0x7b0 [ 77.962125][ T4788] __x64_sys_bpf+0x41/0x50 [ 77.966624][ T4788] x64_sys_call+0x2aea/0x2ff0 [ 77.971464][ T4788] do_syscall_64+0xd2/0x200 [ 77.976149][ T4788] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.982327][ T4788] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.988103][ T4788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.994030][ T4788] RIP: 0033:0x7fd8c86beba9 [ 77.998507][ T4788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.018182][ T4788] RSP: 002b:00007fd8c7127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.026701][ T4788] RAX: ffffffffffffffda RBX: 00007fd8c8905fa0 RCX: 00007fd8c86beba9 [ 78.034745][ T4788] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 78.042803][ T4788] RBP: 00007fd8c8741e19 R08: 0000000000000000 R09: 0000000000000000 [ 78.050788][ T4788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.058779][ T4788] R13: 00007fd8c8906038 R14: 00007fd8c8905fa0 R15: 00007ffdaf0e3b78 [ 78.066778][ T4788] [ 78.069832][ T4788] ---[ end trace 0000000000000000 ]--- [ 78.077055][ T4797] veth0_to_team: entered promiscuous mode [ 78.092962][ T4795] lo speed is unknown, defaulting to 1000 [ 78.115881][ T4795] lo speed is unknown, defaulting to 1000 [ 78.123205][ T4796] __nla_validate_parse: 14 callbacks suppressed [ 78.123223][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 78.159420][ T4791] Falling back ldisc for ttyS3. [ 78.337000][ T4808] loop1: detected capacity change from 0 to 512 [ 78.419983][ T4808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.433886][ T4808] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.538854][ T4814] usb usb8: usbfs: process 4814 (syz.4.325) did not claim interface 0 before use [ 78.727909][ T4814] lo speed is unknown, defaulting to 1000 [ 78.734311][ T4814] lo speed is unknown, defaulting to 1000 [ 79.028893][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.074763][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 79.175311][ T4831] loop1: detected capacity change from 0 to 1024 [ 79.215989][ T4831] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 79.225983][ T4833] loop4: detected capacity change from 0 to 164 [ 79.269296][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 79.278350][ T4830] netlink: 212 bytes leftover after parsing attributes in process `syz.2.331'. [ 79.747723][ T4840] loop0: detected capacity change from 0 to 1024 [ 79.759748][ T4840] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 79.776187][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 79.890834][ T4859] loop4: detected capacity change from 0 to 512 [ 79.899130][ T4859] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.906630][ T4859] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.340: bad orphan inode 13 [ 79.918118][ T4859] ext4_test_bit(bit=12, block=18) = 1 [ 79.918136][ T4859] is_bad_inode(inode)=0 [ 79.927757][ T4859] NEXT_ORPHAN(inode)=2130706432 [ 79.927772][ T4859] max_ino=32 [ 79.927780][ T4859] i_nlink=1 [ 79.928613][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.964874][ T4859] pimreg: entered allmulticast mode [ 79.972247][ T4859] pimreg: left allmulticast mode [ 80.041166][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.068127][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.100983][ T4867] loop4: detected capacity change from 0 to 1024 [ 80.109349][ T4867] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.122130][ T4867] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.342: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.137633][ T4867] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.342: Failed to acquire dquot type 0 [ 80.149626][ T4867] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.342: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.163522][ T4867] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.342: Invalid inode bitmap blk 0 in block_group 0 [ 80.176140][ T3565] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.183837][ T4867] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 80.191118][ T3565] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:45: Failed to release dquot type 0 [ 80.200250][ T4867] EXT4-fs (loop4): 1 orphan inode deleted [ 80.217049][ T4867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.264898][ T4867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.335934][ T4873] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.361810][ T4875] random: crng reseeded on system resumption [ 80.394186][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 80.409773][ T4878] loop4: detected capacity change from 0 to 512 [ 80.419643][ T4878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.347: error while reading EA inode 32 err=-116 [ 80.432883][ T4878] EXT4-fs (loop4): Remounting filesystem read-only [ 80.439543][ T4878] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.452596][ T4878] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.462844][ T4878] EXT4-fs (loop4): 1 orphan inode deleted [ 80.469280][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.481907][ T4878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.492392][ T29] kauditd_printk_skb: 1230 callbacks suppressed [ 80.492408][ T29] audit: type=1326 audit(80.477:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421b9ed510 code=0x7ffc0000 [ 80.521472][ T29] audit: type=1326 audit(80.477:9981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f421b9ee7ab code=0x7ffc0000 [ 80.544104][ T29] audit: type=1326 audit(80.477:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f421b9ed80a code=0x7ffc0000 [ 80.566729][ T29] audit: type=1326 audit(80.477:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 80.589407][ T29] audit: type=1326 audit(80.477:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 80.612388][ T29] audit: type=1326 audit(80.477:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 80.635115][ T29] audit: type=1326 audit(80.477:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 80.658095][ T29] audit: type=1326 audit(80.477:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 80.680798][ T29] audit: type=1326 audit(80.477:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 80.703634][ T29] audit: type=1326 audit(80.477:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 81.004815][ T4886] netlink: 88 bytes leftover after parsing attributes in process `syz.2.358'. [ 81.626661][ T4892] loop1: detected capacity change from 0 to 512 [ 81.672481][ T4892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.361'. [ 81.681457][ T4892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 81.700490][ T4892] SELinux: policydb version 280 does not match my version range 15-35 [ 81.713408][ T4892] SELinux: failed to load policy [ 81.728074][ T4901] netlink: 'syz.2.352': attribute type 27 has an invalid length. [ 81.836681][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.843947][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.917402][ T4912] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 82.119543][ T4927] loop4: detected capacity change from 0 to 2048 [ 82.200568][ T4927] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.350: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 82.229921][ T4901] macsec0: left promiscuous mode [ 82.245826][ T4927] EXT4-fs (loop4): get root inode failed [ 82.251616][ T4927] EXT4-fs (loop4): mount failed [ 82.260484][ T23] lo speed is unknown, defaulting to 1000 [ 82.266306][ T23] syz0: Port: 1 Link DOWN [ 82.325067][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.352010][ T4906] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.362138][ T4906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.380700][ T4909] pimreg: entered allmulticast mode [ 82.391851][ T4920] pimreg: left allmulticast mode [ 82.401644][ T3545] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.421462][ T3545] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.437824][ T3545] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.466961][ T3545] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.493438][ T4924] lo speed is unknown, defaulting to 1000 [ 82.499295][ T4924] syz0: Port: 1 Link ACTIVE [ 83.047331][ T4904] syz.4.350 (4904) used greatest stack depth: 6328 bytes left [ 83.422943][ T4944] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 83.427733][ T4943] 9pnet_fd: Insufficient options for proto=fd [ 83.430800][ T4944] __nla_validate_parse: 3 callbacks suppressed [ 83.430817][ T4944] netlink: 224 bytes leftover after parsing attributes in process `syz.2.371'. [ 83.515915][ T4949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.546771][ T4949] veth0_to_team: entered promiscuous mode [ 83.552720][ T4949] veth0_to_team: entered allmulticast mode [ 83.578190][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.587195][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.596159][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.636215][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.645098][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.680425][ T4963] siw: device registration error -23 [ 83.708341][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.734720][ T4965] loop4: detected capacity change from 0 to 1024 [ 83.744056][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 83.759515][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.795456][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.804477][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 83.828769][ T4974] tipc: Started in network mode [ 83.833782][ T4974] tipc: Node identity ac14140f, cluster identity 4711 [ 83.850249][ T4974] tipc: Enabled bearer , priority 10 [ 83.887038][ T3547] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 83.921666][ T3547] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1412 with error 117 [ 83.934411][ T3547] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.934411][ T3547] [ 83.963872][ T3547] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1428 with max blocks 4 with error 117 [ 83.976499][ T3547] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.976499][ T3547] [ 84.280285][ T4983] gretap0: entered promiscuous mode [ 84.286406][ T4983] 0ªX¹¦D: renamed from gretap0 [ 84.293032][ T4983] 0ªX¹¦D: left promiscuous mode [ 84.298183][ T4983] 0ªX¹¦D: entered allmulticast mode [ 84.304264][ T4983] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 84.322973][ T4983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4983 comm=syz.1.372 [ 84.504491][ T4988] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 84.552432][ T3545] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 84.565079][ T3545] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.565079][ T3545] [ 84.574871][ T3545] EXT4-fs (loop4): Total free blocks count 0 [ 84.581075][ T3545] EXT4-fs (loop4): Free/Dirty block details [ 84.587189][ T3545] EXT4-fs (loop4): free_blocks=0 [ 84.626167][ T4997] loop4: detected capacity change from 0 to 1024 [ 84.634876][ T4997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.666311][ T4997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.766273][ T5001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.904337][ T4995] lo speed is unknown, defaulting to 1000 [ 84.911601][ T4995] lo speed is unknown, defaulting to 1000 [ 85.176892][ T943] tipc: Node number set to 2886997007 [ 85.406272][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.524926][ T5017] C: renamed from team_slave_0 (while UP) [ 85.728482][ T5019] loop1: detected capacity change from 0 to 1024 [ 85.772276][ T5019] EXT4-fs: Ignoring removed orlov option [ 85.778063][ T5019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.896660][ T5021] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.982214][ T5029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.991697][ T5019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.012504][ T29] kauditd_printk_skb: 2122 callbacks suppressed [ 86.012519][ T29] audit: type=1326 audit(85.997:12112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.023313][ T5032] vlan2: entered allmulticast mode [ 86.041786][ T29] audit: type=1326 audit(85.997:12113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.069568][ T29] audit: type=1326 audit(85.997:12114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.092416][ T29] audit: type=1326 audit(85.997:12115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.115253][ T29] audit: type=1326 audit(85.997:12116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.137999][ T29] audit: type=1326 audit(85.997:12117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.160891][ T29] audit: type=1326 audit(85.997:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.160941][ T29] audit: type=1326 audit(85.997:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.160974][ T29] audit: type=1326 audit(85.997:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.161008][ T29] audit: type=1326 audit(85.997:12121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 86.205528][ T5039] netlink: 'syz.2.387': attribute type 3 has an invalid length. [ 86.303352][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.373346][ T5043] loop1: detected capacity change from 0 to 512 [ 86.381204][ T5043] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.391270][ T5043] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.388: bg 0: block 248: padding at end of block bitmap is not set [ 86.408340][ T5043] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.388: Failed to acquire dquot type 1 [ 86.420766][ T5043] EXT4-fs (loop1): 1 truncate cleaned up [ 86.438318][ T5043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.480475][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.502398][ T5048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.538404][ T5048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.598247][ T5048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.639686][ T5048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.674184][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.691033][ T5046] lo speed is unknown, defaulting to 1000 [ 86.697253][ T5046] lo speed is unknown, defaulting to 1000 [ 86.751294][ T70] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.767149][ T70] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.775533][ T70] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.812821][ T3565] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.870643][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.001043][ T4924] IPVS: starting estimator thread 0... [ 87.014850][ T5054] lo speed is unknown, defaulting to 1000 [ 87.021193][ T5054] lo speed is unknown, defaulting to 1000 [ 87.066778][ T5061] siw: device registration error -23 [ 87.166902][ T5065] IPVS: using max 2016 ests per chain, 100800 per kthread [ 88.435477][ T5102] atomic_op ffff88812ca2b128 conn xmit_atomic 0000000000000000 [ 88.663055][ T5107] tipc: Can't bind to reserved service type 0 [ 88.908275][ T5115] loop1: detected capacity change from 0 to 128 [ 88.958711][ T5117] __nla_validate_parse: 12 callbacks suppressed [ 88.958753][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 88.976668][ T5117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.984179][ T5117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.993381][ T5117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.001805][ T5117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.367828][ T5127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5127 comm=syz.0.412 [ 89.384202][ T5124] lo speed is unknown, defaulting to 1000 [ 89.390613][ T5124] lo speed is unknown, defaulting to 1000 [ 89.398006][ T5127] bridge0: port 3(syz_tun) entered blocking state [ 89.404528][ T5127] bridge0: port 3(syz_tun) entered disabled state [ 89.411210][ T5127] syz_tun: entered allmulticast mode [ 89.417131][ T5127] syz_tun: entered promiscuous mode [ 89.422492][ T5127] bridge0: port 3(syz_tun) entered blocking state [ 89.429050][ T5127] bridge0: port 3(syz_tun) entered forwarding state [ 89.494132][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 89.494574][ T5131] loop4: detected capacity change from 0 to 512 [ 89.514383][ T5132] netlink: 'syz.0.414': attribute type 21 has an invalid length. [ 89.525841][ T5131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'. [ 89.534892][ T5131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.415'. [ 89.543900][ T5131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'. [ 89.553154][ T5131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'. [ 89.567999][ T5131] SELinux: policydb version 280 does not match my version range 15-35 [ 89.576641][ T5131] SELinux: failed to load policy [ 89.717205][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 89.801742][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 89.811162][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 89.909502][ T5145] loop1: detected capacity change from 0 to 164 [ 89.921078][ T5145] iso9660: Unknown parameter '' [ 89.985073][ T5145] siw: device registration error -23 [ 90.062083][ T5148] macvtap0: refused to change device tx_queue_len [ 90.254875][ T5155] atomic_op ffff888122600d28 conn xmit_atomic 0000000000000000 [ 90.443576][ T5164] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 90.546635][ T5165] atomic_op ffff88810303f528 conn xmit_atomic 0000000000000000 [ 91.057956][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 91.184054][ T10] IPVS: starting estimator thread 0... [ 91.215434][ T5174] loop4: detected capacity change from 0 to 8192 [ 91.225130][ T29] kauditd_printk_skb: 1426 callbacks suppressed [ 91.225148][ T29] audit: type=1326 audit(99.205:13546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77ed675b67 code=0x7ffc0000 [ 91.302653][ T5174] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.306846][ T29] audit: type=1326 audit(99.255:13547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77ed61ada9 code=0x7ffc0000 [ 91.335969][ T29] audit: type=1326 audit(99.255:13548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77ed675b67 code=0x7ffc0000 [ 91.358618][ T29] audit: type=1326 audit(99.255:13549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77ed61ada9 code=0x7ffc0000 [ 91.381252][ T29] audit: type=1326 audit(99.255:13550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 91.404032][ T29] audit: type=1326 audit(99.255:13551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 91.405077][ T5175] IPVS: using max 2160 ests per chain, 108000 per kthread [ 91.426665][ T29] audit: type=1326 audit(99.255:13552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 91.456597][ T29] audit: type=1326 audit(99.255:13553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 91.479373][ T29] audit: type=1326 audit(99.255:13554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 91.501996][ T29] audit: type=1326 audit(99.255:13555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 91.594713][ T5182] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 91.616829][ T5187] loop1: detected capacity change from 0 to 512 [ 91.628346][ T5187] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.636719][ T5187] ext4: Bad value for 'max_dir_size_kb' [ 91.658734][ T5182] loop4: detected capacity change from 8192 to 0 [ 91.667619][ C1] blk_print_req_error: 8 callbacks suppressed [ 91.667646][ C1] I/O error, dev loop4, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 1 [ 91.683001][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 91.691981][ C0] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.701600][ T5174] FAT-fs (loop4): FAT read failed (blocknr 1) [ 91.716234][ T5187] tipc: Started in network mode [ 91.718331][ C0] I/O error, dev loop4, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.721167][ T5187] tipc: Node identity ac14140f, cluster identity 4711 [ 91.733262][ C0] I/O error, dev loop4, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.740846][ T5187] tipc: Enabled bearer , priority 10 [ 91.753805][ T5182] FAT-fs (loop4): Directory bread(block 65) failed [ 91.760617][ C1] I/O error, dev loop4, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.764349][ T5174] FAT-fs (loop4): unable to read inode block for updating (i_pos 1050) [ 91.769956][ T5182] FAT-fs (loop4): Directory bread(block 66) failed [ 91.830887][ C1] I/O error, dev loop4, sector 67 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.844316][ T5182] FAT-fs (loop4): Directory bread(block 67) failed [ 91.859325][ C1] I/O error, dev loop4, sector 68 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.868931][ T5182] FAT-fs (loop4): Directory bread(block 68) failed [ 91.889052][ C1] I/O error, dev loop4, sector 69 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.899611][ T5182] FAT-fs (loop4): Directory bread(block 69) failed [ 91.911778][ C1] I/O error, dev loop4, sector 70 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 91.976505][ T5182] FAT-fs (loop4): Directory bread(block 70) failed [ 91.987013][ C0] I/O error, dev loop4, sector 71 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 92.007435][ T5182] FAT-fs (loop4): Directory bread(block 71) failed [ 92.017450][ T3580] FAT-fs (loop4): unable to read inode block for updating (i_pos 1050) [ 92.058483][ T5205] C: renamed from team_slave_0 [ 92.722107][ T5219] atomic_op ffff888122604128 conn xmit_atomic 0000000000000000 [ 92.848228][ T943] tipc: Node number set to 2886997007 [ 93.006941][ T5224] loop1: detected capacity change from 0 to 512 [ 93.223381][ T5224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.487810][ T5246] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.441: iget: bad i_size value: 2533274857506816 [ 93.563747][ T5244] sctp: [Deprecated]: syz.3.446 (pid 5244) Use of int in maxseg socket option. [ 93.563747][ T5244] Use struct sctp_assoc_value instead [ 93.613112][ T5225] Set syz1 is full, maxelem 65536 reached [ 93.933949][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.954435][ T5254] gretap0: entered promiscuous mode [ 93.963196][ T5254] 0ªX¹¦D: renamed from gretap0 [ 93.964287][ T5256] netlink: 'syz.1.449': attribute type 21 has an invalid length. [ 93.977680][ T5254] 0ªX¹¦D: left promiscuous mode [ 93.982688][ T5254] 0ªX¹¦D: entered allmulticast mode [ 93.989981][ T5254] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 94.006483][ T5256] loop1: detected capacity change from 0 to 1024 [ 94.008881][ T5254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5254 comm=syz.4.450 [ 94.013413][ T5256] EXT4-fs: Ignoring removed bh option [ 94.031797][ T5256] EXT4-fs: inline encryption not supported [ 94.038005][ T5256] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.050473][ T5256] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.449: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.064571][ T5256] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.449: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.079462][ T5256] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.449: Failed to acquire dquot type 0 [ 94.091028][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 94.101344][ T5256] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.449: mark_inode_dirty error [ 94.128975][ T5256] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 94.165847][ T5256] EXT4-fs (loop1): 1 orphan inode deleted [ 94.183537][ T3580] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.196159][ T5256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.219611][ T3580] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:60: Failed to release dquot type 0 [ 94.261333][ T5256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.288947][ T5266] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 94.309876][ T5256] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.449: Invalid inode table block 1 in block_group 0 [ 94.353601][ T5256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 94.379256][ T5256] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.449: mark_inode_dirty error [ 94.588428][ T5289] __nla_validate_parse: 17 callbacks suppressed [ 94.588446][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 94.854634][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 94.864310][ T5303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 94.924490][ T5309] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.002981][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 95.042254][ T5314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.116579][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 95.179480][ T1036] hid_parser_main: 34 callbacks suppressed [ 95.179501][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.195119][ T1036] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.215286][ T5327] netlink: 9 bytes leftover after parsing attributes in process `syz.3.474'. [ 95.240099][ T5327] gretap0: entered promiscuous mode [ 95.274733][ T5327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5327 comm=syz.3.474 [ 95.483813][ T5323] siw: device registration error -23 [ 95.608028][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 95.617038][ T5331] netlink: 212 bytes leftover after parsing attributes in process `syz.4.476'. [ 95.635510][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 95.745080][ T5349] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.763378][ T5349] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 95.796783][ T5349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.478'. [ 95.840722][ T5357] siw: device registration error -23 [ 96.283768][ T29] kauditd_printk_skb: 1118 callbacks suppressed [ 96.283813][ T29] audit: type=1326 audit(104.262:14671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.319795][ T5374] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 96.328148][ T5374] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 96.378621][ T29] audit: type=1326 audit(104.312:14672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.401555][ T29] audit: type=1326 audit(104.312:14673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.424527][ T29] audit: type=1326 audit(104.312:14674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.447418][ T29] audit: type=1326 audit(104.312:14675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.470292][ T29] audit: type=1326 audit(104.312:14676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.493264][ T29] audit: type=1326 audit(104.312:14677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.516115][ T29] audit: type=1326 audit(104.312:14678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.539005][ T29] audit: type=1326 audit(104.312:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 96.561759][ T29] audit: type=1326 audit(104.312:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 97.125198][ T5383] gretap0: entered promiscuous mode [ 97.142885][ T5383] 0ªX¹¦D: renamed from gretap0 [ 97.154402][ T5383] 0ªX¹¦D: left promiscuous mode [ 97.159501][ T5383] 0ªX¹¦D: entered allmulticast mode [ 97.182407][ T5383] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 97.275254][ T5383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5383 comm=syz.0.489 [ 97.366113][ T5395] lo speed is unknown, defaulting to 1000 [ 97.372382][ T5395] lo speed is unknown, defaulting to 1000 [ 97.482862][ T5403] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.634138][ T5409] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.759116][ T5413] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.086778][ T5413] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 98.126366][ T5420] siw: device registration error -23 [ 98.235666][ T5418] C: renamed from team_slave_0 [ 98.255208][ T5418] can0: slcan on ttyS3. [ 98.321210][ T5417] can0 (unregistered): slcan off ttyS3. [ 98.388938][ T5442] rdma_rxe: rxe_newlink: failed to add erspan0 [ 98.491717][ T5447] lo speed is unknown, defaulting to 1000 [ 98.498014][ T5447] lo speed is unknown, defaulting to 1000 [ 98.571702][ T5476] !yz!: rxe_newlink: already configured on team_slave_0 [ 98.683301][ T5479] !yz!: rxe_newlink: already configured on team_slave_0 [ 98.693902][ T5479] loop1: detected capacity change from 0 to 512 [ 98.701268][ T5479] EXT4-fs: Ignoring removed oldalloc option [ 98.708804][ T5479] EXT4-fs: Mount option(s) incompatible with ext2 [ 98.842275][ T5492] gretap0: entered promiscuous mode [ 98.874642][ T5492] 0ªX¹¦D: renamed from gretap0 [ 98.908936][ T5492] 0ªX¹¦D: left promiscuous mode [ 98.913924][ T5492] 0ªX¹¦D: entered allmulticast mode [ 98.921712][ T5492] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 98.945528][ T5492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5492 comm=syz.2.515 [ 99.245756][ T5503] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.253528][ T5503] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 99.843629][ T5518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.106885][ T5521] C: renamed from team_slave_0 [ 100.137846][ T5536] can0: slcan on ttyS3. [ 100.352455][ T5515] can0 (unregistered): slcan off ttyS3. [ 100.859190][ T5523] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.867470][ T5523] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 100.878820][ T5523] __nla_validate_parse: 25 callbacks suppressed [ 100.878836][ T5523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.533'. [ 100.946060][ T5564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.526'. [ 100.956438][ T5565] netlink: 168 bytes leftover after parsing attributes in process `syz.0.527'. [ 100.967161][ T5562] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 100.973732][ T5562] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.981468][ T5562] vhci_hcd vhci_hcd.0: Device attached [ 100.989464][ T5564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.526'. [ 101.019686][ T5562] loop1: detected capacity change from 0 to 512 [ 101.039890][ T5562] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.113312][ T5562] EXT4-fs (loop1): mount failed [ 101.144491][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 101.162403][ T1036] vhci_hcd: vhci_device speed not set [ 101.169396][ T5564] lo speed is unknown, defaulting to 1000 [ 101.176210][ T5564] lo speed is unknown, defaulting to 1000 [ 101.182249][ T5562] loop1: detected capacity change from 0 to 512 [ 101.212243][ T5562] EXT4-fs: Ignoring removed nobh option [ 101.229402][ T1036] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 101.261114][ T5562] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.538: corrupted inode contents [ 101.280984][ T5562] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.538: mark_inode_dirty error [ 101.307739][ T5562] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.538: corrupted inode contents [ 101.317776][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 101.317795][ T29] audit: type=1326 audit(109.280:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 101.357950][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 101.360540][ T5562] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.538: mark_inode_dirty error [ 101.370611][ T29] audit: type=1326 audit(109.320:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 101.400937][ T29] audit: type=1326 audit(109.320:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 101.423877][ T29] audit: type=1326 audit(109.330:15496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 101.434871][ T5562] Quota error (device loop1): write_blk: dquota write failed [ 101.446728][ T29] audit: type=1326 audit(109.330:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 101.455326][ T5562] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 101.477049][ T29] audit: type=1326 audit(109.330:15497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 101.488435][ T5562] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.538: Failed to acquire dquot type 0 [ 101.509760][ T29] audit: type=1326 audit(109.330:15498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 101.509791][ T29] audit: type=1326 audit(109.330:15499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f421b9eeba9 code=0x7ffc0000 [ 101.563480][ T5562] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.538: corrupted inode contents [ 101.597044][ T5562] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.538: mark_inode_dirty error [ 101.615535][ T5562] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.538: corrupted inode contents [ 101.629240][ T5621] netlink: 9 bytes leftover after parsing attributes in process `syz.0.534'. [ 101.649444][ T5621] 0ªX¹¦D: entered promiscuous mode [ 101.654730][ T5621] 0ªX¹¦D: left allmulticast mode [ 101.659932][ T5562] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.538: mark_inode_dirty error [ 101.672043][ T5562] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.538: corrupted inode contents [ 101.675748][ T5626] netlink: 'syz.3.529': attribute type 1 has an invalid length. [ 101.686286][ T5562] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 101.693488][ T5617] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 101.701051][ T5562] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.538: corrupted inode contents [ 101.720153][ T5562] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.538: mark_inode_dirty error [ 101.731693][ T5562] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 101.734853][ T5626] bond0: entered promiscuous mode [ 101.742462][ T5562] EXT4-fs (loop1): 1 truncate cleaned up [ 101.750160][ T5621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5621 comm=syz.0.534 [ 101.751809][ T5562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.776750][ T5661] netlink: 3 bytes leftover after parsing attributes in process `syz.3.529'. [ 101.777770][ T5562] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.797581][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.821069][ T5661] batadv1: entered promiscuous mode [ 101.826494][ T5661] batadv1: entered allmulticast mode [ 101.868295][ T5566] vhci_hcd: connection reset by peer [ 101.873992][ T3542] vhci_hcd: stop threads [ 101.878341][ T3542] vhci_hcd: release socket [ 101.882879][ T3542] vhci_hcd: disconnect device [ 101.894118][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.906087][ T5661] bond0: (slave batadv1): making interface the new active one [ 101.908782][ T5626] netlink: 3 bytes leftover after parsing attributes in process `syz.3.529'. [ 101.915355][ T5661] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 101.936290][ T5626] batadv2: entered promiscuous mode [ 101.941619][ T5626] batadv2: entered allmulticast mode [ 101.947738][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 101.956019][ T5626] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 101.977035][ T5626] tipc: Enabling of bearer rejected, already enabled [ 102.014878][ T5669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 102.156785][ T5680] veth0: entered promiscuous mode [ 103.345689][ T5717] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.403589][ T5723] hub 6-0:1.0: USB hub found [ 103.408299][ T5723] hub 6-0:1.0: 8 ports detected [ 103.599007][ T5729] vlan2: entered allmulticast mode [ 104.057621][ T5751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5751 comm=syz.1.555 [ 104.081299][ T5751] bridge0: port 3(syz_tun) entered blocking state [ 104.087998][ T5751] bridge0: port 3(syz_tun) entered disabled state [ 104.096370][ T5751] syz_tun: entered allmulticast mode [ 104.102488][ T5751] syz_tun: entered promiscuous mode [ 104.115631][ T5739] lo speed is unknown, defaulting to 1000 [ 104.121838][ T5739] lo speed is unknown, defaulting to 1000 [ 104.465554][ T5784] vlan0: entered allmulticast mode [ 104.659725][ T5795] dummy0: entered allmulticast mode [ 104.666830][ T5795] dummy0: left allmulticast mode [ 104.677245][ T5795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5795 comm=syz.3.565 [ 104.689665][ T5795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5795 comm=syz.3.565 [ 104.705544][ T5795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=5795 comm=syz.3.565 [ 104.835459][ T5804] hub 6-0:1.0: USB hub found [ 104.844456][ T5804] hub 6-0:1.0: 8 ports detected [ 104.855240][ T5809] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.973722][ T5804] vlan0: entered allmulticast mode [ 105.786226][ T5844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5844 comm=syz.2.573 [ 105.792683][ T5838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.814593][ T5845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 105.821170][ T5845] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.828937][ T5845] vhci_hcd vhci_hcd.0: Device attached [ 105.841315][ T5844] bridge0: port 3(syz_tun) entered blocking state [ 105.841424][ T5844] bridge0: port 3(syz_tun) entered disabled state [ 105.841535][ T5844] syz_tun: entered allmulticast mode [ 105.842183][ T5844] syz_tun: entered promiscuous mode [ 105.867583][ T5844] bridge0: port 3(syz_tun) entered blocking state [ 105.867627][ T5844] bridge0: port 3(syz_tun) entered forwarding state [ 105.889765][ T5840] vlan0: entered allmulticast mode [ 105.908487][ T5833] lo speed is unknown, defaulting to 1000 [ 105.908912][ T5833] lo speed is unknown, defaulting to 1000 [ 105.945506][ T5838] bond1 (unregistering): Released all slaves [ 105.950886][ T5908] __nla_validate_parse: 22 callbacks suppressed [ 105.950905][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 105.957312][ T5879] vhci_hcd: connection closed [ 105.963053][ T3528] vhci_hcd: stop threads [ 105.963067][ T3528] vhci_hcd: release socket [ 105.963081][ T3528] vhci_hcd: disconnect device [ 106.025754][ T943] vhci_hcd: vhci_device speed not set [ 106.045505][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 106.103384][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 106.128685][ T5954] loop1: detected capacity change from 0 to 8192 [ 106.137167][ T5954] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.203819][ T5962] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.219422][ T5963] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 106.227135][ T5963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.577'. [ 106.264940][ T5963] loop1: detected capacity change from 8192 to 0 [ 106.277162][ C1] blk_print_req_error: 1 callbacks suppressed [ 106.277184][ C1] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 106.293267][ T5963] FAT-fs (loop1): Directory bread(block 65) failed [ 106.299928][ C1] I/O error, dev loop1, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 1 [ 106.299957][ C1] Buffer I/O error on dev loop1, logical block 33, lost sync page write [ 106.316351][ C0] I/O error, dev loop1, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 1 [ 106.327182][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 106.337940][ C0] I/O error, dev loop1, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 106.347274][ C0] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 106.356803][ T5963] FAT-fs (loop1): Directory bread(block 66) failed [ 106.364174][ C0] I/O error, dev loop1, sector 67 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 106.373788][ T1036] vhci_hcd: vhci_device speed not set [ 106.379316][ T5954] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 106.389128][ T5963] FAT-fs (loop1): Directory bread(block 67) failed [ 106.407479][ C0] I/O error, dev loop1, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 1 [ 106.411302][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 106.411320][ T29] audit: type=1326 audit(2000000000.449:16310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 106.417026][ C0] Buffer I/O error on dev loop1, logical block 85, lost async page write [ 106.423210][ T29] audit: type=1326 audit(2000000000.449:16311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 106.446587][ C0] I/O error, dev loop1, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 1 [ 106.446634][ C0] Buffer I/O error on dev loop1, logical block 97, lost async page write [ 106.446656][ C0] Buffer I/O error on dev loop1, logical block 98, lost async page write [ 106.455103][ T29] audit: type=1326 audit(2000000000.449:16312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 106.478446][ C0] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 106.478470][ C0] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 106.487941][ T29] audit: type=1326 audit(2000000000.449:16313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 106.496382][ C0] Buffer I/O error on dev loop1, logical block 101, lost async page write [ 106.577250][ C0] Buffer I/O error on dev loop1, logical block 102, lost async page write [ 106.585807][ C0] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 106.594368][ C0] I/O error, dev loop1, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 1 [ 106.604003][ C0] I/O error, dev loop1, sector 152 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 1 [ 106.619713][ T5963] FAT-fs (loop1): Directory bread(block 68) failed [ 106.636886][ T5963] FAT-fs (loop1): Directory bread(block 69) failed [ 106.643720][ T5963] FAT-fs (loop1): Directory bread(block 70) failed [ 106.650625][ T5963] FAT-fs (loop1): Directory bread(block 71) failed [ 106.761878][ T5980] macvtap0: refused to change device tx_queue_len [ 106.836286][ T5985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.876447][ T5986] atomic_op ffff888102371928 conn xmit_atomic 0000000000000000 [ 106.964880][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 107.002198][ T5996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.021928][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 107.038500][ T5996] bond1 (unregistering): Released all slaves [ 107.079083][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 107.079625][ T29] audit: type=1326 audit(2000000001.119:16314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 107.111439][ T29] audit: type=1326 audit(2000000001.119:16315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 107.135035][ T29] audit: type=1326 audit(2000000000.000:16316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 107.144215][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 107.158574][ T29] audit: type=1326 audit(2000000000.000:16317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 107.190821][ T29] audit: type=1326 audit(2000000000.000:16318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 107.214528][ T29] audit: type=1326 audit(2000000000.000:16319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 107.219406][ T6068] lo speed is unknown, defaulting to 1000 [ 107.245016][ T6068] lo speed is unknown, defaulting to 1000 [ 107.346213][ T6100] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6100 comm=syz.0.592 [ 107.411192][ T6105] 9pnet_fd: Insufficient options for proto=fd [ 107.420385][ T6105] 9pnet_fd: Insufficient options for proto=fd [ 107.451451][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 107.461531][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.469902][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.674632][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 107.887475][ T6138] netlink: 'syz.3.601': attribute type 9 has an invalid length. [ 107.990761][ T6137] (unnamed net_device) (uninitialized): option mode: invalid value (7) [ 108.440208][ T6138] netlink: 'syz.3.601': attribute type 9 has an invalid length. [ 108.691100][ T6145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6145 comm=syz.2.604 [ 108.787519][ T6124] Set syz1 is full, maxelem 65536 reached [ 108.813210][ T6153] 9pnet_fd: Insufficient options for proto=fd [ 108.820185][ T6153] 9pnet_fd: Insufficient options for proto=fd [ 109.488101][ T6172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.763842][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.771488][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.779197][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.786608][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.961071][ T6201] pimreg: entered allmulticast mode [ 109.971483][ T6201] pimreg: left allmulticast mode [ 110.326588][ T6278] 9pnet_fd: Insufficient options for proto=fd [ 110.335206][ T6278] 9pnet_fd: Insufficient options for proto=fd [ 110.409304][ T6279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.422503][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 111.422518][ T29] audit: type=1326 audit(2000000006.324:16945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.452330][ T29] audit: type=1326 audit(2000000006.324:16946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.475798][ T29] audit: type=1326 audit(2000000006.334:16947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.499178][ T29] audit: type=1326 audit(2000000006.334:16948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.522584][ T29] audit: type=1326 audit(2000000006.334:16949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.546089][ T29] audit: type=1326 audit(2000000006.334:16950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.569527][ T29] audit: type=1326 audit(2000000006.334:16951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.592979][ T29] audit: type=1326 audit(2000000006.334:16952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.616435][ T29] audit: type=1326 audit(2000000006.334:16953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 111.639777][ T29] audit: type=1326 audit(2000000006.334:16954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 112.075762][ T6311] __nla_validate_parse: 6 callbacks suppressed [ 112.075782][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 112.131140][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.163652][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.398971][ T6319] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.504944][ T6324] siw: device registration error -23 [ 112.512968][ T6326] netlink: 14 bytes leftover after parsing attributes in process `syz.4.631'. [ 112.612687][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.623059][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.633604][ T6326] bond0 (unregistering): Released all slaves [ 112.697179][ T6319] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.762143][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 112.789219][ T6319] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.927814][ T6319] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.052872][ T3552] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.084970][ T3552] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.105511][ T3552] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.128667][ T3552] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.515650][ T6390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 113.555148][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 113.591034][ T6416] macvtap0: refused to change device tx_queue_len [ 113.602290][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 113.692181][ T6420] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 113.700064][ T6420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.641'. [ 113.780101][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 113.789935][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 113.848894][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 113.928325][ T6444] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 113.968781][ T6444] team0: Port device dummy0 added [ 113.978649][ T6444] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 113.993850][ T6444] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.057028][ T6444] team0: Failed to send options change via netlink (err -105) [ 114.064678][ T6452] block device autoloading is deprecated and will be removed. [ 114.077762][ T6444] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.122069][ T6444] team0: Port device dummy0 removed [ 114.160216][ T6449] netlink: 'syz.3.650': attribute type 21 has an invalid length. [ 114.178579][ T6444] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.089578][ T6498] macvtap0: refused to change device tx_queue_len [ 115.878110][ T6527] siw: device registration error -23 [ 116.337582][ T6541] netlink: 'syz.4.668': attribute type 21 has an invalid length. [ 116.688407][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 116.688439][ T29] audit: type=1326 audit(2000000011.592:17642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.718261][ T29] audit: type=1326 audit(2000000011.592:17643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.749214][ T29] audit: type=1326 audit(2000000011.592:17644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.772831][ T29] audit: type=1326 audit(2000000011.592:17645): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.798975][ T29] audit: type=1326 audit(2000000011.592:17646): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.822792][ T29] audit: type=1326 audit(2000000011.652:17647): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.846706][ T29] audit: type=1326 audit(2000000011.652:17648): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.848857][ T6563] macvtap0: refused to change device tx_queue_len [ 116.870564][ T29] audit: type=1326 audit(2000000011.652:17649): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.870601][ T29] audit: type=1326 audit(2000000011.652:17650): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 116.924836][ T29] audit: type=1326 audit(2000000011.652:17651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 118.133729][ T6609] __nla_validate_parse: 24 callbacks suppressed [ 118.133807][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.690'. [ 118.149130][ T6609] netlink: 212 bytes leftover after parsing attributes in process `syz.3.690'. [ 118.238292][ T6610] netlink: 'syz.1.689': attribute type 21 has an invalid length. [ 118.246184][ T6610] netlink: 156 bytes leftover after parsing attributes in process `syz.1.689'. [ 118.255214][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 118.353048][ T6628] usb usb8: usbfs: process 6628 (syz.4.693) did not claim interface 0 before use [ 118.726390][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 118.824353][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 118.882886][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.700'. [ 118.942422][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 119.075594][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 119.369121][ T6696] blktrace: Concurrent blktraces are not allowed on loop6 [ 119.489114][ T6704] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.706'. [ 119.690066][ T6711] pimreg: entered allmulticast mode [ 119.696081][ T6711] pimreg: left allmulticast mode [ 120.214482][ T6722] blk_print_req_error: 4 callbacks suppressed [ 120.214503][ T6722] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.279862][ T6722] FAT-fs (loop5): unable to read boot sector [ 120.476896][ T6736] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.613123][ T6736] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.808429][ T6736] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.887015][ T6720] Set syz1 is full, maxelem 65536 reached [ 120.903985][ T6736] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.982990][ T3552] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.017409][ T3552] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.025791][ T6767] lo speed is unknown, defaulting to 1000 [ 121.032036][ T6767] lo speed is unknown, defaulting to 1000 [ 121.035225][ T3552] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.054160][ T3552] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.098729][ T6801] random: crng reseeded on system resumption [ 121.212750][ T6804] Falling back ldisc for ttyS3. [ 121.453475][ T6814] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 121.560168][ T6828] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 121.625072][ T6814] team0: Port device dummy0 added [ 121.662875][ C0] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.672273][ T51] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 121.714417][ T6828] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.760624][ T6828] team0: Failed to send options change via netlink (err -105) [ 121.805229][ T6828] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.831200][ T6828] team0: Port device dummy0 removed [ 121.845346][ T6828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.873266][ T29] kauditd_printk_skb: 712 callbacks suppressed [ 121.873279][ T29] audit: type=1326 audit(2000002594.784:18364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 121.923007][ T29] audit: type=1326 audit(2000002594.814:18365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 121.946541][ T29] audit: type=1326 audit(2000002594.814:18366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 121.970473][ T29] audit: type=1326 audit(2000002594.814:18367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 121.993964][ T29] audit: type=1326 audit(2000002594.814:18368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 122.017472][ T29] audit: type=1326 audit(2000002594.814:18369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 122.041012][ T29] audit: type=1326 audit(2000002594.814:18370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 122.064555][ T29] audit: type=1326 audit(2000002594.814:18371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 122.087910][ T29] audit: type=1326 audit(2000002594.814:18372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 122.111411][ T29] audit: type=1326 audit(2000002594.814:18373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 122.437178][ T6858] Invalid option length (1045175) for dns_resolver key [ 122.564959][ T6865] siw: device registration error -23 [ 123.122367][ T6889] netlink: 'syz.3.743': attribute type 10 has an invalid length. [ 123.188602][ T6889] team0: Port device dummy0 added [ 123.215235][ T6889] netlink: 'syz.3.743': attribute type 10 has an invalid length. [ 123.229219][ T6889] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.276221][ T6889] team0: Failed to send options change via netlink (err -105) [ 123.284990][ T6889] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.299598][ T6889] team0: Port device dummy0 removed [ 123.338227][ T6892] netlink: 'syz.3.744': attribute type 3 has an invalid length. [ 123.348874][ T6892] IPv6: Can't replace route, no match found [ 123.574276][ T6896] __nla_validate_parse: 10 callbacks suppressed [ 123.574296][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.746'. [ 123.657706][ T6859] syz.1.730 (6859) used greatest stack depth: 6200 bytes left [ 123.704477][ T6899] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.747'. [ 123.790795][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 124.043937][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 124.373793][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 124.438455][ T6925] random: crng reseeded on system resumption [ 124.676759][ T6943] can0: slcan on ttyS3. [ 124.729589][ T6933] netlink: 'syz.4.756': attribute type 10 has an invalid length. [ 124.772234][ T6934] can0 (unregistered): slcan off ttyS3. [ 124.780418][ T6951] netlink: 'syz.4.756': attribute type 10 has an invalid length. [ 124.813425][ T6933] team0: Port device dummy0 added [ 124.838366][ T6951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.854484][ T6951] team0: Failed to send options change via netlink (err -105) [ 124.862649][ T6951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.871821][ T6951] team0: Port device dummy0 removed [ 124.886289][ T6953] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 124.894019][ T6953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'. [ 124.937908][ T6956] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 125.009540][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 125.283980][ T6966] SELinux: ebitmap: truncated map [ 125.290306][ T6966] SELinux: failed to load policy [ 125.303037][ T6970] netlink: 'syz.2.774': attribute type 21 has an invalid length. [ 125.310903][ T6970] netlink: 156 bytes leftover after parsing attributes in process `syz.2.774'. [ 125.391540][ T6977] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.768'. [ 125.965572][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 126.469136][ T7050] 9pnet_fd: Insufficient options for proto=fd [ 127.214938][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 127.214973][ T29] audit: type=1326 audit(2000002600.125:19363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d21eba9 code=0x7ffc0000 [ 127.250852][ T29] audit: type=1326 audit(2000002600.125:19364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.250917][ T29] audit: type=1326 audit(2000002600.125:19365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.250949][ T29] audit: type=1326 audit(2000002600.125:19366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.251094][ T29] audit: type=1326 audit(2000002600.125:19367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.251128][ T29] audit: type=1326 audit(2000002600.125:19368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.301920][ T7137] program syz.1.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.321598][ T29] audit: type=1326 audit(2000002600.125:19369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.401493][ T29] audit: type=1326 audit(2000002600.125:19370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.425100][ T29] audit: type=1326 audit(2000002600.125:19371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.448718][ T29] audit: type=1326 audit(2000002600.125:19372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 127.527298][ T7144] pimreg: entered allmulticast mode [ 127.538525][ T7144] pimreg: left allmulticast mode [ 127.664004][ T7158] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 128.655742][ T7199] __nla_validate_parse: 3 callbacks suppressed [ 128.655760][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 128.739650][ T7205] netlink: 'syz.2.799': attribute type 3 has an invalid length. [ 128.752576][ T7205] IPv6: Can't replace route, no match found [ 128.830610][ T7211] Invalid option length (1045175) for dns_resolver key [ 128.845373][ T7211] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.802'. [ 129.293810][ T7241] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.806'. [ 129.683241][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 129.805938][ T7257] openvswitch: netlink: Message has 6 unknown bytes. [ 129.817479][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.825029][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.832465][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.839940][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.847404][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.854811][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.862241][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.869689][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.877188][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.884614][ T4924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.915172][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 129.950086][ T7264] netlink: 'syz.0.813': attribute type 3 has an invalid length. [ 129.962325][ T7264] IPv6: Can't replace route, no match found [ 129.982455][ T7265] netlink: 'syz.2.810': attribute type 4 has an invalid length. [ 129.995151][ T10] lo speed is unknown, defaulting to 1000 [ 130.000937][ T10] syz0: Port: 1 Link DOWN [ 130.006756][ T7265] netlink: 'syz.2.810': attribute type 4 has an invalid length. [ 130.017535][ T3399] lo speed is unknown, defaulting to 1000 [ 130.023352][ T3399] syz0: Port: 1 Link ACTIVE [ 130.079113][ T4924] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.098676][ T7267] netlink: 'syz.0.814': attribute type 16 has an invalid length. [ 130.106618][ T7267] netlink: 156 bytes leftover after parsing attributes in process `syz.0.814'. [ 130.263669][ T7281] tmpfs: Unknown parameter 'quota' [ 130.273297][ T7281] lo speed is unknown, defaulting to 1000 [ 130.279087][ T7281] lo speed is unknown, defaulting to 1000 [ 130.285237][ T7281] lo speed is unknown, defaulting to 1000 [ 130.292235][ T7281] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 130.960970][ T7281] lo speed is unknown, defaulting to 1000 [ 130.967173][ T7281] lo speed is unknown, defaulting to 1000 [ 130.973305][ T7281] lo speed is unknown, defaulting to 1000 [ 130.979500][ T7281] lo speed is unknown, defaulting to 1000 [ 130.985606][ T7281] lo speed is unknown, defaulting to 1000 [ 131.125778][ T7277] netlink: 'syz.2.815': attribute type 10 has an invalid length. [ 131.133622][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.815'. [ 131.919925][ T7309] siw: device registration error -23 [ 131.926567][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 131.929729][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 131.944640][ T7306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.821'. [ 132.051848][ T7317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7317 comm=syz.2.825 [ 132.070709][ T7317] random: crng reseeded on system resumption [ 132.095678][ T7317] netlink: '+}[@': attribute type 7 has an invalid length. [ 132.351033][ T29] kauditd_printk_skb: 863 callbacks suppressed [ 132.357381][ T29] audit: type=1326 audit(2000002605.256:20236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.380936][ T29] audit: type=1326 audit(2000002605.256:20237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.404476][ T29] audit: type=1326 audit(2000002605.256:20238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.428033][ T29] audit: type=1326 audit(2000002605.256:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.451487][ T29] audit: type=1326 audit(2000002605.256:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.474854][ T29] audit: type=1326 audit(2000002605.256:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.498572][ T29] audit: type=1326 audit(2000002605.256:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.522010][ T29] audit: type=1326 audit(2000002605.256:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.545566][ T29] audit: type=1326 audit(2000002605.256:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.569033][ T29] audit: type=1326 audit(2000002605.266:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ed67eba9 code=0x7ffc0000 [ 132.797753][ T7368] 9pnet_fd: Insufficient options for proto=fd [ 133.027751][ T7395] siw: device registration error -23 [ 133.655590][ T7416] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.743249][ T7416] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.760386][ T7429] netlink: 'syz.1.847': attribute type 4 has an invalid length. [ 133.783487][ T7416] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.822719][ T7416] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.878654][ T3559] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.890622][ T3559] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.902872][ T3552] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.915080][ T3559] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.105785][ T7454] openvswitch: netlink: Message has 6 unknown bytes. [ 134.112451][ T7456] 9pnet_fd: Insufficient options for proto=fd [ 134.117035][ T7454] netlink: 'syz.3.851': attribute type 4 has an invalid length. [ 134.128943][ T10] lo speed is unknown, defaulting to 1000 [ 134.134819][ T10] 3yz0: Port: 1 Link DOWN [ 134.142965][ T7454] netlink: 'syz.3.851': attribute type 4 has an invalid length. [ 134.155317][ T7455] __nla_validate_parse: 13 callbacks suppressed [ 134.155334][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 134.156709][ T10] lo speed is unknown, defaulting to 1000 [ 134.176290][ T10] 3yz0: Port: 1 Link ACTIVE [ 134.235913][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 134.252673][ T7463] Driver unsupported XDP return value 0 on prog (id 1019) dev N/A, expect packet loss! [ 134.301331][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 134.346337][ T7467] program syz.4.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.358908][ T7471] netlink: 144 bytes leftover after parsing attributes in process `syz.3.857'. [ 134.368690][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 134.421993][ T7475] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 134.429754][ T7475] netlink: 224 bytes leftover after parsing attributes in process `syz.1.858'. [ 134.439740][ T7475] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 134.526512][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 134.629469][ T7507] openvswitch: netlink: Message has 6 unknown bytes. [ 134.671135][ T7507] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 134.697064][ T10] lo speed is unknown, defaulting to 1000 [ 134.702876][ T10] syz2: Port: 1 Link DOWN [ 134.709536][ T7507] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 134.720393][ T10] lo speed is unknown, defaulting to 1000 [ 134.726249][ T10] syz2: Port: 1 Link ACTIVE [ 134.761877][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 135.272117][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 135.419584][ T7535] bridge0: entered promiscuous mode [ 135.428241][ T7535] macvtap1: entered allmulticast mode [ 135.433736][ T7535] bridge0: entered allmulticast mode [ 135.440127][ T7535] bridge0: port 4(macvtap1) entered blocking state [ 135.446821][ T7535] bridge0: port 4(macvtap1) entered disabled state [ 135.455492][ T7535] bridge0: left allmulticast mode [ 135.460579][ T7535] bridge0: left promiscuous mode [ 135.473152][ T7541] vhci_hcd: invalid port number 96 [ 135.478324][ T7541] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 135.600992][ T7539] Falling back ldisc for ttyS3. [ 135.626593][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 135.718658][ T7572] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.744777][ T7572] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 135.847074][ T7582] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7582 comm=syz.0.881 [ 135.860858][ T7582] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7582 comm=syz.0.881 [ 136.055143][ T7579] Set syz1 is full, maxelem 65536 reached [ 136.337176][ T7584] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.382306][ T7584] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.432247][ T7584] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.482017][ T7584] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.537462][ T3555] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.549620][ T3555] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.562150][ T3580] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.573867][ T3580] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.718202][ T7641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=7641 comm=syz.1.890 [ 136.738552][ T3385] hid_parser_main: 16 callbacks suppressed [ 136.738573][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.752005][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.759583][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.767111][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.774639][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.782605][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.790066][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.797533][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.805101][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.812677][ T3385] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 136.820818][ T7618] netlink: 'syz.4.887': attribute type 16 has an invalid length. [ 136.948880][ T3385] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 137.028044][ T7663] serio: Serial port ptm0 [ 137.475052][ T7685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7685 comm=syz.4.897 [ 137.488483][ T7685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7685 comm=syz.4.897 [ 137.503492][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.512872][ T7684] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.525381][ T7684] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 137.552285][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.686146][ T7681] Set syz1 is full, maxelem 65536 reached [ 137.723412][ T7693] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 137.732495][ T29] kauditd_printk_skb: 1416 callbacks suppressed [ 137.732509][ T29] audit: type=1326 audit(2000002610.646:21662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.769338][ T29] audit: type=1326 audit(2000002610.676:21663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.792966][ T29] audit: type=1326 audit(2000002610.676:21664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.816408][ T29] audit: type=1326 audit(2000002610.676:21665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.840024][ T29] audit: type=1326 audit(2000002610.676:21666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.863501][ T29] audit: type=1326 audit(2000002610.676:21667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.887188][ T29] audit: type=1326 audit(2000002610.676:21668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.910690][ T29] audit: type=1326 audit(2000002610.676:21669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.934139][ T29] audit: type=1326 audit(2000002610.676:21670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 137.957683][ T29] audit: type=1326 audit(2000002610.676:21671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c86beba9 code=0x7ffc0000 [ 138.003829][ T7705] random: crng reseeded on system resumption [ 138.124975][ T7717] IPv6: Can't replace route, no match found [ 138.183668][ T7718] devpts: Unknown parameter 'trans' [ 138.192247][ T7718] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 138.307503][ T7721] netlink: 'syz.3.908': attribute type 10 has an invalid length. [ 138.316672][ T7721] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 139.306617][ T7756] __nla_validate_parse: 14 callbacks suppressed [ 139.306706][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.917'. [ 139.385942][ T7761] syz_tun: left allmulticast mode [ 139.391113][ T7761] syz_tun: left promiscuous mode [ 139.396402][ T7761] bridge0: port 3(syz_tun) entered disabled state [ 139.454408][ T7761] team0: Port device dummy0 removed [ 139.460880][ T7761] bridge_slave_0: left allmulticast mode [ 139.466605][ T7761] bridge_slave_0: left promiscuous mode [ 139.472509][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.481572][ T7761] bridge_slave_1: left allmulticast mode [ 139.487407][ T7761] bridge_slave_1: left promiscuous mode [ 139.493130][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.517480][ T7761] bond0: (slave bond_slave_0): Releasing backup interface [ 139.526923][ T7761] bond0: (slave bond_slave_1): Releasing backup interface [ 139.537425][ T7761] team0: Port device C removed [ 139.543878][ T7761] team0: Port device team_slave_1 removed [ 139.559963][ T7757] lo speed is unknown, defaulting to 1000 [ 139.577182][ T7757] lo speed is unknown, defaulting to 1000 [ 139.584201][ T7757] lo speed is unknown, defaulting to 1000 [ 139.624882][ T7787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.663225][ T7787] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 139.843911][ T7806] can0: slcan on ttyS3. [ 140.089698][ T7817] siw: device registration error -23 [ 140.110079][ T7806] can0 (unregistered): slcan off ttyS3. [ 140.858288][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 141.206355][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.932'. [ 141.216788][ T7842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7842 comm=syz.2.932 [ 141.228846][ T7844] $Hÿ: renamed from bond0 [ 141.245837][ T7844] $Hÿ: entered promiscuous mode [ 141.251106][ T7844] bond_slave_0: entered promiscuous mode [ 141.256895][ T7844] bond_slave_1: entered promiscuous mode [ 141.257218][ T7842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7842 comm=syz.2.932 [ 141.295081][ T7844] dummy0: entered promiscuous mode [ 141.367025][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.375696][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.587827][ T7862] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 141.595613][ T7862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.938'. [ 141.605735][ T7862] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 141.617578][ T7836] Set syz1 is full, maxelem 65536 reached [ 141.636392][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 141.693537][ T7870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=7870 comm=syz.4.939 [ 141.726040][ T943] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 141.769792][ T7859] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 141.777637][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 141.793777][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 141.802888][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 141.944330][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 141.988387][ T7908] can0: slcan on ttyS3. [ 142.011004][ T7906] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 142.030047][ T7908] can0 (unregistered): slcan off ttyS3. [ 142.030123][ T7906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7906 comm=syz.4.945 [ 142.180117][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 142.181088][ T7927] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 142.200296][ T7927] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 142.253885][ T7934] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 142.741952][ T29] kauditd_printk_skb: 1012 callbacks suppressed [ 142.741971][ T29] audit: type=1326 audit(2000002615.647:22684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.772618][ T29] audit: type=1326 audit(2000002615.647:22685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.796101][ T29] audit: type=1326 audit(2000002615.647:22686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.819669][ T29] audit: type=1326 audit(2000002615.677:22687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.843078][ T29] audit: type=1326 audit(2000002615.677:22688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.867106][ T29] audit: type=1326 audit(2000002615.677:22689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.890627][ T29] audit: type=1326 audit(2000002615.677:22690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.914266][ T29] audit: type=1326 audit(2000002615.677:22691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.937763][ T29] audit: type=1326 audit(2000002615.817:22692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 142.961186][ T29] audit: type=1326 audit(2000002615.817:22693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 143.021311][ T7969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.084344][ T7969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.154241][ T7969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.231310][ T7969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.278628][ T3555] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.292314][ T3552] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.303448][ T3552] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.315217][ T3552] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.425741][ T8000] serio: Serial port ptm0 [ 143.620681][ T8025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=8025 comm=syz.3.973 [ 143.682369][ T8032] bridge0: entered promiscuous mode [ 143.687747][ T8032] macvtap1: entered allmulticast mode [ 143.693194][ T8032] bridge0: entered allmulticast mode [ 143.700747][ T8032] bridge0: port 3(macvtap1) entered blocking state [ 143.707312][ T8032] bridge0: port 3(macvtap1) entered disabled state [ 143.730556][ T8032] bridge0: left allmulticast mode [ 143.735672][ T8032] bridge0: left promiscuous mode [ 143.856020][ T8048] syz_tun: left allmulticast mode [ 143.861233][ T8048] syz_tun: left promiscuous mode [ 143.866509][ T8048] bridge0: port 3(syz_tun) entered disabled state [ 143.898813][ T8048] $Hÿ: (slave dummy0): Releasing backup interface [ 143.907488][ T8048] dummy0: left promiscuous mode [ 143.919340][ T8048] bridge_slave_0: left promiscuous mode [ 143.925317][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.934244][ T8048] bridge_slave_1: left allmulticast mode [ 143.939962][ T8048] bridge_slave_1: left promiscuous mode [ 143.945697][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.954855][ T8048] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 143.962345][ T8048] bond_slave_0: left promiscuous mode [ 143.968848][ T8048] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 143.976928][ T8048] bond_slave_1: left promiscuous mode [ 144.000551][ T8048] team0: Port device C removed [ 144.006680][ T8048] team0: Port device team_slave_1 removed [ 144.019556][ T8038] lo speed is unknown, defaulting to 1000 [ 144.025901][ T8038] lo speed is unknown, defaulting to 1000 [ 144.061109][ T8038] lo speed is unknown, defaulting to 1000 [ 144.402003][ T8085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=8085 comm=syz.3.982 [ 144.436480][ T8074] __nla_validate_parse: 7 callbacks suppressed [ 144.436501][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 144.480825][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 144.573325][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 144.578823][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 144.629342][ T8098] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 144.652771][ T8098] team0: Port device dummy0 added [ 144.681900][ T8098] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 144.692028][ T8098] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.713635][ T8109] SELinux: Context ׸ýßX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 144.723446][ T8098] team0: Failed to send options change via netlink (err -105) [ 144.728482][ T8109] netlink: 256 bytes leftover after parsing attributes in process `syz.2.992'. [ 144.731453][ T8098] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.740182][ T8109] netlink: 72 bytes leftover after parsing attributes in process `syz.2.992'. [ 144.759695][ T8098] team0: Port device dummy0 removed [ 144.778814][ T8098] dummy0: entered promiscuous mode [ 144.787755][ T8098] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 144.926552][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 144.936017][ T8118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8118 comm=syz.1.995 [ 144.992122][ T8118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8118 comm=syz.1.995 [ 145.035147][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.049610][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.193339][ T8116] Set syz1 is full, maxelem 65536 reached [ 145.342100][ T8126] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 145.401043][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 145.816911][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 146.063110][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 146.229662][ T8152] lo speed is unknown, defaulting to 1000 [ 146.235856][ T8152] lo speed is unknown, defaulting to 1000 [ 146.242207][ T8152] lo speed is unknown, defaulting to 1000 [ 146.790932][ T8212] tipc: New replicast peer: 255.255.255.255 [ 146.797048][ T8212] tipc: Enabled bearer , priority 10 [ 147.609384][ T8235] vhci_hcd: invalid port number 96 [ 147.614643][ T8235] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 147.619926][ T8230] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 147.654923][ T8230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.675201][ T8230] bond1: (slave bridge3): making interface the new active one [ 147.684198][ T8230] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 147.702394][ T8230] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 147.720624][ T8273] usb usb4: usbfs: interface 0 claimed by hub while 'syz.2.1023' sets config #0 [ 147.822530][ T29] kauditd_printk_skb: 1397 callbacks suppressed [ 147.822546][ T29] audit: type=1326 audit(2000002620.728:24091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 147.905359][ T29] audit: type=1326 audit(2000002620.798:24092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 147.929057][ T29] audit: type=1326 audit(2000002620.798:24093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 147.953022][ T29] audit: type=1326 audit(2000002620.798:24094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 147.970257][ T8298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=8298 comm=syz.0.1026 [ 147.976572][ T29] audit: type=1326 audit(2000002620.798:24095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 148.013134][ T29] audit: type=1326 audit(2000002620.798:24096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 148.036688][ T29] audit: type=1326 audit(2000002620.798:24097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 148.060203][ T29] audit: type=1326 audit(2000002620.798:24098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 148.083698][ T29] audit: type=1326 audit(2000002620.798:24099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 148.107112][ T29] audit: type=1326 audit(2000002620.798:24100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137994eba9 code=0x7ffc0000 [ 148.267516][ T8318] loop7: detected capacity change from 0 to 16384 [ 148.346807][ T8328] pim6reg: entered allmulticast mode [ 148.379172][ T8318] pim6reg: left allmulticast mode [ 148.524097][ T8336] tipc: Enabling of bearer rejected, already enabled [ 148.539056][ T8318] loop7: detected capacity change from 16384 to 16383 [ 149.031539][ T8343] $Hÿ: renamed from bond0 (while UP) [ 149.156537][ T8343] $Hÿ: entered promiscuous mode [ 149.161669][ T8343] bond_slave_0: entered promiscuous mode [ 149.167462][ T8343] bond_slave_1: entered promiscuous mode [ 149.178372][ T8343] dummy0: entered promiscuous mode [ 149.667101][ T8364] pim6reg: entered allmulticast mode [ 149.712401][ T8363] __nla_validate_parse: 9 callbacks suppressed [ 149.712417][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 149.717826][ T8364] pim6reg: left allmulticast mode [ 149.771894][ T8377] tipc: Started in network mode [ 149.776811][ T8377] tipc: Node identity ac141413, cluster identity 4711 [ 149.783799][ T8377] tipc: New replicast peer: 10.1.1.2 [ 149.789256][ T8377] tipc: Enabled bearer , priority 10 [ 150.053651][ T8398] netlink: 40 bytes leftover after parsing attributes in process `'. [ 150.113813][ T8403] ================================================================== [ 150.122221][ T8403] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 150.128950][ T8403] [ 150.131302][ T8403] write to 0xffff88811a06e790 of 8 bytes by task 8400 on cpu 0: [ 150.139079][ T8403] __dentry_kill+0x142/0x4b0 [ 150.143703][ T8403] dput+0x5e/0xd0 [ 150.147364][ T8403] step_into+0x5b2/0x820 [ 150.151660][ T8403] link_path_walk+0x571/0x900 [ 150.156367][ T8403] path_openat+0x1de/0x2170 [ 150.160893][ T8403] do_filp_open+0x1f1/0x230 [ 150.165424][ T8403] io_openat2+0x272/0x390 [ 150.169795][ T8403] io_openat+0x1b/0x30 [ 150.173903][ T8403] __io_issue_sqe+0xfe/0x2e0 [ 150.178521][ T8403] io_issue_sqe+0x53/0x970 [ 150.182974][ T8403] io_wq_submit_work+0x3f7/0x5f0 [ 150.187937][ T8403] io_worker_handle_work+0x44e/0x9b0 [ 150.193249][ T8403] io_wq_worker+0x22e/0x870 [ 150.197788][ T8403] ret_from_fork+0x11f/0x1b0 [ 150.202404][ T8403] ret_from_fork_asm+0x1a/0x30 [ 150.207193][ T8403] [ 150.209529][ T8403] read to 0xffff88811a06e790 of 8 bytes by task 8403 on cpu 1: [ 150.217099][ T8403] fast_dput+0x5f/0x2c0 [ 150.221290][ T8403] dput+0x24/0xd0 [ 150.224956][ T8403] step_into+0x5b2/0x820 [ 150.229229][ T8403] link_path_walk+0x571/0x900 [ 150.233948][ T8403] path_openat+0x1de/0x2170 [ 150.238468][ T8403] do_filp_open+0x109/0x230 [ 150.242984][ T8403] io_openat2+0x272/0x390 [ 150.247343][ T8403] io_openat+0x1b/0x30 [ 150.251479][ T8403] __io_issue_sqe+0xfe/0x2e0 [ 150.256098][ T8403] io_issue_sqe+0x53/0x970 [ 150.260543][ T8403] io_wq_submit_work+0x3f7/0x5f0 [ 150.265517][ T8403] io_worker_handle_work+0x44e/0x9b0 [ 150.270834][ T8403] io_wq_worker+0x22e/0x870 [ 150.275450][ T8403] ret_from_fork+0x11f/0x1b0 [ 150.280061][ T8403] ret_from_fork_asm+0x1a/0x30 [ 150.284844][ T8403] [ 150.287176][ T8403] value changed: 0xffff888237b7ef58 -> 0x0000000000000000 [ 150.294385][ T8403] [ 150.296714][ T8403] Reported by Kernel Concurrency Sanitizer on: [ 150.302878][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: iou-wrk-8399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.314364][ T8403] Tainted: [W]=WARN [ 150.318178][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.328334][ T8403] ================================================================== [ 150.918626][ T1036] tipc: Node number set to 2886997011