last executing test programs: 3.303240401s ago: executing program 3 (id=2351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="0000040001000000", 0x8) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x10}, &(0x7f0000000380)=0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES64=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r5}, 0x18) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='syz') r6 = socket(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x42, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x735b7d31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$inet6_mreq(r3, 0x29, 0x1a, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000700)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x60, r10, 0x405, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240008df}, 0x44001) sendto$inet(r6, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) 2.911485217s ago: executing program 4 (id=2356): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001080)={0x0, 0x1ff, 0x1, [0x5, 0x3ff, 0x5, 0x401, 0x8000000000000000], [0x7, 0x8000, 0x8, 0x2, 0x2, 0x4, 0x6, 0x3ff, 0x6, 0xad70, 0x4, 0x8, 0x800, 0x4cf8, 0x0, 0x7, 0x65, 0x2, 0x9, 0x51, 0xb, 0x6, 0xca, 0x7fffffff, 0x3, 0x101, 0xa7, 0x6, 0xffb, 0x9, 0x8, 0x8, 0x7ff, 0x0, 0x7fffffff, 0x8, 0x7, 0x1000, 0x8, 0x8, 0x1, 0x1, 0x8, 0xe9, 0x4, 0x81, 0x1, 0x1, 0x4, 0x34, 0x1, 0x5, 0x0, 0x63, 0xfffffffffffffffa, 0x4, 0x2, 0x988, 0x9, 0x6, 0x7, 0xfffffffffffffffd, 0x8, 0x10, 0x56, 0x400, 0x7, 0x5, 0x8a50, 0x8000000000000000, 0x100000001, 0xffffffff, 0x5, 0x1, 0x4, 0x7d8, 0x800, 0xffffffffffffffb5, 0x2, 0x7, 0x7, 0x6, 0x0, 0x9, 0x5, 0x1, 0xb, 0xc65d, 0x4, 0x1, 0x6, 0x7ff, 0x2, 0x0, 0x8, 0x800, 0x3ff, 0x2, 0x7ff, 0xec27, 0x4, 0x2ff, 0x40, 0x8, 0x2, 0x1, 0x5, 0x2, 0x861, 0x101, 0x1, 0x10, 0x1, 0x200, 0x191e, 0x7, 0x101, 0x7, 0x4, 0x1337, 0x5]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000015c0)={r3, 0x101, 0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$pptp(0x18, 0x1, 0x2) getsockname(r10, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000000)={0x9, 0x1000, 0x6, 0x1a, 0x8, "a048762f983f307d70568e4ce6489fe876294d", 0x7fffffff, 0xfffffffd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 2.855057968s ago: executing program 0 (id=2358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) lseek(r1, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@minixdf}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) times(0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000580)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000008c0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r3 = semget$private(0x0, 0x6, 0x84) semtimedop(r3, &(0x7f0000000300)=[{0x2, 0x8, 0x1800}], 0x8, 0x0) semop(r3, &(0x7f00000000c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) setreuid(0x0, 0xee00) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000040), 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000440)=""/98, 0x0, 0x62, 0x1, 0x9}, 0x28) 2.492125913s ago: executing program 4 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f5, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEnP4xJRONh2WUXFh92L7uXQbN73jUUhdJAxZpSWyiMOmlDpolkQkpKqb31WvpH9CAevQmt/4CX3tpLL715KfRQD6UpSWaM+aHWGBOr3w/IPM7zPpn3TaI8b3DcvfX8QTbtGGmzKP6wik9EZE9kXPzi8blHfy0OyUFP5e+RT29/v7F4+1oimZyZV51NLPwTV9WxiVcPH0fcYVvDsjN+d/dj/MPOzzu/7n5duJ9xNONoLl9UU5fy74vmkm3pSsbJGqpztmU6lmZyjlWo5/P1fNrOr66W1cytjEZXC5bjqJkra9YqazGvxUJZA/fMTE4Nw9DRqOA4qfX5eTPRZfFyjyeDM1IoJMyAiETaMqn1gUwIAAAMVGv/7xftZf+/8cd2ceTm5pjb/2+FOvX//76rP1ZT/x8WkY79v3f9jv2/ebL+v70julxO1f/jfJgItZ3yNcJqspAwo+7Pbz17Z2OyFtH/AwAAAAAAAAAAAAAAAAAAAADwI9irVGKVSiXmHb2vYREJi4j3fYfSgIj8P4Apo4dO8frjAmjcuBccE7GflVKlVP3oDtgWEVssmZSYfKm9H1zV2LvzSKvG5bW95tavlVKBWiaRlkytfkpiQ9JaX6nMXk3OTGldc/2QRA/WxyUmP8lisEN9vK1+eK2UCslffx6oNyQmb5YlL7as1ObRqH8ypXrlerLl+pHaOAAAAAAALgJD93XcvxvGYfl6/f7+uvXzgUBjfz3ZcX8flN+Cg107AAAAAACXhVN+lDVt2yocEUTk+DHdB8EzemRvhd9b5f0tw9mt9IjAu3hTKuye7PnT4jvB03JI4Jduqiaqq9HTrsL72OiwMTI33b9XsGkav7x4+bl3l/hvM3zMSrsPAke/AYb69gsIAAAAQN80mn7vzPRgJwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCXUj3+TNug1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfFtwAAAP//Mm4C7g==") mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='ext4_load_inode\x00', r1, 0x0, 0x5}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1020, 0x5dd8, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040801}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010026bd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 2.450399474s ago: executing program 3 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mq_unlink(&(0x7f0000000340)='\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_clone(0x1000, &(0x7f0000000240)="5ead6c1ffc5876d93fe46c31a14264a3e846fbf65e79530f37", 0x19, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000004c0)="de14b0c8b8ec80bca6b863b5f41765ccbd303035ad82d105866dd4b1e71ee2f049c67311ece74f12b296a553cc7254ae583194faf612f11101f84d5f9f19cca5bcddf6706050ebfc30f7475f95611ec61619c3f4ed7aa4f333c23c0d33b12c3ba5b681e993bdf0cf678b117233e5857b1c05d0a781d342453078ced46254e9054a4ca11084aa380229587e32577a7e0dcf5970196aa1e08319fbc88e2a87c739760f7fd8f7c13d0f6d9c7d13cda09256de3e0702f402edf2612da49292fbc28949129ab2cc602ea231c2d7d494d36eacbf7c7a380430f331") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000355000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r4, 0x9edb8000) syz_socket_connect_nvme_tcp() syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202402, &(0x7f0000000700)={[{@dax_inode}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nogrpid}, {@init_itable}, {@usrjquota, 0x2e}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'jqfmt=vfsv0'}}, {@pcr={'pcr', 0x3d, 0x25}}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x1c}}, {@appraise_type}], 0x2c}, 0x0, 0x465, &(0x7f00000009c0)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0) listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) iopl(0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000003c0)) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) getpid() 1.955272822s ago: executing program 0 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020000080900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000bc0)={0x100000000, 0x4, 0x3, 0x6, 0x3, [0x5, 0x5, 0x6, 0x4]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x95}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x81) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x43) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xaf) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000003c0), &(0x7f00000004c0)) fchownat(r2, &(0x7f0000000040)='./file0\x00', r13, r14, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.837017683s ago: executing program 1 (id=2367): syz_emit_ethernet(0x102, &(0x7f0000000cc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0xc4, 0x6, 0x1, @empty, @local, {[@dstopts={0xc, 0x13, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xd, 0x6, [0xcb]}}, @generic={0xc, 0x7e, "c2081d97de99e395ccf5dfbb5e4ffbf31d23bc3323d59502083678d45533dece21e3798c0bdad7152860eb61da0ebafb08512b63f6b4361322d104551b7645e7942a8cd2204224e39e5196bf833f3e04212ded48fd32dd7c7a960a459e36dc921a2ffd56d318383d510ed16ac649b610eba1d537cf8498ab7ca11abd4708"}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x8}]}, @fragment={0x5e, 0x0, 0x5, 0x0, 0x0, 0x19, 0x65}], {{0x4e21, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x13}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101401, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000500)=0x2) r2 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) rt_sigsuspend(&(0x7f00000005c0)={[0x225c17d05]}, 0x4b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r10 = dup(r9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==") chmod(&(0x7f0000000340)='./file1\x00', 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.819267313s ago: executing program 3 (id=2368): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000d80)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r4}, 0x18) syz_open_dev$usbmon(&(0x7f00000000c0), 0xcfae, 0x84102) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x80) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1.624836246s ago: executing program 4 (id=2369): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="1000000004000000000000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000086586878a21dc4625626ddda6b163d926284770c5d0b68918f7fbdf5b6e401da1d64a59abd2c74159f223a618ffb7a55495272f6e07f4f8cf1dab1de8b3c4671f7b96fe24c94bdd988d6ee674c3f72294031bb7bed1220417f32b9705745a6c9a073c52ab4a1f6e9039fc2f0a980a4f50a74cb293e57d078a7eb35f8921c0f64"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) pwritev2(r2, &(0x7f0000003d80)=[{&(0x7f0000000b80)="885f", 0x2}], 0x1, 0x4, 0x0, 0x15) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x10}}]}, 0x2c}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xb, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRES8=r2, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00'}, 0x18) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000780)={0x0, 0xfffffffffffffcf8, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESOCT=r6, @ANYRES32=r10, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x48080) syz_io_uring_setup(0x19d6, &(0x7f00000000c0)={0x0, 0xa9ee, 0x1, 0x1, 0x2fd}, &(0x7f0000000880), &(0x7f0000000280)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000180)='sys_enter\x00', r11, 0x0, 0x800000000000}, 0x18) 1.623965546s ago: executing program 2 (id=2380): r0 = socket(0x2a, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) read(r2, 0x0, 0x0) r5 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') getdents64(r6, 0x0, 0xffffffff00000018) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r7 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r8, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 1.557291188s ago: executing program 0 (id=2370): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0xfffffeed) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff1d000000bfa200000000ecff06020000f8ffffffb703000008000000b70400000100000085000000820000008300000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='f2fs_shrink_extent_tree\x00', r7}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r8}, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.551839997s ago: executing program 1 (id=2371): r0 = socket(0x2a, 0x2, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d81234445e76f51bd4e9ffb5ff972162208e1d38b832354f8db85d11811b4f9a67ae0ad23c6f49fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) read(r1, 0x0, 0x0) r4 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(0xffffffffffffffff, 0x50) r5 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r6, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 1.411211399s ago: executing program 2 (id=2372): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 1.38312786s ago: executing program 1 (id=2373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0xffff37e7, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="1000000000006536009eb86a60c709d6b6cac4c2a01a50b07800b705000008000022f0cdddfcc01d16bb487550749a9ed6d31bb0ee310b47c89df970f511a3f4de21ae6f2cdc5b1cc7dc8b7b512942c56fc9ab47414ca3affd994818e3accfd2c67fca94156fa673f7cda52c5ba70c6f50f975cf77dd86300c2ee338d3600cc6853e1dbd5a5ddc1ef9444d36639fe470079f0870a729a339b13d2086ad568083cef9fcf05c90fd9b20920b732eb5289186f3f7f04b3bdde86957033c606af9c9fba73e3a40fddfac4f4cc382dc94d87844df2b2998e6e5a6d821e35b80de801df43d79559871acbb4fb343f988be969c56bd6224cc5f4e7cb2333e2b9ccebee21c8601dd891eb07c341038aca093b15ba234021f9cfe7a148fe95059"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x44842, 0x0) io_pgetevents(0x0, 0x6, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) 1.190236563s ago: executing program 0 (id=2374): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='&!--\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15bba0b98", 0x5}, {0x0}], 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000009a00000000000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000ffdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c001280a534cc2e62726964676500000e0002800500190085000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x4000000000000c1, 0xa00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x9) 1.147593004s ago: executing program 4 (id=2376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="0000040001000000", 0x8) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x10}, &(0x7f0000000380)=0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701", @ANYRES64=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r5}, 0x18) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='syz') r6 = socket(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x42, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x735b7d31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$inet6_mreq(r3, 0x29, 0x1a, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000700)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x60, r10, 0x405, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240008df}, 0x44001) sendto$inet(r6, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) 1.107697244s ago: executing program 3 (id=2377): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000000)={@none, 0x9, 0xd, 0xfff4, 0xb6, 0x5, "241407d72a4848fd77896dc23728eb65d740162e548a35ab14099f48c0690e8e3531722295a0813f4eef885cfd3dbe73f9e9901445adf4534a6204d701b09b6b1b1f25c79d2094b46dfb2fca5fe85d91dbeb6510f06e9ebfe3873d6a53067ad2dddaede9dff83c52f344f2e2ff05b2a95c77f80ac45d36ca95ff83d57ecd8dd9"}) r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) read$char_usb(r5, &(0x7f0000000740)=""/253, 0xfd) r6 = mq_open(&(0x7f0000000000)='\x10', 0x1, 0x69, &(0x7f0000000080)={0x828, 0x8, 0x0, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x2}, 0x8002, 0x7fffffffffffffff, 0x1003, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mkdir(0x0, 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=0x0, @ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085080000c30000", @ANYRESDEC=r1, @ANYRESHEX=r6], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x31b3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r9 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu~=-||!') getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000840)={@local, 0x0}, 0x0) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="5087ac13085390c263cacc3af98ddc506086212ee3daf53ad627facea353570f92d366", 0x23}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000bc0)="f9b845043ba3dd33c9a2ab9c152ac38eeee5fa2133ff375e642aac4ee6e57ea473ab6facbcb511c95715ab79d5759f2e1454ecfc43fa725a084addc724470ae3a0b0c9ded8f6b6746491cc6a33fa81d4ce3aa6ba52091c4f15f38d48343717797aa9045b96040f1fff21e7347a2e99b9a1c50299ae19ec1559e18f0ce963c037c60c9660cf29ed57c830e1ca354af381a356e5c8cdfd554acf157a09ef6d154cf1979f49e85aa5b9c96f6ac18410841b6b0e747d39962b14177e475424cbc43fad31cf2cab451fcf357c87d3a2438363ff26714c34b5aadd9b0221b59ed7681f01bd2121babd15abee52f9ac62fd51870f46133eb46f79b3c360fc455a5f4a18bce5a63a87aa6d5d5aa0432aa9aecdefe55dae47b2b993e2d46595681e00f60212dc6d34121c39e0d7d5c8594395bcb601215cf0870f4af62e30ede1da267b061abd150c908c34ad686051359abe7a011e233f22ada05df9991bc1ec57e8d3308367ad47e4836689d76dee5a940fc30b57170efb51f4fcdc9140d5e47628dd0a299296e8c3f122d5f23fe01490b9e296b7f0847c23236a75bfa711761fad541ffb8f998ae5e310651c0794dc2b419296072c75e0af5eddfec42ddea6b5f0b950aadfba1aae8b7c1943e66811c80d85dd27e1c2a759165054e6f1b46f462100bce696758bf8defa80c932b20656271e7b17977ee950d1be23583fe60a8464a1b4b68aa0e27803527970e58f1d8f3072d2c5d0edfacb4a0e382a949ad106f90f53101341883ded8fbadcb209e8c02d92c9695ee051586f8bb06d267e34b403d7e574e6a3f9a3ac673655b0a22ed34712eacd318f6ea772c6ac5871e5be2b89e774b963277bc58ad4279b44b7d7161b76c2157e89e1461ce1cab384bcd44012b336b6c7c4cab062bd54f13db9aa591657f15f158ed9e3364b2b20d007055c9b9d824781cf5d73d997ce078b114470a181235aa24aec9301322659a950c91343ba0d3f0c870be4bf7edc20ac6158d54faa5b16ad7869349aa1d6fad2f2527588444be9be4191d0476d1985c8bceab93aa2a413cb5f42884d28ca95443ca2746b730f13b7e06644f58b8892c2006b1b09800dc22a07d978a3176af8b73ab3e9536f200494fc993fea1943b5b2673d148a5c0e7a825f763ee8cb2abdfe67a7c0284d94878b809b0e6e1a7a0366d2e032058be62c872457681c602b9652f6fd8d1e60cecf736c171814d0204c9c9b8f6df879ccd168abda34596da88c30add6d80c1e899e82b29bfd80fdb99f7bde006afcc9b55713b84cdafb58ec84de1e94d0d51d71af75221e6617e3b38b7105a1c4d69cbba586a37cfed0d231e9c978692d44d1048b07ea2f70fa8a0a944704e4d8d74e12254e07d800e19b101df590d881b259d3edad953b5b57709415dbe7830b581ffc3c6e3b65b53abd2cc1963edb970e599d33ad56442598b344d2292067e306027b3c88978fc521f44fb57069b65cd55a2aec7d44b665f4bd5b5060c902c16e309702c63b55af8f3f00346921ae5e154743a5ef0d57543968945d7004bdcedfa4642b0575d06dcd9272baea715745d3ba4171cd6a9d5bbb95d011256f852d00f0259ebd6e3762264dfab5e76da2897c4c89e013f1e9c7c4144a5a95196d036bd687e87fd40b0a88316adf1eb0920441e23d9bfb0c5bf84131ae9c270cf2dbe3bfeba33fe3ca912cc33c257130312bab4b561fcd026807d2f86e76a1a18e84a307e78214e9314b52c43d8f501c44f78b0e05d9e918b83bbe358c4dd7a0eaefd8a4b9e97b877872a68291641ce0441ea8db667d0bcbae3e4c09c4b8d2dbaf7d1832b4407e9ae94558bf0cee22f234ab9e144287c3947c4e43fe15fc17c93e05063070d764e6785107cbb82e42b23e8b06ba1a5644580c9c1da9c4c8f053dbe800b95a0f043296a57c03fed99912782942efb71c0c6cb9c6f8562535ba558d60c5e07c6c79a6e24173258d884bd958d99d21f4b99a56ad227b6a02ad1d25822ce68bc70b408930d293efd148c13dda9650005d13681be27a240334d1b2ffe2988f280fc5c0527577596cc70093249a103bb18f5f0f57fcde614d10d9c1009d2aa4781dbecaa837c1757a849f2378799ba32ca56a35b0e6b1480b64b96e518741c04066199235f2b394aaba6a6c6b70c00c4a532e0b9aed90555a0e026abea41bbb6480ed2088c97f117df38d303c08f34f1dbdbb2bad0ae4d0625354f207ca0bfab039908e9c945de9541b0a8cf04bf15fd91d1d6ca041cfc29be09315c6be97aa02f78991a90d475a4a6a5b07ccebe9429eed086548582e59c1d527fa01f57f2bbe2b40b49c31daba480b959f71b162baefccf9b02f0cd7fece75ee514d9bc7093424baf4f0063d617b9e6bcecb8398732a30b61898dd693a284c414d7f0cb93bb52b63883988b00c97bd1f430944b552d199dc2f5ead300d2a7eed7018519a0060504ccd46b9232c5c02f846638919772e5930b0b370fbd5c0d51ab9917be5712b14253e40ba6fe3b3ea82690055c924fedc6126ed2e34e44347e1775e47537ff7ed9212d52b195492807f339bea4f6611834eef89909c777ff4952fbfc1acfb37a0d2a45cf85da80df2a47136fe5619ff8a22a946d8529376a2f3aa77df249518c399a5e513e8525300fd735ae46772117f03543fe85a501e033c36b64a031bf6df6ba24f8eb0ed66aff7192eac93946e45efd430ea75d8cf44235fde76b8932bc731e0298114a2b6fcb8a190d8a181248b6812018d24e626448fbfa9b38451cd3a35e8ae3d596c3801e554c6a94fa8f3d138d042ff800631cc7874d06a0a95ce3d1283119f20559bb2c9c7c9f1eebbf41aeba37a68348d2e091f1dc98f6fa43e3999b9e08503eaa70896579328cce5cf3e7d4021bade7218859c814b99e5f133c39db39b6587a1ac44da05116e83050f57fce90eb48c66646b4180d0c68fc883d04df6264b0516fc1f170da85a64d8a0a1d5828b0e41680dc660f5f878bf967f191c589cfa6cfd4de00e5f1b37ec6ee847ce349275684360566abc18759fcbf3fe9f8b1ebffad743ac34793faa9921d9b10a19ad345e1341baa1ffe43aa643cdfed48c688ed4caf4dad113aacfd692b14934d222f944af834a127e5f2882a378ad1c122048e76e50814b5caa93f5233fd5a07d40dd961a4260fbe64945d50dd33385d4011cb9c912c76ce9263324f962c8ee4290e99eeecb8904166290fb23dfaf0fdba9b7cab02c9ad7eba161029ad5f552319649c02b37e95616634d63811132c7b6c8d1c6763037c8a6c601ebb78b0ff3fb61cc73b11f9ab4f256ac6ee3565b2442a231e1e8695cb2a50ae93dbd21b38101672221c5eb16d8a9888ecc8fedc6e0163cfaf1f5539030614bc29cbe73e13f0a86d0deaf442e586ca66fb7e45c7b59a45facc9fbc4e08906a668dbb14e41ee281bbb367accd9dbf43aeba5d0c2ab5666120adc6b05e52cd8fd3a53a6cef0a71b64bb214a6ce78549f2ce64ee554aee19e50b4b97af81bd6c62c69a93227b025bfb7a9905728db802a7aeafeb03aa78ef0cf1cbfdca397a2a93ddd94352c207b6bf77f5880e35264a60dfc650c194a917c4a48b55eb832a95ee031220ae48c21068cd9ef0f5bb5a819e25b2d0d40add016ff0b6f92c1d3d1cbfb3f55653490309b549d8f842a8ac9910d097baf59e92049b81220e64e8617de4456863fe41ff9eabd7be0ff2897a7b347a8e7bf7bb6d61876a0dc8ce826e6cd154739bce6a0602d01b6d097af0127cfa31b3cf811194db700e728bf31e3369da2975c63b58656759ec132e6606615acc35305e819b38157421d23299e3e6844e9fc44672972ee1755373ea3265da2550bdd1d3bfeb484315d1b86e2b7a46a081df3d4d35247e818e4e4facee1a3dd5e102918d92c207211af552ddb2a706f7ac40d0889d0dc425246a040cb76c385e643921a741274e70459341e963df48d11936717799f566cb1108530f9ffd0189bd71a78aceca5be259503cee72411805149449f2a674881edf060af85a2803866294c0c98ad91d04266e12eabfae92d2cc35cafa83e3e123ee3970ee9768ffc30ee06948130d1ca8567588eaaac9741bdc3714647049ec03ab489544b12498d2b935d684ce9620ced497919d414396d87de5e83fde740cf6a7e3bf9225a8118a16490dcb225f9b07993ad57c8b19ab6b440af35212029d9f3795e7be48728d6f121a2fb10c53ae6adc6649c77a63c725e7ed7c44b5fef5cf14f481fd9c83e6ed1039c399c88fc9de2d5849138d7820e33dbdb3dfcf80eb23dd516f1eb68e9b41e352119234f474d63001d60af1e4443698b8dfef98e843b32c66deadd1e8293ba07e25c6c2870e4cd75ca003905d6964505705c906d126565cf256af7b2a43bfb3c37f4c9c1e649410ab03d432d45397643cd7138c928fdc7c1bf7201fe6f9f2b192858b8e2cfba5c7798f5c71c2feeec720001790d51d8576f4667da6044b12418f08e86e4e4b5cf46242c262ef405785af8c29ced19fd517ac8fd445eddca7a915a0dddd7179a878caf1237b8626f6cf7ead0b0c21fe47df584ac7050594e0e5d285ea0d7f64250a455db540b7de5fc386b6fd1c13557e864970c4b78ddfc1569bbcfd554ad966dd867f751cd0edc1168500fef22df723cb4187b019eed2ed196e1c357b08955f45af8308029c12e9e0a799842a62d6e92aa3eb0970cc0995f4698c9fdae12c5884e5d509281788aa1addcb5bea41089d9a26098f1dcd334b67e1e5978c0ef2414bafcf08568222f000834c1d59614488fe14b8bb416b32b7d085e3183adb02d470be055a0068b71329230a1e80f4f80dae1a892e59734bbb606eabcee2ecb877d6b3e2d8bebf0960a68a81ae5cf66d2b63ff5a9ceb6676a3eb45781602ecd6c6442a964f83d7c0a9dc740f23c1be9467e1e8b8898c7a4a34d639c6c01929ca54bc6842f4917a207118fa36f634fa830f6da08a0fdad98998959a0b85943de12a1618e7b1074e665da73fda9b72624081499d18a41d2e5a030a2450225e8e35905ea0bd12cac45a17f70cc02e3818a7cdf42c6dcc7b8f0b25040f59a6d7d8cdb250736a666c37f2f18370ae419dd0b0404d05e2718d0e0598e3dd7793eab31f36f5e43997083db171081ac1b4187832cf92bacd8697f1c3054211168011ce377589d51faaa085a2ca70b0757b017d8e2f3b4e6cd74329a458914ee9cca68f41cf6a4e1d198bc2d89c136538b29f094215692c625e03027ebd2326d61ecdc08a7dd666d48d703efddadfc35804a892c852e23c4bb6357cca713c61ff9d50bd645ce170442a4b8a681154d751579637af414923e6e9f9dc8c610020e2a5457f567772af63ecff1b310e4721c4d9563413f9d6a6ed2d9fe4f50f72471db70dec0ab84b3bc1932b43242a82b7305c445cd514e8a868c3175ea540e97df7ceae9c3db21252e2ae8359efcfabbb0d75b92d5753fcc03722f34cf9498c3f6e048b77368ec7cc7afe427bcf1b1ee3dc69c1e1d6ea777d955286da2bcbdf24503cbcaed7777f16c3cf22aadba4addc9540e2e7b8611974de8f76aa1b9734fd4f4f5c2dd61214105894efccd4be355ca9d40eaf2cdbf573dd3be7bf0e3f7df8fdc4c0924a8dc43935b8e126f27e417043307f124889928f2215f8a2f6cd5fc2db93dfab673911e7974b1eed90f3944680809248ca12766b9f9e9d9746c97fffa633434eae85f42cfba5a8033c33ec81ce3f9cb3aaba76cc4c4e5275be1d53bf38c7c52dfa57246df570045f8dd284816bde76a1", 0x1000}, {&(0x7f0000000100)="04c54e0e7578fb63487749860fb0927d2b9df93e38cfbd3a20742bc831acab529c62bc870df2846ab640a2b29a576d6ce3723f715aa9a08866dae166cbf8802ce071982d9d7fda406e063af8f672348b358f5f17e0f222d8a0528855647bcca4ece33e5f2ecfdfb406826d18af9a08d583db4bc7699b9e07e23eed200d6e2318f782e5a3f465b89cadf093882de522c02e0ae578993016593ead153cf262dd4891", 0xa1}, {&(0x7f00000001c0)="a42c359057f055ffb687d25fb239c29b9a6d677ed53edd116ddaa2877dbfda75c24521417e13260fd317346094842b617533592eb8b1453c856317b1568affa727c0605ac3a09cff273081204a59bc8d4f4f9de0acc3e1598e80dc946f232bedcfd0c933841ebb9cdbfe365de52e11d87787ccd2b5a00d803550fab5631496d5cb9ad0dd1dc6b9aa1fa91e5bb58961d8b81b39a62e9097d6c5942e1359111123676a1be8a51ee7ce71", 0xa9}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000280)="7ab3b2ffa50931ce576d74e8bdc32d2f2bc9e328a997b68b7686cceb670b7052129a9ae2ccb208e8da9d650e205a2919418db092c9fd5c178e1cbf9f81d29bc865f87eb29359e9f91501af866983282cb29e7c3207f5", 0x56}, {&(0x7f00000003c0)="b9c6da81aecf8e5b4830f4bc1132e27c2cc85e0fd76a64a7a02b3e9ceb4f10e7090ab97365018e92dba5b20360b5b14c861b98ca1d72a021b866b301405ec29a0f33371d6fab1f1d6fb406247576dae39c11c5d98e444b516cbbc952c57a87cae245dd590d21dae4ada6e5db2330fed1cb8b551d55363052733f2dbb60db1cea9770a6c5e01456c0457986ab5f871562bb0e9daecaed25affe39b96a3270d5efcc85393360174dcafd56bd67309bc9ef412f84f90b8be189ff4caaee8e859c9287bb5a0462cd4d98255e9867f9fe9f1b5d07867df0eef4ff1f98a30e8f59841b4ca944ebb9b91e722c0821dc", 0xec}, {&(0x7f0000000500)="b71eeb3addbd0f7dd3302adb5731eb338d298b9baf861c57c4599d7d37fe55701ea8f29f34f2bd27a085b20e578ae26396465e497fa96e5d5ea7d6ece06215432c342c687b6efa726a0b225c1dd54b983a2dc5e88a25aecf15354f1a8dfd7de3fb23dff8c6a5017f2ce074da3c8c68999ae422b491e25d2ccc53a7", 0x7b}, {0x0}], 0x8, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="00000000300000000000000029000000040049b9f803000000000000c910fc005460efcd00000000000000000001000000000000"], 0x160}}], 0x2, 0x24004001) 640.723331ms ago: executing program 0 (id=2378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x0, 0x4e23, 0x2, 0xa, 0x40, 0x80, 0x5c, r4}, {0x0, 0x5, 0x100000001, 0x1, 0x1, 0x2, 0x3, 0x1f06}, {0x4, 0x4, 0x3, 0x1}, 0x93, 0x6e6bb0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d6, 0x33}, 0x9b5002b27c8518c6, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x3504, 0x1, 0x1, 0x0, 0x3, 0x4, 0xfff}}, 0xe8) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) getpid() r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x1168, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x1154, 0x1, [@m_mirred={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x7, 0x6}, 0x3}}]}, {0x29, 0xa, "474f75b4542b5d16dd8f81a350eeca03fd028dc7562c620fddf0cbe486b014020dbaea7105"}, {0xc}, {0xc}}}, @m_csum={0x10d8, 0xb, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x5a, 0x9dd}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x5, 0x401, 0x1c00}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x7, 0x1, 0x3, 0x8000}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x2, 0x1, 0x7, 0x4}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x0, 0xff, 0x85}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x5, 0x2, 0x2, 0x76ac}, 0x71}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1168}}, 0x2000a804) 605.785172ms ago: executing program 3 (id=2379): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001080)={0x0, 0x1ff, 0x1, [0x5, 0x3ff, 0x5, 0x401, 0x8000000000000000], [0x7, 0x8000, 0x8, 0x2, 0x2, 0x4, 0x6, 0x3ff, 0x6, 0xad70, 0x4, 0x8, 0x800, 0x4cf8, 0x0, 0x7, 0x65, 0x2, 0x9, 0x51, 0xb, 0x6, 0xca, 0x7fffffff, 0x3, 0x101, 0xa7, 0x6, 0xffb, 0x9, 0x8, 0x8, 0x7ff, 0x0, 0x7fffffff, 0x8, 0x7, 0x1000, 0x8, 0x8, 0x1, 0x1, 0x8, 0xe9, 0x4, 0x81, 0x1, 0x1, 0x4, 0x34, 0x1, 0x5, 0x0, 0x63, 0xfffffffffffffffa, 0x4, 0x2, 0x988, 0x9, 0x6, 0x7, 0xfffffffffffffffd, 0x8, 0x10, 0x56, 0x400, 0x7, 0x5, 0x8a50, 0x8000000000000000, 0x100000001, 0xffffffff, 0x5, 0x1, 0x4, 0x7d8, 0x800, 0xffffffffffffffb5, 0x2, 0x7, 0x7, 0x6, 0x0, 0x9, 0x5, 0x1, 0xb, 0xc65d, 0x4, 0x1, 0x6, 0x7ff, 0x2, 0x0, 0x8, 0x800, 0x3ff, 0x2, 0x7ff, 0xec27, 0x4, 0x2ff, 0x40, 0x8, 0x2, 0x1, 0x5, 0x2, 0x861, 0x101, 0x1, 0x10, 0x1, 0x200, 0x191e, 0x7, 0x101, 0x7, 0x4, 0x1337, 0x5]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000015c0)={r3, 0x101, 0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$pptp(0x18, 0x1, 0x2) getsockname(r10, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000000)={0x9, 0x1000, 0x6, 0x1a, 0x8, "a048762f983f307d70568e4ce6489fe876294d", 0x7fffffff, 0xfffffffd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 507.102003ms ago: executing program 2 (id=2381): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) unshare(0x2040600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') pipe(0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00fc4c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='map_files\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x800) utimensat(r4, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01020000000000000000010000000900030073797a3200000000797a3100000000140004800800014000000003080002400ce055622c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xdc}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e0001000000000002000000020000000100000e0000000008000e"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2810) 506.405493ms ago: executing program 1 (id=2391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00'}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB="02000000050000"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 336.421625ms ago: executing program 0 (id=2382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x48d5) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10) io_setup(0x3, &(0x7f0000000340)) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 308.127056ms ago: executing program 1 (id=2383): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00), 0x3, 0x5f5, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff37000000000008000000b7030000000000f0850000002d000000953e19611ee0240b57d3b630261b5c4fcf2f07fcb6ff00000079570f513e280513263132fed36a700d1affeaa741bc4bd3056f56817ba7084218e9ee0c2e30b94b1f6e36c73714257587dbe2ba4b00f9db818f0d187655d7da217fb01087f12149a3eb1f3c798caecf62a9066d0ef219e79ad9c82a2c24a9f0791706adeb60d8f4c177746512e24074e88d8c309ab83c837741a833a4008ced45702de893f71e37e42a108b07"], &(0x7f00000006c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sys_enter\x00'}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) getpeername(r2, 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xcc38, 0x40ffffffff}, 0x0, 0x5, 0x10000, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)}], 0x1}, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) flock(0xffffffffffffffff, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kvm_set_irq\x00', r6}, 0x16) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x1) flock(r7, 0x2) dup3(r7, 0xffffffffffffffff, 0x0) unshare(0x24020400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x6, 0x80, 0x6f9b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8000, 0x80, 0x0, 0x7}}) 297.571986ms ago: executing program 2 (id=2384): r0 = socket(0x2a, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) read(r2, 0x0, 0x0) r5 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') getdents64(r6, 0x0, 0xffffffff00000018) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r7 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r8, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 248.438137ms ago: executing program 4 (id=2385): r0 = socket(0x2a, 0x2, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d81234445e76f51bd4e9ffb5ff972162208e1d38b832354f8db85d11811b4f9a67ae0ad23c6f49fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) read(r1, 0x0, 0x0) r4 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(0xffffffffffffffff, 0x50) r5 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r6, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 222.107808ms ago: executing program 3 (id=2386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x56) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x2312, &(0x7f0000000300)={0x0, 0x763, 0x800, 0x0, 0x11cb}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8842, 0x6e) pwrite64(r6, 0x0, 0x0, 0x9000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8d0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) 138.254439ms ago: executing program 4 (id=2387): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) open(0x0, 0x40c5, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_open_procfs(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @fwd={0x6}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/101, 0x6f, 0x65, 0x1, 0x2}, 0x28) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40400b0) close(r0) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000f"], 0x24}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x11, 0xb, 0x401, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x4, 0xb8}, @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0xc5, 0x0, 0x1, [@nested={0x4, 0xe8}]}]}, 0x28}}, 0x40d0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) 135.886819ms ago: executing program 2 (id=2398): r0 = socket(0x2a, 0x2, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d81234445e76f51bd4e9ffb5ff972162208e1d38b832354f8db85d11811b4f9a67ae0ad23c6f49fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) read(r1, 0x0, 0x0) r4 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(0xffffffffffffffff, 0x50) r5 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r6, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 841.06µs ago: executing program 2 (id=2388): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_create1(0x80000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0xfffff000}, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r5, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x24000094}, 0x40090) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f000000b4c0)={&(0x7f000000b3c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f000000b480)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000031401002abd7000fddbdf250900020073797a32000000000800410072786500140033006272696467655f736c6176655f3100000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f3100"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x20044090) 0s ago: executing program 1 (id=2400): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d300000000000000800020064010101140003007866726d300000000000d656254f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xcb4}, 0x18) ioctl$TCSETS(r2, 0x5402, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000480)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0x2000000000}, 0x18) io_uring_setup(0x4663, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b98, 0x1000, 0x0, 0x3cd}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_complete(r8) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.0.1802'. [ 242.409507][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.459685][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 242.468664][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 242.493193][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 242.518663][T11888] loop3: detected capacity change from 0 to 512 [ 242.531292][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 242.542772][T11888] EXT4-fs: Ignoring removed oldalloc option [ 242.573043][T11888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 242.608728][T11888] EXT4-fs (loop3): 1 truncate cleaned up [ 242.622986][T11888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.716840][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.739141][T11895] netlink: 'syz.0.1808': attribute type 3 has an invalid length. [ 242.931739][T11899] netem: incorrect gi model size [ 242.937429][T11899] netem: change failed [ 242.945791][T11901] loop3: detected capacity change from 0 to 512 [ 242.979071][T11901] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1807: Failed to acquire dquot type 1 [ 242.988795][T11900] lo speed is unknown, defaulting to 1000 [ 242.998011][T11902] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 243.027431][T11901] EXT4-fs (loop3): 1 truncate cleaned up [ 243.047914][T11901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.061567][T11900] lo speed is unknown, defaulting to 1000 [ 243.096306][T11901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.357213][T11923] ip6tnl1: entered promiscuous mode [ 243.955206][T11937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.970375][T11937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.977697][T11937] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 243.989995][T11937] bond2: (slave vcan1): Error -95 calling set_mac_address [ 244.331571][T11951] tmpfs: Bad value for 'mpol' [ 244.351912][T11951] loop3: detected capacity change from 0 to 512 [ 244.408568][T11951] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 244.423985][T11951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 244.843643][T11951] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1821: corrupted in-inode xattr: e_value size too large [ 244.916214][T11951] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1821: couldn't read orphan inode 15 (err -117) [ 244.944133][T11951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.023734][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.073709][ T29] kauditd_printk_skb: 1295 callbacks suppressed [ 245.073740][ T29] audit: type=1326 audit(245.042:24123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.104071][ T29] audit: type=1326 audit(245.042:24124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.216779][ T29] audit: type=1326 audit(245.122:24125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.240093][ T29] audit: type=1326 audit(245.122:24126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.264043][ T29] audit: type=1326 audit(245.122:24127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.288008][ T29] audit: type=1326 audit(245.172:24128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.311113][ T29] audit: type=1326 audit(245.172:24129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.334948][ T29] audit: type=1326 audit(245.172:24130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.358824][ T29] audit: type=1326 audit(245.172:24131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dd00cd290 code=0x7ffc0000 [ 245.382212][ T29] audit: type=1326 audit(245.172:24132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 245.426205][T11972] loop1: detected capacity change from 0 to 512 [ 245.433907][T11972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.447845][T11972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.463326][T11972] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1826: corrupted xattr block 19: overlapping e_value [ 245.478564][T11972] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 245.487886][T11972] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1826: corrupted xattr block 19: overlapping e_value [ 245.502259][T11972] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 245.512198][T11972] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1826: corrupted xattr block 19: overlapping e_value [ 245.526587][T11976] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1826: corrupted xattr block 19: overlapping e_value [ 245.541766][T11976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 245.550997][T11976] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1826: corrupted xattr block 19: overlapping e_value [ 245.565120][T11976] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1826: corrupted xattr block 19: overlapping e_value [ 245.580518][T11976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 245.602294][T11978] Cannot find set identified by id 65534 to match [ 245.621279][T11978] netlink: 'syz.4.1827': attribute type 6 has an invalid length. [ 245.637125][T11980] __nla_validate_parse: 9 callbacks suppressed [ 245.637139][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 245.654026][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 245.767080][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.794557][T11985] SELinux: security_context_str_to_sid () failed with errno=-22 [ 245.875778][T11987] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 245.885855][T11984] lo speed is unknown, defaulting to 1000 [ 246.064852][T11984] lo speed is unknown, defaulting to 1000 [ 246.414959][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'. [ 246.456108][T11996] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 246.482465][T11994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.495361][T11998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.515794][T11998] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 246.581185][T11998] bond3: (slave vcan1): Error -95 calling set_mac_address [ 246.862416][T12020] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 246.912110][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 247.047853][T12027] lo speed is unknown, defaulting to 1000 [ 247.094204][T12035] Cannot find set identified by id 65534 to match [ 247.106928][T12038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1845'. [ 247.138942][T12035] loop3: detected capacity change from 0 to 128 [ 247.160942][T12035] netlink: 'syz.3.1847': attribute type 6 has an invalid length. [ 247.196857][T12027] lo speed is unknown, defaulting to 1000 [ 247.728852][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 247.748351][T12053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.769967][T12053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.778767][T12053] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 247.794102][T12056] atomic_op ffff888146b51d28 conn xmit_atomic 0000000000000000 [ 247.796972][T12053] bond3: (slave vcan1): Error -95 calling set_mac_address [ 247.811763][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1858'. [ 247.830702][T12056] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 248.076923][T12071] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 248.121734][T12074] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 248.144257][T12076] program syz.3.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.310069][T12090] ip6tnl1: entered promiscuous mode [ 248.594394][T12127] SET target dimension over the limit! [ 249.056145][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1873'. [ 249.180433][T12166] loop1: detected capacity change from 0 to 1024 [ 249.198530][T12166] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 249.209532][T12166] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 249.255662][T12169] loop3: detected capacity change from 0 to 512 [ 249.587643][T12166] JBD2: no valid journal superblock found [ 249.593490][T12166] EXT4-fs (loop1): Could not load journal inode [ 249.729909][T12173] Cannot find add_set index 0 as target [ 249.752510][T12173] SELinux: security_context_str_to_sid () failed with errno=-22 [ 250.052726][T12176] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 250.062194][T12175] lo speed is unknown, defaulting to 1000 [ 250.161678][T12175] lo speed is unknown, defaulting to 1000 [ 250.238482][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 250.238498][ T29] audit: type=1326 audit(250.212:24418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 250.333645][T12183] Cannot find set identified by id 65534 to match [ 250.359142][ T29] audit: type=1326 audit(250.212:24419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb426211e5 code=0x7ffc0000 [ 250.382382][ T29] audit: type=1326 audit(250.252:24420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 250.408888][T12183] loop1: detected capacity change from 0 to 128 [ 250.444704][T12183] netlink: 'syz.1.1867': attribute type 6 has an invalid length. [ 250.519575][ T29] audit: type=1326 audit(250.382:24421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 250.598414][ T29] audit: type=1400 audit(250.562:24422): avc: denied { execute } for pid=12186 comm="syz.2.1870" path="/372/bus" dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 250.650941][ T29] audit: type=1326 audit(250.622:24423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 250.675103][ T29] audit: type=1326 audit(250.622:24424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 250.695576][T12187] syzkaller1: entered promiscuous mode [ 250.703251][ T29] audit: type=1326 audit(250.672:24425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 250.703679][T12187] syzkaller1: entered allmulticast mode [ 250.727511][ T29] audit: type=1326 audit(250.672:24426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 250.757269][ T29] audit: type=1326 audit(250.672:24427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 250.840085][T12198] loop3: detected capacity change from 0 to 512 [ 250.860299][T12198] EXT4-fs (loop3): orphan cleanup on readonly fs [ 250.878242][T12198] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1872: Failed to acquire dquot type 1 [ 250.894951][T12198] EXT4-fs (loop3): 1 truncate cleaned up [ 250.901714][T12198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.082065][T12207] SELinux: failed to load policy [ 251.343973][T12242] loop1: detected capacity change from 0 to 512 [ 251.360287][T12242] EXT4-fs (loop1): orphan cleanup on readonly fs [ 251.373818][T12242] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 251.389857][T12242] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm kfree: Failed to acquire dquot type 1 [ 251.406777][T12242] EXT4-fs (loop1): 1 truncate cleaned up [ 251.416541][T12242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.438860][T12242] smc: net device bond0 applied user defined pnetid SYZ2 [ 251.446959][T12242] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 251.482809][T12242] smc: net device bond0 erased user defined pnetid SYZ2 [ 251.497375][T12251] lo speed is unknown, defaulting to 1000 [ 251.503318][T12242] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 251.516623][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.536378][T12254] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 251.553729][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.600972][T12267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 251.652577][T12251] lo speed is unknown, defaulting to 1000 [ 251.832190][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1886'. [ 252.452920][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 252.605156][T12312] lo speed is unknown, defaulting to 1000 [ 252.686763][T12316] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 252.728784][T12312] lo speed is unknown, defaulting to 1000 [ 252.852213][T12327] netlink: 'syz.3.1899': attribute type 3 has an invalid length. [ 252.861012][T12327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1899'. [ 252.986750][T12333] atomic_op ffff88810242a128 conn xmit_atomic 0000000000000000 [ 252.995149][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1900'. [ 253.004414][T12333] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 253.018211][T12314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.026922][T12314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.330194][T12337] netlink: 'syz.4.1911': attribute type 3 has an invalid length. [ 253.404760][T12339] loop1: detected capacity change from 0 to 4096 [ 253.435526][T12339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.469036][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'. [ 253.479115][T12342] netem: incorrect gi model size [ 253.484213][T12342] netem: change failed [ 253.584197][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.830329][T12363] SET target dimension over the limit! [ 253.859585][T12360] syzkaller1: entered promiscuous mode [ 253.865122][T12360] syzkaller1: entered allmulticast mode [ 253.952370][T12368] syzkaller1: entered promiscuous mode [ 253.958510][T12368] syzkaller1: entered allmulticast mode [ 254.021654][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 254.152047][T12379] netlink: 'syz.3.1915': attribute type 6 has an invalid length. [ 254.184541][T12381] netlink: 'syz.2.1916': attribute type 3 has an invalid length. [ 254.266950][T12379] loop3: detected capacity change from 0 to 2048 [ 254.274213][T12389] netem: incorrect gi model size [ 254.279291][T12389] netem: change failed [ 254.346331][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 254.355907][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 255.605776][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 255.605795][ T29] audit: type=1326 audit(255.572:25085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.635879][ T29] audit: type=1326 audit(255.572:25086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dd00cd290 code=0x7ffc0000 [ 255.659341][ T29] audit: type=1326 audit(255.572:25087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.682459][ T29] audit: type=1326 audit(255.572:25088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.706412][ T29] audit: type=1326 audit(255.572:25089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.729569][ T29] audit: type=1326 audit(255.572:25090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.753411][ T29] audit: type=1326 audit(255.572:25091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.777381][ T29] audit: type=1326 audit(255.572:25092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.801385][ T29] audit: type=1326 audit(255.582:25093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.825194][ T29] audit: type=1326 audit(255.582:25094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.3.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 255.910491][T12406] loop1: detected capacity change from 0 to 512 [ 255.918310][T12406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.921075][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 255.937445][T12408] hsr_slave_0: left promiscuous mode [ 255.964139][T12411] loop3: detected capacity change from 0 to 1024 [ 255.991632][T12411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.022834][T12411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.038029][T12411] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.1922: Abort forced by user [ 256.043709][T12406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.066103][T12411] EXT4-fs (loop3): Remounting filesystem read-only [ 256.072788][T12411] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 256.092762][T12406] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1919: corrupted xattr block 19: overlapping e_value [ 256.113827][T12406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 256.123426][T12406] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1919: corrupted xattr block 19: overlapping e_value [ 256.138834][T12421] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1919: corrupted xattr block 19: overlapping e_value [ 256.169598][T12406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 256.191482][T12406] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1919: corrupted xattr block 19: overlapping e_value [ 256.223912][T12421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 256.234161][T12421] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1919: corrupted xattr block 19: overlapping e_value [ 256.249646][T12421] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1919: corrupted xattr block 19: overlapping e_value [ 256.264080][T12421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 256.276982][T12420] team0: Failed to send options change via netlink (err -105) [ 256.284711][T12420] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 256.296905][T12420] team0: Port device bridge0 removed [ 256.303515][T12420] bond0: (slave gretap1): Releasing active interface [ 256.313368][T12420] bond1: (slave gretap2): Releasing active interface [ 256.369437][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.495527][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.558117][T12429] ALSA: seq fatal error: cannot create timer (-19) [ 257.101456][T12449] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 257.615159][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1936'. [ 257.639237][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.657329][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.746811][T12519] loop1: detected capacity change from 0 to 512 [ 257.767673][T12519] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.782018][T12519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.819195][T12519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.901491][T12519] netlink: 'syz.1.1938': attribute type 27 has an invalid length. [ 257.940748][T12519] veth0_vlan: left allmulticast mode [ 257.972179][T12519] gretap1: left promiscuous mode [ 258.003542][T12519] ip6tnl1: left promiscuous mode [ 258.058347][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.073624][T12533] loop3: detected capacity change from 0 to 512 [ 258.095812][T12533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.130227][T12533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.139588][T12535] loop1: detected capacity change from 0 to 512 [ 258.160503][T12535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.177270][T12533] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1939: corrupted xattr block 19: overlapping e_value [ 258.206440][T12535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.225512][T12533] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 258.235569][T12533] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1939: corrupted xattr block 19: overlapping e_value [ 258.249657][T12540] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1939: corrupted xattr block 19: overlapping e_value [ 258.276853][T12535] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1940: corrupted xattr block 19: overlapping e_value [ 258.295492][T12540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 258.304867][T12533] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 258.325895][T12540] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1939: corrupted xattr block 19: overlapping e_value [ 258.340070][T12533] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1939: corrupted xattr block 19: overlapping e_value [ 258.364357][T12535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.375690][T12542] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1940: corrupted xattr block 19: overlapping e_value [ 258.389854][T12535] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1940: corrupted xattr block 19: overlapping e_value [ 258.404109][T12540] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1939: corrupted xattr block 19: overlapping e_value [ 258.418398][T12542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.427629][T12535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.437239][T12542] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1940: corrupted xattr block 19: overlapping e_value [ 258.456050][T12540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 258.465758][T12535] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1940: corrupted xattr block 19: overlapping e_value [ 258.481853][T12542] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1940: corrupted xattr block 19: overlapping e_value [ 258.496372][T12542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 258.671028][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.684459][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.790520][T12549] bridge_slave_0: left allmulticast mode [ 258.797335][T12549] bridge_slave_0: left promiscuous mode [ 258.803066][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.811956][T12549] bridge_slave_1: left allmulticast mode [ 258.817731][T12549] bridge_slave_1: left promiscuous mode [ 258.823447][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.859821][T12549] bond1: left allmulticast mode [ 258.864763][T12549] bond1: left promiscuous mode [ 258.870462][T12549] bridge0: port 3(bond1) entered disabled state [ 258.888437][T12549] bond0: (slave gretap1): Releasing active interface [ 259.006863][T12553] siw: device registration error -23 [ 259.024486][T12555] netlink: 'syz.2.1943': attribute type 3 has an invalid length. [ 259.032472][T12555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1943'. [ 259.146677][T12563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.156118][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 259.166304][T12564] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 259.880998][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 259.901171][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 259.938157][T12612] ALSA: seq fatal error: cannot create timer (-19) [ 260.589007][T12639] xt_CT: No such helper "pptp" [ 260.630324][T12636] lo speed is unknown, defaulting to 1000 [ 260.900536][T12636] lo speed is unknown, defaulting to 1000 [ 261.036438][T12571] Set syz1 is full, maxelem 65536 reached [ 261.139271][T12651] netlink: 'syz.3.1959': attribute type 39 has an invalid length. [ 261.289304][T12652] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 261.319757][T12652] loop3: detected capacity change from 0 to 512 [ 261.448654][T12652] __quota_error: 407 callbacks suppressed [ 261.448674][T12652] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 261.466898][T12652] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 261.477269][T12652] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1959: Failed to acquire dquot type 1 [ 261.884675][T12652] EXT4-fs (loop3): 1 truncate cleaned up [ 261.946879][T12652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.295714][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.467859][ T29] audit: type=1326 audit(262.442:25502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.491471][ T29] audit: type=1326 audit(262.442:25503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.565313][T12662] syzkaller1: entered promiscuous mode [ 262.571571][T12662] syzkaller1: entered allmulticast mode [ 262.606359][ T29] audit: type=1326 audit(262.512:25504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.629650][ T29] audit: type=1326 audit(262.512:25505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.653641][ T29] audit: type=1326 audit(262.512:25506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.678398][ T29] audit: type=1326 audit(262.522:25507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.701611][ T29] audit: type=1326 audit(262.522:25508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.725718][ T29] audit: type=1326 audit(262.522:25509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 262.771501][T12664] bond1: (slave gretap1): Releasing active interface [ 263.127004][T12690] netlink: 'syz.4.1970': attribute type 3 has an invalid length. [ 263.359574][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1972'. [ 263.522466][T12725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 263.529112][T12725] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.537074][T12725] vhci_hcd vhci_hcd.0: Device attached [ 263.606826][T12735] vhci_hcd: connection closed [ 263.607127][ T7107] vhci_hcd: stop threads [ 263.616343][ T7107] vhci_hcd: release socket [ 263.620783][ T7107] vhci_hcd: disconnect device [ 263.679909][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.696237][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.948023][T12761] loop3: detected capacity change from 0 to 512 [ 263.991526][T12761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.168846][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.178557][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.220532][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.287365][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.297083][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.310954][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.371825][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 264.376182][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 264.381647][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 264.481874][T12777] syzkaller1: entered promiscuous mode [ 264.488360][T12777] syzkaller1: entered allmulticast mode [ 264.557993][T12731] lo speed is unknown, defaulting to 1000 [ 264.808695][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.878637][T12782] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.897213][T12782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.924843][T12782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.640675][T12731] lo speed is unknown, defaulting to 1000 [ 266.510015][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 266.510098][ T29] audit: type=1400 audit(266.482:25886): avc: denied { execute } for pid=12798 comm="syz.0.1985" dev="tmpfs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.537201][ T29] audit: type=1400 audit(266.482:25887): avc: denied { execute_no_trans } for pid=12798 comm="syz.0.1985" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.586209][ T29] audit: type=1326 audit(266.562:25888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b0abe929 code=0x7ffc0000 [ 266.609692][ T29] audit: type=1326 audit(266.562:25889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b0abe929 code=0x7ffc0000 [ 266.658962][ T29] audit: type=1326 audit(266.632:25890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 266.682854][ T29] audit: type=1326 audit(266.632:25891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 266.708711][ T29] audit: type=1326 audit(266.682:25892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 266.731892][ T29] audit: type=1400 audit(266.682:25893): avc: denied { map_read map_write } for pid=12803 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.751349][ T29] audit: type=1326 audit(266.682:25894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 266.789024][ T29] audit: type=1326 audit(266.732:25895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 266.981314][T12818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12818 comm=syz.1.1989 [ 267.293719][T12832] lo speed is unknown, defaulting to 1000 [ 267.453371][T12832] lo speed is unknown, defaulting to 1000 [ 267.592450][T12863] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 267.657711][T12868] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 267.830709][T12877] bond0: (slave dummy0): Releasing backup interface [ 267.853044][T12877] bond1: (slave gretap1): Releasing active interface [ 267.877628][T12877] bond2: (slave gretap2): Releasing active interface [ 268.824262][T12932] netlink: 'syz.4.1999': attribute type 6 has an invalid length. [ 268.836085][T12916] lo speed is unknown, defaulting to 1000 [ 268.859609][T12932] __nla_validate_parse: 5 callbacks suppressed [ 268.859627][T12932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1999'. [ 268.963172][T12944] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 269.034345][T12916] lo speed is unknown, defaulting to 1000 [ 269.057636][T12947] netlink: 'syz.3.2004': attribute type 3 has an invalid length. [ 269.389061][T12959] pim6reg: entered allmulticast mode [ 269.398819][T12953] pim6reg: left allmulticast mode [ 269.572992][T12958] lo speed is unknown, defaulting to 1000 [ 269.729413][T12968] xt_hashlimit: max too large, truncated to 1048576 [ 269.824962][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 269.927577][T12958] lo speed is unknown, defaulting to 1000 [ 270.760429][T12997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 270.767018][T12997] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 270.774829][T12997] vhci_hcd vhci_hcd.0: Device attached [ 271.085664][ T36] usb 6-1: SetAddress Request (2) to port 0 [ 271.212928][ T36] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 271.370827][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 271.457243][T13004] vhci_hcd: connection reset by peer [ 271.464861][ T7059] vhci_hcd: stop threads [ 271.469886][ T7059] vhci_hcd: release socket [ 271.474406][ T7059] vhci_hcd: disconnect device [ 271.545132][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 271.545157][ T29] audit: type=1326 audit(271.512:26697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b0abe929 code=0x7ffc0000 [ 272.137200][ T29] audit: type=1400 audit(272.102:26698): avc: denied { map_read map_write } for pid=13035 comm="syz.0.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.166487][ T29] audit: type=1400 audit(272.132:26699): avc: denied { kexec_image_load } for pid=13037 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 272.188518][ T29] audit: type=1400 audit(272.162:26700): avc: denied { bind } for pid=13037 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.210209][ T29] audit: type=1400 audit(272.192:26701): avc: denied { create } for pid=13037 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.231246][ T29] audit: type=1400 audit(272.192:26702): avc: denied { write } for pid=13042 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.251341][ T29] audit: type=1400 audit(272.192:26703): avc: denied { read } for pid=13042 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.271290][ T29] audit: type=1400 audit(272.212:26704): avc: denied { execmem } for pid=13036 comm="syz.1.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 272.290243][ T29] audit: type=1400 audit(272.212:26705): avc: denied { setopt } for pid=13037 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.349133][ T29] audit: type=1400 audit(272.292:26706): avc: denied { setopt } for pid=13042 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.382578][T13041] bond4: entered promiscuous mode [ 272.387701][T13041] bond4: entered allmulticast mode [ 272.393071][T13041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.404103][T13041] bond4 (unregistering): Released all slaves [ 272.437271][T13053] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.471443][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.565924][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.695055][T13054] lo speed is unknown, defaulting to 1000 [ 272.846510][T13054] lo speed is unknown, defaulting to 1000 [ 273.430085][T13056] pim6reg1: entered promiscuous mode [ 273.989867][T13078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13078 comm=syz.0.2028 [ 274.074174][ T23] Process accounting resumed [ 274.232688][T13078] Process accounting resumed [ 274.267812][T13089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2030'. [ 274.430204][T13092] random: crng reseeded on system resumption [ 274.490325][T13099] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 274.496968][T13099] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 274.504849][T13099] vhci_hcd vhci_hcd.0: Device attached [ 274.601576][T13109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13109 comm=syz.2.2035 [ 274.763914][T13100] vhci_hcd: connection closed [ 274.764183][ T7059] vhci_hcd: stop threads [ 274.773353][ T7059] vhci_hcd: release socket [ 274.777879][ T7059] vhci_hcd: disconnect device [ 274.785461][ T23] usb 2-1: enqueue for inactive port 0 [ 274.922493][T13118] pim6reg1: entered promiscuous mode [ 274.996083][ T23] usb 2-1: enqueue for inactive port 0 [ 275.020386][T13114] xt_CT: No such helper "pptp" [ 275.320401][T13130] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 275.480948][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 275.490050][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 275.514314][T13138] siw: device registration error -23 [ 276.126570][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2044'. [ 276.140378][ T23] usb usb2-port1: attempt power cycle [ 276.171226][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'. [ 276.267062][ T36] usb 6-1: device descriptor read/8, error -110 [ 276.298627][T13146] --map-set only usable from mangle table [ 276.386533][ T36] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 276.551683][ T36] usb 6-1: enqueue for inactive port 0 [ 276.568392][ T36] usb 6-1: enqueue for inactive port 0 [ 276.586404][ T36] usb 6-1: enqueue for inactive port 0 [ 276.803517][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 276.810539][ T29] audit: type=1400 audit(276.772:27341): avc: denied { ioctl } for pid=13152 comm="syz.2.2046" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 276.912266][T13158] lo speed is unknown, defaulting to 1000 [ 277.024887][T13158] lo speed is unknown, defaulting to 1000 [ 277.188092][ T29] audit: type=1400 audit(277.142:27342): avc: denied { write } for pid=13152 comm="syz.2.2046" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.232299][ T29] audit: type=1400 audit(277.202:27343): avc: denied { create } for pid=13154 comm="syz.3.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.251438][ T29] audit: type=1400 audit(277.202:27344): avc: denied { setopt } for pid=13154 comm="syz.3.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.270818][ T29] audit: type=1326 audit(277.232:27345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 277.294056][ T29] audit: type=1326 audit(277.232:27346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 277.317463][ T29] audit: type=1326 audit(277.232:27347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb425ed290 code=0x7ffc0000 [ 277.341050][ T29] audit: type=1326 audit(277.232:27348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 277.364195][ T29] audit: type=1326 audit(277.232:27349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 277.364301][ T29] audit: type=1326 audit(277.232:27350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 277.436180][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 277.520468][T13172] openvswitch: netlink: Message has 6 unknown bytes. [ 277.658066][T13180] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 277.682481][T13179] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 277.689039][T13179] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.696776][T13179] vhci_hcd vhci_hcd.0: Device attached [ 277.801256][T13181] vhci_hcd: connection closed [ 277.801778][ T7059] vhci_hcd: stop threads [ 277.810835][ T7059] vhci_hcd: release socket [ 277.815571][ T7059] vhci_hcd: disconnect device [ 277.829501][T13190] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 277.891491][T13190] lo speed is unknown, defaulting to 1000 [ 277.940209][T13197] netlink: 'syz.0.2055': attribute type 10 has an invalid length. [ 277.948801][T13197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2055'. [ 277.958170][T13197] dummy0: entered promiscuous mode [ 277.964215][T13197] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 277.980731][T13190] lo speed is unknown, defaulting to 1000 [ 278.050396][T13201] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 278.111249][T13208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13208 comm=syz.0.2057 [ 278.136918][ T36] usb usb6-port1: attempt power cycle [ 278.212616][T13221] loop0: detected capacity change from 0 to 512 [ 278.234724][T13218] netlink: 'syz.4.2060': attribute type 27 has an invalid length. [ 278.245703][T13221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.274338][T13218] wireguard0: left promiscuous mode [ 278.280023][T13218] ipvlan2: left promiscuous mode [ 278.285349][T13218] gretap2: left promiscuous mode [ 278.291453][T13218] ip6tnl1: left promiscuous mode [ 278.331637][T13218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.345155][T13218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.369643][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 278.379387][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 278.529980][T13238] pim6reg1: entered promiscuous mode [ 278.611388][ T23] usb usb2-port1: unable to enumerate USB device [ 278.655432][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 278.671134][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.706049][T13248] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 279.050363][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.194635][T13264] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 279.655754][T13280] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 279.662382][T13280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 279.670170][T13280] vhci_hcd vhci_hcd.0: Device attached [ 279.756611][T13281] vhci_hcd: connection closed [ 279.756850][ T4302] vhci_hcd: stop threads [ 279.765908][ T4302] vhci_hcd: release socket [ 279.770374][ T4302] vhci_hcd: disconnect device [ 279.999214][T13285] lo speed is unknown, defaulting to 1000 [ 280.149966][T13285] lo speed is unknown, defaulting to 1000 [ 280.345605][ T36] usb usb6-port1: unable to enumerate USB device [ 280.698175][T13289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13289 comm=syz.4.2074 [ 280.914289][T13294] __nla_validate_parse: 8 callbacks suppressed [ 280.914306][T13294] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2077'. [ 280.935832][T13297] netlink: 'syz.4.2076': attribute type 10 has an invalid length. [ 280.943729][T13297] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2076'. [ 280.986981][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2076'. [ 281.018156][T13299] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 281.129682][T13291] lo speed is unknown, defaulting to 1000 [ 281.154360][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 281.233230][T13291] lo speed is unknown, defaulting to 1000 [ 281.426428][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2081'. [ 281.606218][T13318] lo speed is unknown, defaulting to 1000 [ 281.883554][T13318] lo speed is unknown, defaulting to 1000 [ 281.966722][ T29] kauditd_printk_skb: 827 callbacks suppressed [ 281.966739][ T29] audit: type=1326 audit(281.942:28178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.009971][T13325] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 282.092258][ T29] audit: type=1326 audit(281.972:28179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.116368][ T29] audit: type=1326 audit(281.972:28180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.139517][ T29] audit: type=1326 audit(281.972:28181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.163238][ T29] audit: type=1326 audit(281.972:28182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.187456][ T29] audit: type=1326 audit(281.972:28183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.210692][ T29] audit: type=1326 audit(281.972:28184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.234373][ T29] audit: type=1326 audit(281.972:28185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.258231][ T29] audit: type=1326 audit(281.972:28186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.281313][ T29] audit: type=1326 audit(281.972:28187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 282.703969][T13333] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 282.731301][T13331] netlink: 472 bytes leftover after parsing attributes in process `syz.3.2088'. [ 282.879699][T13328] vlan3: entered allmulticast mode [ 282.884892][T13328] bridge_slave_0: entered allmulticast mode [ 282.938952][T13342] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 282.945548][T13342] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.953463][T13342] vhci_hcd vhci_hcd.0: Device attached [ 283.277975][T13357] ipvlan3: entered promiscuous mode [ 283.285018][T13357] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 283.305952][ T23] usb 6-1: SetAddress Request (6) to port 0 [ 283.317042][T13357] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.322966][ T23] usb 6-1: new SuperSpeed USB device number 6 using vhci_hcd [ 283.346325][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2093'. [ 283.357282][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.369418][ T36] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 283.390741][T13343] vhci_hcd: connection reset by peer [ 283.396526][ T7103] vhci_hcd: stop threads [ 283.400891][ T7103] vhci_hcd: release socket [ 283.405458][ T7103] vhci_hcd: disconnect device [ 283.730457][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26368 sclass=netlink_route_socket pid=13379 comm=syz.1.2095 [ 284.171022][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2100'. [ 284.218711][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 284.228728][T13393] Cannot find add_set index 0 as target [ 284.838248][T13406] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 284.893268][T13406] lo speed is unknown, defaulting to 1000 [ 284.931497][T13409] netlink: 'syz.2.2105': attribute type 10 has an invalid length. [ 284.968266][T13406] lo speed is unknown, defaulting to 1000 [ 286.677775][T13459] loop0: detected capacity change from 0 to 512 [ 286.705468][T13459] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 286.714501][T13467] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 286.732894][T13459] EXT4-fs (loop0): invalid journal inode [ 286.747077][T13459] EXT4-fs (loop0): can't get journal size [ 286.758515][T13459] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #12: comm syz.0.2112: blocks 2-2 from inode overlap system zone [ 286.784613][T13469] __nla_validate_parse: 1 callbacks suppressed [ 286.784631][T13469] netlink: 472 bytes leftover after parsing attributes in process `syz.2.2119'. [ 286.785476][T13459] EXT4-fs (loop0): failed to initialize system zone (-117) [ 286.807906][T13459] EXT4-fs (loop0): mount failed [ 286.849574][T13467] lo speed is unknown, defaulting to 1000 [ 286.869363][T13476] netlink: 'syz.4.2118': attribute type 10 has an invalid length. [ 286.877318][T13476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2118'. [ 286.892476][T13476] dummy0: entered promiscuous mode [ 286.903899][T13476] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 286.934410][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2122'. [ 286.961775][T13467] lo speed is unknown, defaulting to 1000 [ 287.089053][ T29] kauditd_printk_skb: 889 callbacks suppressed [ 287.089070][ T29] audit: type=1326 audit(287.052:29077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.119019][ T29] audit: type=1326 audit(287.052:29078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.154643][ T29] audit: type=1326 audit(287.122:29079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.402445][ T29] audit: type=1326 audit(287.152:29080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.425723][ T29] audit: type=1326 audit(287.152:29081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.448917][ T29] audit: type=1326 audit(287.152:29082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.472103][ T29] audit: type=1326 audit(287.152:29083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.495362][ T29] audit: type=1326 audit(287.152:29084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.518487][ T29] audit: type=1326 audit(287.152:29085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.541564][ T29] audit: type=1326 audit(287.152:29086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 287.731242][ T3828] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 287.835973][ T3828] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.071186][T13504] loop0: detected capacity change from 0 to 1024 [ 288.195140][T13504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.291465][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'. [ 288.417571][ T23] usb 6-1: device descriptor read/8, error -110 [ 288.456584][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.514086][T13534] loop0: detected capacity change from 0 to 2048 [ 288.536443][ T23] usb 6-1: new SuperSpeed USB device number 6 using vhci_hcd [ 288.555483][ T23] usb 6-1: enqueue for inactive port 0 [ 288.561261][ T23] usb 6-1: enqueue for inactive port 0 [ 288.605912][ T23] usb 6-1: enqueue for inactive port 0 [ 288.612280][T13534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.628431][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2135'. [ 288.666514][T13534] netlink: 'syz.0.2132': attribute type 27 has an invalid length. [ 288.674527][T13534] dummy0: left promiscuous mode [ 288.677516][T13535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26368 sclass=netlink_route_socket pid=13535 comm=syz.2.2134 [ 288.704214][T13534] ipvlan2: left promiscuous mode [ 288.709682][T13534] gretap2: left promiscuous mode [ 288.731213][T13544] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.763990][T13544] tipc: Resetting bearer [ 288.784323][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 288.793617][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 288.805495][T13544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.824113][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 288.862811][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 288.871793][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 288.975953][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.991349][T13552] lo speed is unknown, defaulting to 1000 [ 288.995561][T13562] netlink: 'wg1': attribute type 29 has an invalid length. [ 288.996252][T13562] netlink: 'wg1': attribute type 29 has an invalid length. [ 289.117592][T13569] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 289.207292][T13552] lo speed is unknown, defaulting to 1000 [ 289.354714][T13576] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 289.636761][ T23] usb usb6-port1: attempt power cycle [ 289.913818][ T3820] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 289.963240][ T3820] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.590320][T13609] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 290.756434][T13621] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 290.817727][T13619] lo speed is unknown, defaulting to 1000 [ 290.849741][T13622] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 290.887827][T13621] lo speed is unknown, defaulting to 1000 [ 290.932544][T13625] netlink: 'syz.1.2155': attribute type 10 has an invalid length. [ 290.964989][T13625] dummy0: entered promiscuous mode [ 290.978102][T13625] bridge0: port 1(dummy0) entered blocking state [ 290.984551][T13625] bridge0: port 1(dummy0) entered disabled state [ 290.995073][T13625] dummy0: entered allmulticast mode [ 291.032249][T13619] lo speed is unknown, defaulting to 1000 [ 291.088182][T13621] lo speed is unknown, defaulting to 1000 [ 291.144290][T13640] loop0: detected capacity change from 0 to 512 [ 291.152357][T13640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.172161][T13640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.187480][T13640] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2159: corrupted xattr block 19: overlapping e_value [ 291.203945][T13640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 291.216796][T13640] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2159: corrupted xattr block 19: overlapping e_value [ 291.230878][T13640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 291.237964][T13647] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2159: corrupted xattr block 19: overlapping e_value [ 291.241044][T13640] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2159: corrupted xattr block 19: overlapping e_value [ 291.268577][T13647] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 291.278238][T13647] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2159: corrupted xattr block 19: overlapping e_value [ 291.298390][T13647] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2159: corrupted xattr block 19: overlapping e_value [ 291.312748][T13647] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 291.356567][T13650] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 291.475350][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.486620][ T23] usb usb6-port1: unable to enumerate USB device [ 291.740274][T13656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 291.747021][T13656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 291.755532][T13656] vhci_hcd vhci_hcd.0: Device attached [ 291.775619][T13656] loop0: detected capacity change from 0 to 512 [ 291.810171][T13656] EXT4-fs (loop0): 1 orphan inode deleted [ 291.822383][T13656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.843010][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 291.910530][T13656] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 291.988730][ T3835] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.006339][ T3835] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.075792][ T23] usb 2-1: SetAddress Request (10) to port 0 [ 292.095104][ T23] usb 2-1: new SuperSpeed USB device number 10 using vhci_hcd [ 292.176882][ T29] kauditd_printk_skb: 790 callbacks suppressed [ 292.176898][ T29] audit: type=1326 audit(292.152:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.206226][ T29] audit: type=1326 audit(292.152:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.229404][ T29] audit: type=1326 audit(292.152:29872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.248702][T13663] vhci_hcd: connection reset by peer [ 292.294498][T13681] ucma_write: process 1289 (syz.1.2169) changed security contexts after opening file descriptor, this is not allowed. [ 292.310897][T13684] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 292.317435][T13682] lo speed is unknown, defaulting to 1000 [ 292.327624][ T7103] vhci_hcd: stop threads [ 292.331950][ T7103] vhci_hcd: release socket [ 292.336748][ T7103] vhci_hcd: disconnect device [ 292.413779][ T29] audit: type=1326 audit(292.152:29873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.437108][ T29] audit: type=1326 audit(292.152:29874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.451307][T13682] lo speed is unknown, defaulting to 1000 [ 292.460273][ T29] audit: type=1326 audit(292.152:29875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.489040][ T29] audit: type=1326 audit(292.152:29876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.512268][ T29] audit: type=1326 audit(292.152:29877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.535578][ T29] audit: type=1326 audit(292.152:29878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 292.558609][ T29] audit: type=1326 audit(292.152:29879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dd00cd290 code=0x7ffc0000 [ 292.710926][T13702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26368 sclass=netlink_route_socket pid=13702 comm=syz.4.2172 [ 292.783467][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.938757][T13704] loop0: detected capacity change from 0 to 512 [ 292.957481][T13704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.999969][T13704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.014920][T13704] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2174: corrupted xattr block 19: overlapping e_value [ 293.031789][T13704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 293.042263][T13704] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2174: corrupted xattr block 19: overlapping e_value [ 293.056619][T13704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 293.066343][T13711] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2174: corrupted xattr block 19: overlapping e_value [ 293.080803][T13704] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2174: corrupted xattr block 19: overlapping e_value [ 293.104128][T13711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 293.126122][T13711] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2174: corrupted xattr block 19: overlapping e_value [ 293.145329][T13711] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2174: corrupted xattr block 19: overlapping e_value [ 293.171873][T13711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 293.213738][T13717] smc: net device bond0 applied user defined pnetid SYZ2 [ 293.230402][T13717] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 293.246746][T13717] __nla_validate_parse: 19 callbacks suppressed [ 293.246766][T13717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2179'. [ 293.262960][T13717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2179'. [ 293.272439][T13717] netlink: 38 bytes leftover after parsing attributes in process `syz.2.2179'. [ 293.285242][T13717] smc: net device bond0 erased user defined pnetid SYZ2 [ 293.293374][T13717] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 293.313719][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.363756][T13728] loop0: detected capacity change from 0 to 512 [ 293.378041][T13728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.423981][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'. [ 293.451868][T13731] dummy0: left allmulticast mode [ 293.460559][T13731] bridge0: port 1(dummy0) entered disabled state [ 293.470225][T13728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2181'. [ 293.556070][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.614038][T13736] lo speed is unknown, defaulting to 1000 [ 293.691753][T13743] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2186'. [ 293.703131][T13737] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 293.733305][T13736] lo speed is unknown, defaulting to 1000 [ 293.772233][T13741] lo speed is unknown, defaulting to 1000 [ 293.798576][T13739] loop0: detected capacity change from 0 to 2048 [ 293.853329][T13741] lo speed is unknown, defaulting to 1000 [ 294.045266][T13758] loop0: detected capacity change from 0 to 2048 [ 294.116528][T13758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.118102][T13756] ALSA: seq fatal error: cannot create timer (-19) [ 294.307937][T13769] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 294.320295][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.372128][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 295.324014][T13781] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 295.327082][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 295.342432][T13786] loop0: detected capacity change from 0 to 2048 [ 295.358091][T13786] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.387760][T13778] usb usb1: usbfs: process 13778 (syz.4.2198) did not claim interface 0 before use [ 295.398928][T13782] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 295.402671][T13785] lo speed is unknown, defaulting to 1000 [ 295.406739][T13782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2199'. [ 295.424673][T13786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.476744][T13781] lo speed is unknown, defaulting to 1000 [ 295.485541][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 295.514946][T13785] lo speed is unknown, defaulting to 1000 [ 295.527650][T13792] netlink: 'syz.3.2197': attribute type 10 has an invalid length. [ 295.548608][T13790] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 295.627397][T13799] netlink: 'syz.1.2201': attribute type 27 has an invalid length. [ 295.650461][T13792] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 295.667353][T13799] dummy0: left promiscuous mode [ 295.766164][T13799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.782039][ T3828] lo speed is unknown, defaulting to 1000 [ 295.788015][ T3828] syz0: Port: 1 Link ACTIVE [ 295.834573][T13781] lo speed is unknown, defaulting to 1000 [ 295.919307][T13815] xt_nfacct: accounting object `syz1' does not exists [ 295.976189][T13815] binfmt_misc: register: failed to install interpreter file ./file2 [ 296.135884][T13826] block device autoloading is deprecated and will be removed. [ 296.148554][T13826] bio_check_eod: 38264 callbacks suppressed [ 296.148573][T13826] syz.1.2208: attempt to access beyond end of device [ 296.148573][T13826] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 296.167781][T13826] FAT-fs (loop3): unable to read boot sector [ 296.188009][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.192026][T13828] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 296.210119][T13824] ALSA: seq fatal error: cannot create timer (-19) [ 296.326777][T13833] tipc: Resetting bearer [ 296.342719][T13833] tipc: Disabling bearer [ 296.530112][T13836] loop3: detected capacity change from 0 to 512 [ 296.564224][T13836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 296.606072][T13836] EXT4-fs (loop3): 1 truncate cleaned up [ 296.615921][T13836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.654176][T13843] lo speed is unknown, defaulting to 1000 [ 296.689759][T13849] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 296.778148][T13843] lo speed is unknown, defaulting to 1000 [ 296.856424][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.969246][ T36] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 296.978388][ T36] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.010021][T13867] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.136101][ T23] usb 2-1: device descriptor read/8, error -110 [ 297.187034][ T29] kauditd_printk_skb: 1202 callbacks suppressed [ 297.187051][ T29] audit: type=1326 audit(297.162:31082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ab36fd3df code=0x7ffc0000 [ 297.233306][T13872] netlink: 'syz.0.2218': attribute type 10 has an invalid length. [ 297.255871][T13867] lo speed is unknown, defaulting to 1000 [ 297.264215][ T23] usb 2-1: new SuperSpeed USB device number 10 using vhci_hcd [ 297.274908][T13872] dummy0: entered promiscuous mode [ 297.291401][T13872] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 297.295527][ T23] usb 2-1: enqueue for inactive port 0 [ 297.313108][ T29] audit: type=1326 audit(297.192:31083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5ab36fe9b7 code=0x7ffc0000 [ 297.336729][ T29] audit: type=1326 audit(297.192:31084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ab36fd290 code=0x7ffc0000 [ 297.359828][ T29] audit: type=1326 audit(297.192:31085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5ab36fd58a code=0x7ffc0000 [ 297.383450][ T29] audit: type=1326 audit(297.192:31086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 297.407197][ T29] audit: type=1326 audit(297.212:31087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 297.430151][ T29] audit: type=1326 audit(297.212:31088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 297.454005][ T29] audit: type=1326 audit(297.212:31089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 297.477807][ T29] audit: type=1326 audit(297.252:31090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 297.500827][ T29] audit: type=1326 audit(297.252:31091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 297.527359][ T23] usb 2-1: enqueue for inactive port 0 [ 297.533148][ T23] usb 2-1: enqueue for inactive port 0 [ 297.607103][T13867] lo speed is unknown, defaulting to 1000 [ 297.728681][T13884] xt_nfacct: accounting object `syz1' does not exists [ 297.742614][T13884] loop3: detected capacity change from 0 to 512 [ 297.768304][T13884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 297.787948][T13884] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.2222: bad orphan inode 13 [ 297.810772][T13884] ext4_test_bit(bit=12, block=18) = 1 [ 297.816299][T13884] is_bad_inode(inode)=0 [ 297.820483][T13884] NEXT_ORPHAN(inode)=2130706432 [ 297.825359][T13884] max_ino=32 [ 297.828621][T13884] i_nlink=1 [ 297.860154][T13884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.882199][T13884] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 297.910628][T13884] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2222: bg 0: block 248: padding at end of block bitmap is not set [ 297.928000][T13884] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2222: Failed to acquire dquot type 1 [ 297.945041][T13884] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.018406][T13900] loop0: detected capacity change from 0 to 764 [ 298.048606][T13900] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 298.064134][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.079145][T13903] netlink: 'syz.2.2227': attribute type 21 has an invalid length. [ 298.123904][T13900] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 298.175031][T13913] loop0: detected capacity change from 0 to 1024 [ 298.184356][T13913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.193115][T13913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.210886][T13916] loop3: detected capacity change from 0 to 1024 [ 298.219550][T13916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.219863][T13913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.250696][T13916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.266368][T13916] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.2228: Abort forced by user [ 298.281021][T13916] EXT4-fs (loop3): Remounting filesystem read-only [ 298.288344][T13916] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 298.321845][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.403674][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.441083][T13930] loop0: detected capacity change from 0 to 2048 [ 298.475584][T13933] loop3: detected capacity change from 0 to 512 [ 298.491873][T13933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.508250][T13930] loop0: p1 < > p4 [ 298.513470][T13930] loop0: p4 size 8388608 extends beyond EOD, truncated [ 298.528635][T13933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.556343][ T23] usb usb2-port1: attempt power cycle [ 298.562192][T13933] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2236: corrupted xattr block 19: overlapping e_value [ 298.598648][T13933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 298.608692][T13933] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2236: corrupted xattr block 19: overlapping e_value [ 298.632630][T13938] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2236: corrupted xattr block 19: overlapping e_value [ 298.651111][T13933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 298.652805][ T3822] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 298.667702][T13933] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2236: corrupted xattr block 19: overlapping e_value [ 298.668495][T13938] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 298.692063][ T3822] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.730453][T13938] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2236: corrupted xattr block 19: overlapping e_value [ 298.731866][T13943] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728) [ 298.754133][T13943] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 298.769186][T13938] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2236: corrupted xattr block 19: overlapping e_value [ 298.786090][T13938] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 298.872391][T13943] __nla_validate_parse: 15 callbacks suppressed [ 298.872445][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 298.978725][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.078430][T13962] xt_nfacct: accounting object `syz1' does not exists [ 299.102032][T13962] binfmt_misc: register: failed to install interpreter file ./file2 [ 299.154824][T13969] netlink: 'wg1': attribute type 29 has an invalid length. [ 299.157470][T13969] netlink: 'wg1': attribute type 29 has an invalid length. [ 299.198748][T13973] loop3: detected capacity change from 0 to 512 [ 299.199327][T13973] ext4: Unknown parameter 'nouser_xattr' [ 299.201922][T13973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2245'. [ 299.202693][T13975] netlink: 'syz.4.2246': attribute type 21 has an invalid length. [ 299.202733][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 299.234806][T13976] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 299.234887][T13976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2244'. [ 299.311622][T13979] loop3: detected capacity change from 0 to 512 [ 299.330738][T13979] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2247: Failed to acquire dquot type 1 [ 299.331796][T13979] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2247: corrupted inode contents [ 299.355522][T13979] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.2247: mark_inode_dirty error [ 299.355683][T13979] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2247: corrupted inode contents [ 299.355825][T13979] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2247: mark_inode_dirty error [ 299.356003][T13979] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2247: corrupted inode contents [ 299.356279][T13979] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 299.356479][T13979] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2247: corrupted inode contents [ 299.356595][T13979] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.2247: mark_inode_dirty error [ 299.434863][T13979] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 299.435334][T13979] EXT4-fs (loop3): 1 truncate cleaned up [ 299.436009][T13979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.591199][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.609227][T13990] loop3: detected capacity change from 0 to 512 [ 299.610639][T13990] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.622098][T13990] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 299.630629][T13990] loop3: detected capacity change from 0 to 512 [ 299.642939][T13990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.269180][T14009] SELinux: Context '8z@ [ 300.269180][T14009] is not valid (left unmapped). [ 300.317445][T14009] SELinux: Context Y7j [ 300.317445][T14009] u/$2Sٟ2'ks2- vjd #,N< [ 300.317445][T14009] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 300.366078][T14013] smc: net device bond0 applied user defined pnetid SYZ2 [ 300.373905][T14013] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 300.382956][T14014] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 300.417695][ T23] usb usb2-port1: unable to enumerate USB device [ 300.433880][T14013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2255'. [ 300.443098][T14013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2255'. [ 300.452853][T14013] netlink: 38 bytes leftover after parsing attributes in process `syz.4.2255'. [ 300.602847][T14017] smc: net device bond0 erased user defined pnetid SYZ2 [ 300.614910][T14014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2254'. [ 300.624790][T14015] siw: device registration error -23 [ 300.630927][T14017] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 300.640807][T14009] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 300.651205][T14009] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i&Zw8 lX&D;td BIݛ~L [ 300.802104][T14009] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 300.828267][T14009] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI>$YiL.([ P%U.T8}zK/7ogWf$C%{}9঴@yoP'b9Z -Sk61EA[T<; is not valid (left unmapped). [ 301.115795][T14030] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 301.151442][T14035] netlink: 'syz.0.2260': attribute type 21 has an invalid length. [ 301.160286][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 301.185059][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.235103][T14043] loop3: detected capacity change from 0 to 512 [ 301.242959][T14043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.310436][T14047] lo speed is unknown, defaulting to 1000 [ 301.388507][T14043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.400518][T14047] lo speed is unknown, defaulting to 1000 [ 301.403746][T14043] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2265: corrupted xattr block 19: overlapping e_value [ 301.430085][T14043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 301.439487][T14043] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2265: corrupted xattr block 19: overlapping e_value [ 301.454355][T14043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 301.464361][T14043] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2265: corrupted xattr block 19: overlapping e_value [ 301.496852][T14055] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2265: corrupted xattr block 19: overlapping e_value [ 301.511606][T14055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 301.521679][T14055] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2265: corrupted xattr block 19: overlapping e_value [ 301.538171][T14055] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2265: corrupted xattr block 19: overlapping e_value [ 301.555057][T14055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 301.584309][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 301.723939][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.825455][T14061] loop0: detected capacity change from 0 to 512 [ 301.833715][T14061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.849134][T14061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.864645][T14061] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2268: corrupted xattr block 19: overlapping e_value [ 301.879750][T14061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 301.888964][T14061] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2268: corrupted xattr block 19: overlapping e_value [ 301.903212][T14061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 301.915086][T14064] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2268: corrupted xattr block 19: overlapping e_value [ 301.929561][T14061] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2268: corrupted xattr block 19: overlapping e_value [ 301.944863][T14064] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 301.954286][T14064] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2268: corrupted xattr block 19: overlapping e_value [ 301.970816][T14064] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2268: corrupted xattr block 19: overlapping e_value [ 301.985137][T14064] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 302.330800][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 302.330814][ T29] audit: type=1326 audit(302.302:32082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.422919][ T29] audit: type=1326 audit(302.342:32083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ab36fd290 code=0x7ffc0000 [ 302.447223][ T29] audit: type=1326 audit(302.342:32084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.470318][ T29] audit: type=1326 audit(302.342:32085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.494184][ T29] audit: type=1326 audit(302.342:32086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.517908][ T29] audit: type=1326 audit(302.342:32087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.540925][ T29] audit: type=1326 audit(302.342:32088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.564651][ T29] audit: type=1326 audit(302.342:32089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.588434][ T29] audit: type=1326 audit(302.342:32090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.611465][ T29] audit: type=1326 audit(302.342:32091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 302.672958][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.741929][T14081] netlink: 'syz.4.2273': attribute type 4 has an invalid length. [ 302.783115][T14084] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 302.790856][T14084] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.802467][T14079] loop0: detected capacity change from 0 to 512 [ 302.823130][T14075] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 302.862392][T14079] ext4: Unknown parameter 'nouser_xattr' [ 302.901546][T14087] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.913167][T14087] netlink: 'syz.4.2275': attribute type 30 has an invalid length. [ 302.930175][T14087] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.938475][T14087] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.947101][T14087] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.955359][T14087] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.974120][T14087] netlink: 'syz.4.2275': attribute type 30 has an invalid length. [ 302.999035][T14089] lo speed is unknown, defaulting to 1000 [ 303.009522][T14095] loop0: detected capacity change from 0 to 512 [ 303.017097][T14095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.040172][T14095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.054195][T14095] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2278: corrupted xattr block 19: overlapping e_value [ 303.068703][T14095] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 303.082199][T14095] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2278: corrupted xattr block 19: overlapping e_value [ 303.092185][T14089] lo speed is unknown, defaulting to 1000 [ 303.096483][T14095] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 303.104656][T14092] lo speed is unknown, defaulting to 1000 [ 303.111184][T14095] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2278: corrupted xattr block 19: overlapping e_value [ 303.130978][T14099] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2278: corrupted xattr block 19: overlapping e_value [ 303.145748][T14099] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 303.154974][T14099] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2278: corrupted xattr block 19: overlapping e_value [ 303.168993][T14092] lo speed is unknown, defaulting to 1000 [ 303.175079][T14092] lo speed is unknown, defaulting to 1000 [ 303.182966][T14099] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2278: corrupted xattr block 19: overlapping e_value [ 303.199553][T14092] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 303.221132][T14099] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 303.230445][T14103] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728) [ 303.240259][T14103] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 303.254855][T14092] lo speed is unknown, defaulting to 1000 [ 303.262348][T14092] lo speed is unknown, defaulting to 1000 [ 303.270914][T14092] lo speed is unknown, defaulting to 1000 [ 303.279102][T14092] lo speed is unknown, defaulting to 1000 [ 303.286026][ T23] usb usb6-port1: attempt power cycle [ 303.294034][T14092] lo speed is unknown, defaulting to 1000 [ 303.302996][T14105] netlink: 'syz.4.2281': attribute type 18 has an invalid length. [ 303.310975][T14105] netlink: 'syz.4.2281': attribute type 18 has an invalid length. [ 303.311355][T14092] lo speed is unknown, defaulting to 1000 [ 303.353120][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.392209][T14108] loop3: detected capacity change from 0 to 2048 [ 303.396140][T14111] loop0: detected capacity change from 0 to 128 [ 303.418654][T14108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.477285][T14108] netlink: 'syz.3.2282': attribute type 27 has an invalid length. [ 303.496643][T14108] 0{X: left allmulticast mode [ 303.503738][T14108] dummy0: left promiscuous mode [ 303.514334][T14108] ipvlan0: left allmulticast mode [ 303.519459][T14108] veth0_vlan: left allmulticast mode [ 303.525234][T14108] macvlan2: left promiscuous mode [ 303.530662][T14108] gretap1: left promiscuous mode [ 303.579936][T14108] wireguard0: left promiscuous mode [ 303.604170][T14124] futex_wake_op: syz.1.2285 tries to shift op by -1; fix this program [ 303.615997][T14122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.632678][ T3820] lo speed is unknown, defaulting to 1000 [ 303.638833][ T3820] sz0: Port: 1 Link ACTIVE [ 303.796021][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.957578][T14138] __nla_validate_parse: 18 callbacks suppressed [ 303.957596][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2288'. [ 303.990164][T14138] x_tables: ip_tables: udp match: only valid for protocol 17 [ 304.209623][T14142] loop3: detected capacity change from 0 to 764 [ 304.216774][T14144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2289'. [ 304.228903][T14142] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 304.294222][T14142] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 304.302137][T14142] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2299'. [ 304.349398][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.349398][ T7059] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 304.373266][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.373266][ T7059] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 304.416564][T14149] tmpfs: Unknown parameter 'n' [ 304.423746][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.423746][ T7059] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 304.447061][T14151] netlink: 'syz.3.2292': attribute type 21 has an invalid length. [ 304.455449][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.455449][ T7059] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 304.475526][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 304.497169][T14152] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 304.512883][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.512883][ T7059] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 304.546033][T14152] vhci_hcd: invalid port number 65 [ 304.551225][T14152] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 304.566124][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.566124][ T7059] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 304.590089][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.590089][ T7059] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 304.620291][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.620291][ T7059] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 304.656375][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.656375][ T7059] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 304.683129][ T7059] kworker/u8:25: attempt to access beyond end of device [ 304.683129][ T7059] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 304.907557][T14161] siw: device registration error -23 [ 305.117274][ T23] usb usb6-port1: unable to enumerate USB device [ 305.275888][T14187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2302'. [ 305.449762][T14193] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 305.569918][T14193] lo speed is unknown, defaulting to 1000 [ 305.597348][T14196] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 305.597348][T14196] The task syz.2.2306 (14196) triggered the difference, watch for misbehavior. [ 305.663052][T14198] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 305.745602][T14193] lo speed is unknown, defaulting to 1000 [ 305.769542][T14193] lo speed is unknown, defaulting to 1000 [ 305.796145][T14198] lo speed is unknown, defaulting to 1000 [ 305.816252][T14199] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 305.824194][T14199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2307'. [ 305.843905][T14199] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 305.991873][T14198] lo speed is unknown, defaulting to 1000 [ 306.024378][T14198] lo speed is unknown, defaulting to 1000 [ 306.330035][T14212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2312'. [ 306.337216][T14217] IPv6: Can't replace route, no match found [ 306.369386][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 306.426064][T14217] rdma_op ffff888121271580 conn xmit_rdma 0000000000000000 [ 306.497366][T14225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2317'. [ 306.578017][T14232] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2318'. [ 306.756366][T14228] lo speed is unknown, defaulting to 1000 [ 306.808468][T14238] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 306.877851][T14228] lo speed is unknown, defaulting to 1000 [ 306.884833][T14228] lo speed is unknown, defaulting to 1000 [ 307.021859][T14235] lo speed is unknown, defaulting to 1000 [ 307.101958][T14252] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 307.124701][T14252] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 307.136721][T14252] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.146193][T14252] buffer_io_error: 37038 callbacks suppressed [ 307.146209][T14252] Buffer I/O error on dev loop7, logical block 544, async page read [ 307.220670][T14235] lo speed is unknown, defaulting to 1000 [ 307.246822][T14235] lo speed is unknown, defaulting to 1000 [ 307.317201][T14232] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 307.339075][ T29] kauditd_printk_skb: 868 callbacks suppressed [ 307.339095][ T29] audit: type=1326 audit(307.312:32960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 307.368965][ T29] audit: type=1326 audit(307.312:32961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 307.630698][T14262] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728) [ 307.640429][T14262] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 307.818944][T14266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.825562][T14266] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 307.833246][T14266] audit: backlog limit exceeded [ 308.345512][ T29] audit: type=1326 audit(307.462:32962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdb425ee929 code=0x7ffc0000 [ 308.368821][ T29] audit: type=1326 audit(307.512:32963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14259 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 308.391958][ T29] audit: type=1326 audit(307.512:32964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14259 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 308.415230][ T29] audit: type=1326 audit(307.512:32965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14259 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 308.438353][ T29] audit: type=1326 audit(307.512:32966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14259 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab36fe929 code=0x7ffc0000 [ 308.863818][T14292] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 308.871313][T14292] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 308.886878][T14296] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 309.061177][T14316] sd 0:0:1:0: device reset [ 309.079486][T14315] netlink: 'syz.4.2335': attribute type 13 has an invalid length. [ 309.104627][T14315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.143183][T14248] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 309.152986][T14248] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 309.153128][T14319] loop3: detected capacity change from 0 to 512 [ 309.161486][T14248] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 309.176219][T14248] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 309.176310][T14319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.184619][T14248] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 309.201548][T14248] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 309.210043][T14248] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 309.218886][T14248] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 309.227300][T14248] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 309.235862][T14248] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 309.250550][T14319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.255800][T14248] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 309.289267][T14248] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 309.300599][T14319] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2336: corrupted xattr block 19: overlapping e_value [ 309.314210][T14248] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 309.325913][T14319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 309.344007][T14248] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 309.345539][T14319] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2336: corrupted xattr block 19: overlapping e_value [ 309.378220][T14335] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2336: corrupted xattr block 19: overlapping e_value [ 309.412530][T14319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 309.427932][T14339] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 309.443625][T14329] lo speed is unknown, defaulting to 1000 [ 309.450019][T14319] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2336: corrupted xattr block 19: overlapping e_value [ 309.464278][T14335] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 309.473685][T14335] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2336: corrupted xattr block 19: overlapping e_value [ 309.511445][T14335] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2336: corrupted xattr block 19: overlapping e_value [ 309.559610][T14335] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 309.590009][T14346] loop0: detected capacity change from 0 to 512 [ 309.600226][T14346] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 309.632878][T14346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e11c, mo2=0102] [ 309.642617][T14329] lo speed is unknown, defaulting to 1000 [ 309.651366][T14346] EXT4-fs (loop0): orphan cleanup on readonly fs [ 309.657165][T14329] lo speed is unknown, defaulting to 1000 [ 309.666653][T14346] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.2341: attempt to clear invalid blocks 1024 len 1 [ 309.694871][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.716410][T14346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2341: bg 0: block 361: padding at end of block bitmap is not set [ 309.745672][T14346] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 309.784762][T14346] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2341: invalid indirect mapped block 1811939328 (level 0) [ 309.826860][T14359] netlink: 'syz.3.2343': attribute type 4 has an invalid length. [ 309.841870][T14359] __nla_validate_parse: 2 callbacks suppressed [ 309.841884][T14359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2343'. [ 309.865588][T14346] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2341: invalid indirect mapped block 2185560079 (level 1) [ 309.898099][T14346] EXT4-fs (loop0): 1 truncate cleaned up [ 309.925486][T14346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 309.997136][T14346] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 310.087814][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2341'. [ 310.116912][T14375] 9pnet_fd: Insufficient options for proto=fd [ 310.379014][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 310.437950][T14402] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 310.473998][T14402] loop0: detected capacity change from 0 to 512 [ 310.492808][T14402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.523954][T14402] EXT4-fs (loop0): 1 truncate cleaned up [ 310.530592][T14402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.531739][T14409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2352'. [ 310.556645][T14402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.901355][T14443] loop0: detected capacity change from 0 to 512 [ 310.938258][T14443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.970842][T14445] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 310.994426][T14435] lo speed is unknown, defaulting to 1000 [ 311.022790][T14443] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz.0.2358: invalid size [ 311.123598][T14435] lo speed is unknown, defaulting to 1000 [ 311.130867][T14435] lo speed is unknown, defaulting to 1000 [ 311.144223][T14460] block device autoloading is deprecated and will be removed. [ 311.199844][T14460] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 311.401850][T14471] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 311.412529][T14468] lo speed is unknown, defaulting to 1000 [ 311.629484][T14468] lo speed is unknown, defaulting to 1000 [ 311.654612][T14468] lo speed is unknown, defaulting to 1000 [ 311.760748][T14469] loop3: detected capacity change from 0 to 512 [ 311.769093][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.821254][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 311.882586][T14476] loop0: detected capacity change from 0 to 512 [ 311.917098][T14476] EXT4-fs (loop0): too many log groups per flexible block group [ 311.924994][T14476] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 311.953659][T14483] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 311.956164][T14476] EXT4-fs (loop0): mount failed [ 312.032709][T14483] loop3: detected capacity change from 0 to 512 [ 312.039360][T14476] tipc: Enabling of bearer rejected, failed to enable media [ 312.071458][T14483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.134533][T14483] EXT4-fs (loop3): 1 truncate cleaned up [ 312.199834][T14483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.258535][T14483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.573719][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 312.582748][T14529] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2374'. [ 312.624552][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 312.624576][ T29] audit: type=1326 audit(312.592:33705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.635207][T14529] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.662393][T14529] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.667772][ T29] audit: type=1326 audit(312.592:33706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.670625][T14529] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.701845][T14529] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.714254][T14529] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.722717][T14529] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.731162][T14529] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.739707][T14529] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.744439][ T29] audit: type=1326 audit(312.682:33707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.771144][ T29] audit: type=1326 audit(312.682:33708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.794362][ T29] audit: type=1326 audit(312.682:33709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.821524][ T29] audit: type=1326 audit(312.732:33710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.844768][ T29] audit: type=1326 audit(312.732:33711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.867764][ T29] audit: type=1326 audit(312.732:33712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.890796][ T29] audit: type=1326 audit(312.792:33713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.914149][ T29] audit: type=1326 audit(312.792:33714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.3.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd00ce929 code=0x7ffc0000 [ 312.916883][T14539] loop3: detected capacity change from 0 to 2048 [ 313.006257][T14539] loop3: p1 < > p4 [ 313.012045][T14539] loop3: p4 size 8388608 extends beyond EOD, truncated [ 313.111826][T14563] loop0: detected capacity change from 0 to 1024 [ 313.127594][T14563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.161013][T14563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.182898][T14563] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.2378: Abort forced by user [ 313.213413][T14563] EXT4-fs (loop0): Remounting filesystem read-only [ 313.220080][T14563] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 313.251512][T14566] lo speed is unknown, defaulting to 1000 [ 313.265939][T14573] netlink: 'syz.1.2391': attribute type 13 has an invalid length. [ 313.280139][T14576] netlink: 'syz.2.2381': attribute type 4 has an invalid length. [ 313.299465][T14577] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 313.316868][T14573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.342368][T14566] lo speed is unknown, defaulting to 1000 [ 313.349309][T14566] lo speed is unknown, defaulting to 1000 [ 313.355231][T14576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2381'. [ 313.369498][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.441832][T14579] sd 0:0:1:0: device reset [ 313.916366][T14613] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2388'. [ 314.046798][T14611] lo speed is unknown, defaulting to 1000 [ 314.192538][T14591] ================================================================== [ 314.200689][T14591] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 314.208510][T14591] [ 314.210838][T14591] write to 0xffffea0005654158 of 8 bytes by task 14474 on cpu 0: [ 314.218557][T14591] __filemap_remove_folio+0x1a5/0x2a0 [ 314.223995][T14591] filemap_remove_folio+0x6d/0x1d0 [ 314.229117][T14591] truncate_inode_folio+0x42/0x50 [ 314.234157][T14591] shmem_undo_range+0x244/0xa80 [ 314.239026][T14591] shmem_evict_inode+0x134/0x520 [ 314.243975][T14591] evict+0x2e0/0x550 [ 314.247893][T14591] iput+0x447/0x5b0 [ 314.251721][T14591] dentry_unlink_inode+0x24f/0x260 [ 314.256860][T14591] __dentry_kill+0x18d/0x4b0 [ 314.261464][T14591] dput+0x5e/0xd0 [ 314.265109][T14591] __fput+0x444/0x650 [ 314.269109][T14591] ____fput+0x1c/0x30 [ 314.273102][T14591] task_work_run+0x131/0x1a0 [ 314.277700][T14591] do_exit+0x483/0x1590 [ 314.281865][T14591] do_group_exit+0xff/0x140 [ 314.286383][T14591] get_signal+0xe59/0xf70 [ 314.290726][T14591] arch_do_signal_or_restart+0x96/0x480 [ 314.296280][T14591] irqentry_exit_to_user_mode+0x5e/0xa0 [ 314.301844][T14591] irqentry_exit+0x12/0x50 [ 314.306275][T14591] exc_general_protection+0x15b/0x1f0 [ 314.311657][T14591] asm_exc_general_protection+0x26/0x30 [ 314.317211][T14591] [ 314.319535][T14591] read to 0xffffea0005654158 of 8 bytes by task 14591 on cpu 1: [ 314.327165][T14591] folio_mapping+0xa1/0x120 [ 314.331685][T14591] evict_folios+0xdb9/0x33d0 [ 314.336286][T14591] try_to_shrink_lruvec+0x45a/0x7e0 [ 314.341498][T14591] shrink_lruvec+0x22e/0x1b40 [ 314.346204][T14591] shrink_node+0x686/0x2120 [ 314.350718][T14591] do_try_to_free_pages+0x3f6/0xcd0 [ 314.355921][T14591] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 314.361819][T14591] try_charge_memcg+0x358/0x9e0 [ 314.366678][T14591] obj_cgroup_charge_pages+0xa6/0x150 [ 314.372113][T14591] __memcg_kmem_charge_page+0x9f/0x170 [ 314.377605][T14591] __alloc_frozen_pages_noprof+0x188/0x360 [ 314.383435][T14591] alloc_pages_mpol+0xb3/0x250 [ 314.388215][T14591] alloc_pages_noprof+0x90/0x130 [ 314.393254][T14591] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 314.399076][T14591] __kvmalloc_node_noprof+0x30f/0x4e0 [ 314.404463][T14591] ip_set_alloc+0x1f/0x30 [ 314.408825][T14591] hash_netiface_create+0x282/0x740 [ 314.414039][T14591] ip_set_create+0x3c9/0x960 [ 314.418645][T14591] nfnetlink_rcv_msg+0x4c6/0x590 [ 314.423593][T14591] netlink_rcv_skb+0x120/0x220 [ 314.428373][T14591] nfnetlink_rcv+0x16b/0x1690 [ 314.433069][T14591] netlink_unicast+0x5a1/0x670 [ 314.437861][T14591] netlink_sendmsg+0x58b/0x6b0 [ 314.442646][T14591] __sock_sendmsg+0x145/0x180 [ 314.447337][T14591] ____sys_sendmsg+0x31e/0x4e0 [ 314.452143][T14591] ___sys_sendmsg+0x17b/0x1d0 [ 314.456841][T14591] __x64_sys_sendmsg+0xd4/0x160 [ 314.461781][T14591] x64_sys_call+0x2999/0x2fb0 [ 314.466463][T14591] do_syscall_64+0xd2/0x200 [ 314.471007][T14591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.476909][T14591] [ 314.479235][T14591] value changed: 0xffff8881064bc4d8 -> 0x0000000000000000 [ 314.486344][T14591] [ 314.488670][T14591] Reported by Kernel Concurrency Sanitizer on: [ 314.494840][T14591] CPU: 1 UID: 0 PID: 14591 Comm: syz.3.2386 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 314.507358][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.517419][T14591] ================================================================== [ 314.591286][T14611] lo speed is unknown, defaulting to 1000 [ 314.606143][T14611] lo speed is unknown, defaulting to 1000 [ 314.725679][T14613] rdma_rxe: rxe_newlink: failed to add bond_slave_1