last executing test programs: 5.774590365s ago: executing program 2 (id=956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='workqueue_execute_end\x00', r0}, 0xfffffffffffffc7f) unshare(0x2000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000030c0)=""/4110, 0x100e) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/52, 0x34) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000002000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000380)={0x1, 0x0, 0x37, r6, 0x3cb}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) io_destroy(0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e0", 0x1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 5.270990709s ago: executing program 2 (id=958): r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r0, &(0x7f0000000680)="f38e2dde649947e86d4df936345d3aba6f22b21c3bd6152ac50d228f0438b893e7d3d7818f24b1fbfe2690cdea75e2ef3755332c99d540e55f1a4ce98286dd09eb050769d7acc63b032fd5cbac81230af02dd5eaad0e31b18bb139b520374f61ff10f5c2e3f112521ca40ecf40fd9841b8b4591e076a2fc983378d6d1d165cf821697af685febdab49f9525cb1ec015658ab837e37477c1b71e8f5f81f55b685c8e6d056aa803ef09f4df4829f142c87db790ddee5ecfffae26e9f1964a49e117960c4e912fefe1be399b0131d8670c36c94262b86d0b4585ee94890c588293231a5f199879f0801", 0xe8, 0x800, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0xc1, @local, 0x1}}}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)) mkdirat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0xfc, 0x2, 0x2, 0x0, 0xb, 0x2a400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x1, 0x7, 0x6, 0x0, 0xbf6, 0x800, 0x4, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 4.79464479s ago: executing program 1 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() tkill(0x0, 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.683055807s ago: executing program 3 (id=969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0x2000000a}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000000010108000000000000000003000005549a028006000340000400000c00028005000100840000004bff0280050001001100000006000340000200000c0002800500010011000000060003400004000006000340000000000c000280050001002f000000"], 0x68}, 0x1, 0x0, 0x0, 0x860}, 0x4) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)) 3.53143969s ago: executing program 4 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000e80)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0xa000201a}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3.530911821s ago: executing program 1 (id=971): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x220001e, &(0x7f00000007c0), 0x1, 0x4fe, &(0x7f0000000080)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4045) recvmsg(0xffffffffffffffff, 0x0, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x2, 0xc6, &(0x7f0000000300)=""/198, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r0 = socket$inet(0x2, 0x3, 0x81) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) shutdown(r0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = io_uring_setup(0x168a, &(0x7f0000000000)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) close(0xffffffffffffffff) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4008010, &(0x7f0000000480)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) 2.874683008s ago: executing program 0 (id=972): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000840), 0x1, 0x4e6, &(0x7f0000001400)="$eJzs3U1vW0sZAODXzpeTm3uTe+kCENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYXSOT1I3tZvQfDiKn0c6OmdmHL8zdc9M/brxBNC3LkXEVkQMR8TDiJjI6nPZEXdbR/K4V9tP53e2n87notm8/89c2p7URdvPJD7KnrMQET/6XsRPc+/GrW9sLs9VKuW1rDzVqK5O1Tc2ry9V5xbLi+WVUml2Znb69o1bpWMb68XqcHb15Zd/2PrWz5NujWc17eM4Tq2hD+3FSQxGxA9OIlgPDGTjGe51R/gg+Yj4LCIup/f/RAykryYAcJ41mxPRnGgvAwDnXT7NgeXyxSwXMB75fLHYyuFdiLF8pVZvXHtUW19ZaOXKJmMo/2ipUp7OcoWTMZRLyjPp9ZtyaV/5RkR8GhG/GBlNy8X5WmWhl//wAYA+9tG+9f8/I631HwA45wq97gAAcOqs/wDQf6z/ANB/rP8A0H+s/wDQf6z/ANB/rP8A0Fd+eO9ecjR3su+/Xni8sb5ce3x9oVxfLlbX54vztbXV4mKttph+Z0/1oOer1GqrMzdj/cnkt1frjan6xuaDam19pfEg/V7vB+WhUxkVAPA+n1588edcRGzdGU2PaNvLwVoN51u+1x0Aemag1x0AesZuX9C/jvAeX3oAzokOW/S+pRARo/srm81m8+S6BJywq1+Q/4d+1Zb/97+Aoc/I/0P/kv+H/tVs5g67538c9oEAwNkmxw90+fz/s+z82+zDgZ8s7H/E85PsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxtu/v/FrO9wMcjny8WIz6OiMkYyj1aqpSnI+KTiPjTyNBIUp7pcZ8BgKPK/y2X7f91deLK+P7W4dzrkfQcET/71f1fPplrNNb+mNT/a6++8TyrL/Wi/wDAQXbX6fTc9kb+1fbT+d3jNPvz9+9GRKEVf2d7OHb24g/GYHouxFBEjP07l5Vbcm25i6PYehYRn+80/lyMpzmQ1s6n++MnsT8+1fj5t+Ln07bWOfmz+Nwx9AX6zYtk/rnb6f7Lx6X03Pn+L6Qz1NFl81/yVPM76Rz4Jv7u/DfQZf67dNgYN3///dbV6LttzyK+OBixG3unbf7ZjZ/rEv/KIeP/5UtfudytrfnriKvROX57rKlGdXWqvrF5fak6t1heLK+USrMzs9O3b9wqTaU56qnuq8E/7lz7pFtbMv6xLvELB4z/64cc/2/++/DHX31P/G9+rVP8fFx4T/xkTfzGIePPjf2u0K0tib/QZfwHvf7XDhn/5V8339k2HADonfrG5vJcpVJec+Hi7F8kf2XPQDc6XnzntGINx//1U83mB8XqNmMcR9YNOAv2bvqIeN3rzgAAAAAAAAAAAAAAAB2dxm8s9XqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA///77dI4") r0 = open(&(0x7f00000000c0)='.\x00', 0x200040, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, r1}, 0x38) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu&\t0_&\t') sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800060000000900000000090000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) dup3(r5, r6, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x88100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$bt_BT_SECURITY(r7, 0x6a, 0x3, 0x0, 0x205fffff) 2.794711615s ago: executing program 3 (id=973): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004d0000480000000000059078ac1414000a01010044140503ffffffff0000000000000000000000008907ce0000000083030000000000000066b0a485ccd159b1fb5b192454d2053b1da0a50576efa1689c3b95376cb40d8db9e118b3130d8506ccceb5da61a01fd32e594830bf038feeb3a7aafa0b9875c6c0b724a2d37352ee86ff19ad6b61c223466d56ea7a1cdeee31a2025ca723481f7e193fab604061f1cc505cdba8561a6acdbf71583519f3bbc75ff70e9cf19d3e9204bbc95edb75a3149a8b99010ba6fd7e8b20af22c572e85ce0bff4004c82ed7d0666", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/14]) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000207900431840000102030109022d0014bb06a305090400080103010309092105000001223d0d0905810340000e7f200905020300020804df"], &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x50, 0x4, 0x3, 0x40, 0x3}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xe}}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000f80)='./file0\x00', 0x2000002, &(0x7f0000000fc0)={[], [{@subj_user={'subj_user', 0x3d, '/dev/sg#\x00'}}]}, 0x0, 0x52e, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000900), 0x0, 0x482) set_mempolicy(0x2002, 0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000425000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x1, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f00000000c0), 0xfffffff4) 2.73738785s ago: executing program 1 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102, 0x3}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESDEC=r7]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="b400000003080103000000000000000000000000060002400000000005000300ff00000006000240600400000900012073797a310000000006000240890d00000900010073797a3100000000240004"], 0xb4}}, 0x0) eventfd2(0x3c15, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 2.647057808s ago: executing program 0 (id=975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000f50000", @ANYRESOCT], 0xfdef) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), 0x0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2.646471518s ago: executing program 2 (id=976): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000000000000000000000000e803850000006d00000095535be11728ab9c1dcde2e4de822ef7"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001440)={0x20, r4, 0x5eae78d9c54e9d3f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) socket$igmp(0x2, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008"], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 2.645464508s ago: executing program 4 (id=977): link(0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x6d99, 0x0, 0x0, 0x400fffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0xb757, 0x3, 0x4, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x20, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000014ffffff0018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xc0000000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 2.534969708s ago: executing program 0 (id=978): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(0x0, 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0014000, &(0x7f0000000bc0)="73cab7d2212a7dfb299cad2dbc8c89a28b705238f9aa298c4a8ebe53e84d382442af1f4e133ce5d01a52f7cec69f05668f07f0b4ee0d00f468fa8f1d5b8d7b2f7fa2bbe115bbdccc7ee0f2b7daf81d756845514dcbbda1a06ec2664e553bee72f87c14ec4ffd946148364e7bfad1b10102f24ee2b9f13ea99ff11c183496d6544d7d26d6c24806ce0dcf9be0d9cb16f7ed1aee41bdc25166c4a67822ae8024cf82", 0xa1, &(0x7f0000000280), &(0x7f0000000580), &(0x7f0000000800)="b958ffe43a79e89d2c3256e5fd3944389600383c658e39f2dd1931d5900230efaca92a8f9eadd42f6f87346bf612f36e9c3642bb") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='btrfs_sync_fs\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x399, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x1022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18010000000000000000000000000000000095000000000005000000000000000057cdd9f35ec34e0130f22caa00000000000000000000000000008d5eb711083f02000de7cee82bf1c3321ddb37036a70550d865744f08215612edbb9bbc2808159903497215302700dac6c1d90a71fd559b77d75c20040d3e6b2317d12"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xffffffff, 0x5}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.833111229s ago: executing program 1 (id=981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180100004b028e000000000000000004850000007b00000095", @ANYRES32=0x0, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='btrfs_trigger_flush\x00'}, 0x10) gettid() close_range(r6, 0xffffffffffffffff, 0x0) 1.815133701s ago: executing program 3 (id=982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x40080) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d966000000000000000000000000000000000000000000000000000018e0000000000000feffffff01000000110000000000000081006263736630000002000800000000000073697430000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000002c0)=0xffffffffffffefff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'macvlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000540), 0x8, 0xd7, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7200, '\x00', r6, 0xffffffffffffffff, 0x5, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.690590882s ago: executing program 3 (id=983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x81) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000001140)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116e00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.689988192s ago: executing program 4 (id=984): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @typedef={0x5, 0x0, 0x0, 0x8, 0x803}]}, {0x0, [0x61, 0x30, 0x61, 0x0]}}, 0x0, 0x4e, 0x0, 0x0, 0x7fffffff}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r4, &(0x7f0000000040), 0x0, 0xfffff001) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x66, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x21b0, 0x6, 0x0, 0x3, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x60, 0x1403, 0x1, 0x1, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x60}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 1.673909663s ago: executing program 0 (id=985): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = inotify_init1(0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') fchdir(r4) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r5, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001300)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.empty_time\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r8, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = epoll_create1(0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/reserved_size', 0x626282, 0x19e) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000200)={0xa000000a}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) close_range(r12, 0xffffffffffffffff, 0x0) 1.639033786s ago: executing program 2 (id=986): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000480)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000011c0)=[&(0x7f0000001180)='\x00'], &(0x7f0000001480)=[&(0x7f0000001200)='pedit\x00', &(0x7f0000001240)='kmem_cache_free\x00', &(0x7f0000001280)='GPL\x00', &(0x7f00000012c0)='[&)/\\@\x00', &(0x7f0000001340)='\x00', &(0x7f0000001380)='kfree\x00', &(0x7f00000013c0)='\x00', &(0x7f0000001400)='/dev/rfkill\x00', &(0x7f0000001440)='/dev/rfkill\x00']) io_setup(0x3, &(0x7f00000003c0)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a6850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) io_submit(r6, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.36265778s ago: executing program 0 (id=987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xd3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="070000000100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32=r8], 0x13) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x100) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000100)='4', 0x1}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) 979.370324ms ago: executing program 1 (id=988): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)=@newtfilter={0x3194, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0x1}, {0xb, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xaa}, @TCA_CHAIN={0x8, 0xb, 0xa6d}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x78, 0x5}}, @filter_kind_options=@f_u32={{0x8}, {0xbd8, 0x2, [@TCA_U32_SEL={0x7c4, 0x5, {0x5, 0x1b, 0x0, 0xff, 0x7ff, 0x0, 0x897, 0x6, [{0xfffffffe, 0x0, 0xffff7fff, 0xd5fe}, {0x7fff, 0x8, 0x80000001, 0x9}, {0xffffffff, 0x0, 0xdbf6, 0xfffffffa}, {0xf, 0x1, 0x7, 0x9}, {0x6, 0x8fd, 0x3ff, 0xa23}, {0xffffffff, 0x80000001, 0x2, 0x7}, {0x0, 0x3, 0x6, 0xffff}, {0x2, 0x4, 0x80000001, 0x3}, {0x8, 0x0, 0xffff, 0x401}, {0xff, 0x0, 0xf63, 0x9}, {0xdd, 0x81, 0x5, 0x7}, {0x0, 0x1, 0x7, 0x1}, {0x3, 0xfffffffb, 0x4}, {0xb9, 0xff, 0x3, 0x5}, {0x84, 0x59d489a5, 0x1, 0x5}, {0x6, 0x65e, 0x5, 0x9}, {0x3ff, 0x9, 0x1, 0x4}, {0x4, 0x3ff, 0xfc1, 0xffff}, {0x0, 0x2, 0x1ff, 0x6}, {0x3, 0x40, 0x0, 0x1}, {0x2, 0x4, 0x2be0, 0x1000}, {0x101, 0x2, 0xe1, 0x6}, {0x2b, 0x8, 0x7, 0x5}, {0x2, 0x6, 0x5, 0x9f2}, {0x4, 0x0, 0x1000, 0x7}, {0x5, 0x6, 0xe, 0x600000}, {0x1ff, 0x557121ad, 0x537, 0x8}, {0x6, 0x1, 0x40, 0x2}, {0x7, 0x9, 0x1, 0x4}, {0x1, 0x9, 0x9, 0x81}, {0x67, 0xe, 0x7, 0xbb}, {0x564b, 0xab9b, 0x7, 0xffff}, {0x1, 0x9, 0x6, 0x5}, {0x7, 0xfffffffa, 0x6, 0x9}, {0x6, 0x6, 0x0, 0xffffffff}, {0x2, 0xbbac, 0x40, 0x5}, {0x5, 0x7fffffff, 0x401, 0x5}, {0xa76, 0x80000001, 0x2}, {0x74b, 0xffffffff, 0x1ff, 0x5}, {0x2, 0x95, 0x7, 0x8000}, {0x2, 0x6, 0xfffffffd, 0x800}, {0x7, 0x100000, 0x1, 0xfffffffe}, {0x3, 0x7, 0x2bfa, 0x5}, {0x8, 0x10000, 0x1, 0x4}, {0x0, 0x400, 0xf, 0x8}, {0x9, 0xf1b, 0x0, 0x6}, {0x7, 0x3, 0x2}, {0x3, 0x0, 0x6, 0xfffffffb}, {0xa, 0xb9f9, 0xeaeb, 0x5}, {0x9, 0xc8e, 0xffffffff, 0x80000001}, {0x1, 0x4, 0x6, 0x2}, {0x9, 0x8, 0x7, 0x6}, {0x7, 0x6, 0x1ff, 0x401}, {0x1, 0x3, 0x0, 0x81}, {0x1, 0x4, 0x7, 0x5f3}, {0x7ff, 0x1, 0x240000, 0x3ce5}, {0x6, 0x3094f36e, 0xe, 0x7}, {0x9, 0x9, 0x6, 0x2}, {0x7fff, 0x9, 0x7, 0x10000}, {0x66f, 0xd, 0xd, 0x3}, {0x8000, 0x9, 0x5}, {0x7, 0x101, 0x5, 0x52fc}, {0x6, 0x4, 0x4, 0x2e}, {0x2, 0x3, 0x0, 0x1000}, {0x9, 0x3, 0x9, 0xfff}, {0x9, 0x9, 0x8, 0x7}, {0x4a, 0xffffffc3, 0xffffffff, 0x669d}, {0x4, 0x5, 0x2, 0x7fff}, {0x4, 0x0, 0x82, 0x65}, {0x8, 0x10001, 0x0, 0x6}, {0x7ff, 0x8782, 0x5, 0x47aa}, {0x4, 0x8, 0x8, 0x2}, {0xf5a0, 0x4, 0x7, 0x1}, {0x200, 0x400, 0xfffffffc, 0x4d8}, {0x8, 0x1, 0x8, 0x6}, {0xff, 0x6, 0x5, 0x8}, {0xfffffffe, 0x80, 0x70, 0xffff41aa}, {0x0, 0x401, 0x1000, 0x5}, {0xe, 0x35, 0x80, 0x4}, {0x9e, 0x2ddd, 0x9, 0x4}, {0x1000, 0xa, 0x6, 0x6}, {0x99, 0x1ff, 0x3ff, 0xe}, {0x9, 0x0, 0x6, 0x81}, {0xc, 0x9, 0xfff, 0x9}, {0x9, 0x400, 0x2, 0x1ff}, {0x7fff, 0xe0000000, 0xff, 0x5}, {0x3, 0x8, 0x7, 0x400}, {0x3, 0x1, 0x8, 0x5}, {0x8, 0xa, 0x6, 0x8}, {0x101, 0x6, 0x2, 0xfffffffb}, {0x7, 0x5, 0x80, 0x2}, {0x3, 0xdea, 0x7}, {0x2, 0x9, 0x1, 0x8}, {0x7, 0x100, 0x7, 0x936}, {0xa, 0xffff, 0x6, 0x40}, {0x9114, 0x1, 0x7fff, 0x2}, {0x2, 0x7, 0x10, 0x8}, {0x8001, 0x7a66, 0x8000, 0x5}, {0x9, 0x8, 0x1400000, 0x5}, {0x2, 0x3, 0x9, 0xfff}, {0x7, 0x0, 0x3, 0xc}, {0x9, 0xfffffffa, 0xc2, 0x400}, {0x6, 0x4, 0x2, 0x2}, {0x6, 0x2, 0x40, 0x3}, {0x0, 0x10, 0x1, 0x80000000}, {0xcc6, 0x10000, 0x3, 0x40}, {0x7, 0xfffffe01, 0x1, 0x2}, {0xfffffffb, 0x8, 0x8, 0x3}, {0x0, 0x3, 0x6, 0xf}, {0x7f, 0x4, 0xffff7fff, 0x3}, {0x72, 0x9, 0x86, 0x7fa}, {0xff, 0xf3, 0x24, 0x4}, {0x0, 0x0, 0x10, 0x4}, {0x8, 0x1, 0x6978d273, 0x6}, {0x3, 0x1, 0x6548, 0x7}, {0xfffffff9, 0x6, 0x5, 0x3}, {0x0, 0xf7, 0x8}, {0x1, 0x3, 0x5, 0x9}, {0x5, 0x10, 0x1, 0x3}, {0x4, 0x6, 0x4, 0x6}, {0x2, 0x1b, 0x800, 0x3}, {0x7, 0x10, 0xda, 0x1}, {0x5, 0x16, 0x1, 0x6}]}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3bc, 0xfffffffc, 0x3, 0x0, 0x8, 0x7, 0x8001, 0x30, 0x10, 0x100, 0x7fffffff, 0x276, 0x0, 0x9, 0x8, 0xc, 0xfff, 0x2, 0x4, 0x2, 0x7ff, 0xd, 0x4, 0xdb, 0xdf, 0x1e900000, 0x4, 0x400, 0xfffffffc, 0xe513, 0xfff, 0x8000, 0xfdd, 0x1, 0x8, 0xfffffffe, 0x7, 0x8, 0x8, 0xf9, 0x5, 0x9, 0x0, 0x4, 0x0, 0xa11, 0x800, 0x8, 0xe75, 0x10, 0x7962, 0x1000, 0x3, 0x1, 0x9, 0x0, 0x1, 0x4, 0x7f, 0x0, 0x6, 0x101, 0xd, 0x8, 0x6, 0x47d0, 0x6, 0xe, 0xffff, 0x4, 0xffff53dd, 0x1, 0xc, 0xfff, 0x8, 0xf, 0x3, 0xffffff78, 0xccf, 0x5, 0x2, 0x7ff, 0x1, 0x8, 0x101, 0x6, 0x8, 0x4, 0xffffffff, 0xecd, 0x0, 0x1, 0x67, 0x10000, 0x5, 0x9, 0x0, 0x5, 0x0, 0x4, 0x8, 0x40, 0x2, 0x0, 0x9, 0xfffffff8, 0xe5, 0x0, 0x4, 0x58, 0x10, 0x80000000, 0x0, 0x1b7, 0x3, 0x7, 0x5, 0xfff, 0x3, 0x6, 0x9, 0xffffff01, 0xfffffff7, 0x1, 0xdb, 0xfffffffc, 0x4, 0x0, 0x9, 0x9, 0x7, 0x3, 0x5, 0x206, 0x7, 0x9, 0x5c7, 0x0, 0xc, 0x2, 0xa, 0x10000, 0x5, 0xa, 0x5, 0x4, 0x9, 0x10, 0x80000, 0x7, 0x5, 0xf1b, 0x4, 0x40, 0x9c, 0x40, 0x0, 0x3, 0x5, 0x0, 0x3a, 0xa6, 0x80, 0x8, 0x0, 0xcea5, 0x6, 0x6, 0x2, 0x0, 0x3, 0x235, 0x6, 0x5, 0xff, 0x9, 0x9cf1, 0x4, 0x9, 0x3, 0x1000, 0x0, 0x7fffffff, 0xffff, 0x7ff, 0x4, 0x77d, 0x6, 0x0, 0x6, 0x2, 0x7, 0x0, 0x6, 0x9, 0x7, 0x9, 0x2e, 0x5, 0x2, 0xffff, 0x3, 0x60000000, 0x4, 0x6, 0x8, 0x7, 0xf8, 0xcb27, 0x6, 0x8, 0x5, 0x8, 0x5, 0x2, 0x4, 0xffffdf18, 0x7f, 0x5, 0x1000, 0x6, 0x1800, 0x10, 0x0, 0x7, 0x3ff, 0x40000, 0x0, 0x4, 0x9, 0x5485268, 0x10001, 0x8, 0x6, 0x4, 0x1, 0x3b, 0x5, 0x80000001, 0x2, 0x9, 0x1, 0x4, 0x1, 0x80, 0x4, 0x6, 0x40, 0x6, 0x7, 0x5, 0xf, 0x80, 0x3b, 0x2f4ff12d]}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x2}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x2558, 0x2, [@TCA_FW_ACT={0x1f8, 0x4, [@m_tunnel_key={0xc8, 0x12, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x74, 0x6, "78c9103ebf90a4d26791f92976c69809ebdf85f4b5f2f1b8f92b23c1c00eff18a872337f764d7fc08337685a01480d12ebbfac9daa520eb667ce065edabe00ac3ca6ca0f604355f336bf7254bc2d524d14fb96c7d670e75b67a7b69cd0cab21527195372105fed8c505d431b5801a647"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x9c, 0x6, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "aeb3ae9170129bd1960d2c4e660956d6"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x7, 0x10000000, 0xa3, 0x4}}]}, {0x1c, 0x6, "d5da8479537bebdff8949a32dadc80f11fc750feebaf8b7c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x90, 0xf, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x29f3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x5, 0x6, 0x77b9, 0x6a52}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x1, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x1b, 0x6, "0a8ce73db391838f0c5a65bfd7b5c8381d3391b8919864"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_INDEV={0x14}, @TCA_FW_ACT={0x11f8, 0x4, [@m_tunnel_key={0x124, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0xde, 0x6, "55496d97b9d83dbd7f46eea4fdc72b85268a4405c6d88c3586b104e4bb4aa1620a279619d818698c7cd89379a73d2eefac39fe31932f550f38aced63042a24971868c503273b4c48d68d1c54a7cb80b92f513a941ab1a8c08d9e8b1e67b2a8375313d4cde882b98ed3fae25f89eda79e7b0711c83c5045673f67ae7bba836887dcb57626064f3e0fe624b2b3d0787875abf1d35788acd48b35b5c97fb243830d7e4399b625add8d037a355897a77ad10923fab7018ba65c092b8c0a81b254eb891e9ef249212b7df5a3c09550cdfb3fb4ac37ff8fa1d67a87f1b"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x80, 0xd, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5a26, 0x9, 0x20000000, 0x4, 0xfffffff9}}]}, {0x1c, 0x6, "98026d2caf41e7d48162b03dcd47dde8505e692351cf5756"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x1050, 0x12, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x2c}}, @TCA_CT_MARK={0x8, 0x5, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_ACT={0x105c, 0x4, [@m_skbmod={0x98, 0x16, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x9, 0x8, 0x1dbef6b9, 0x9}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x2e, 0x6, "7f68a97cb449f91ead74ec29e3fe955f880a3e634e2a51dd6160a4ea702a0edf28df22308ba22f2bc292"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xd2c, 0x10, 0x0, 0x0, {{0xb}, {0xccc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x6, 0x3, 0x7, 0x7, 0x100, 0xd, 0xffffffff, 0x2, 0x1, 0x8, 0x6, 0x7, 0x6, 0x4e00, 0x8, 0x4, 0xffff, 0xd636, 0xfff, 0xbe72, 0x212a0c8a, 0x8, 0x1, 0x6, 0x6, 0x42e2, 0x9, 0x80000000, 0x101, 0x6, 0x31, 0x7fffffff, 0x10, 0x7, 0x1000, 0x1c, 0x9, 0xfffffff3, 0x7, 0x9, 0xab, 0xfff, 0x9b69, 0x8001, 0x0, 0x100, 0x5, 0x1, 0x4, 0x4, 0x7, 0x599, 0x6, 0x1000, 0xab42, 0x9, 0x8dcc, 0x5, 0xfffffffa, 0x4, 0x9, 0xfffffff8, 0x200, 0xffffff26, 0x7, 0x3, 0x9, 0xa381, 0x7e3000, 0xe, 0x0, 0x6, 0x40, 0xffffffff, 0x1000, 0xd6, 0x0, 0x401, 0x3, 0x4, 0xfffffff8, 0x80000000, 0x1, 0x1, 0x1, 0xc, 0x6, 0x4, 0x9, 0x2, 0x1, 0x7, 0x2400000, 0x5, 0x34b, 0x7fff, 0x9, 0xffff, 0x3, 0x2, 0x7ff, 0xf9, 0x80000000, 0x684, 0x10000, 0x3728, 0x1, 0x8, 0x2, 0x10, 0x3, 0x6, 0x5, 0x2, 0x0, 0xa00, 0x0, 0x7, 0x1, 0x80000000, 0x3, 0x1, 0xa2, 0xfffff822, 0x2, 0x81, 0x7, 0x7f, 0x3, 0x12, 0xff, 0x71, 0x4, 0x4, 0x8, 0x9, 0xffffffff, 0x8000, 0x4, 0x7, 0x101, 0x8000, 0x9, 0x0, 0x16, 0x5, 0x7, 0x40000000, 0x0, 0x8, 0x3742, 0x2, 0x4, 0x6f4, 0x6, 0x3ff, 0x0, 0x7, 0x9, 0xffffffff, 0x80000001, 0x2, 0x3, 0xb935, 0x9, 0x28, 0x6, 0x2650, 0x5, 0x2, 0x1, 0x20, 0x2, 0x0, 0x6, 0x81, 0x6, 0x45e, 0x7, 0x5, 0x8, 0x2, 0x0, 0xfffffff7, 0x63cd5e01, 0x5, 0x7, 0x0, 0x0, 0x80000001, 0x7ff, 0x7, 0x7, 0x9, 0x0, 0x7, 0xe2b8, 0x5, 0x0, 0x6, 0x1000000, 0x0, 0x1, 0x6, 0x5, 0x1000, 0x200, 0xd, 0x2149, 0xd84f9df2, 0x2, 0xe1, 0x81, 0x3, 0x9d, 0x6b, 0x8001, 0x60000000, 0xfff, 0x0, 0x8149, 0x1, 0x6, 0xd, 0x8001, 0x7ff, 0x9, 0x432, 0x800, 0xffffff01, 0x1, 0x800, 0x3, 0x4, 0x7, 0x5, 0xa14b, 0x2, 0x4, 0xd, 0x7, 0x7fff, 0xfb, 0x5dfd0959, 0xde6d, 0x2, 0x7f, 0x2, 0xa, 0x5, 0x3, 0x8, 0x0, 0x80]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xef05}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x9, 0x3, 0xffffffff, 0x5, 0x10000, 0x0, 0x9, 0x6, 0x100, 0x7, 0x200, 0xf, 0x200, 0x2, 0x0, 0x9, 0x7, 0xfffffffa, 0x5, 0xfffffffc, 0xfa7, 0x9, 0x4, 0x4, 0xfffffff7, 0x0, 0x1, 0x3, 0xff, 0x9, 0x3, 0x7fffffff, 0x7, 0xd618, 0x1, 0xfffffff9, 0x0, 0x5, 0x7f, 0xd, 0xbb, 0xff, 0x2, 0x5, 0x4cf, 0x4, 0x7, 0x7, 0x1, 0x3, 0x3, 0x0, 0xad, 0x9, 0x8, 0x9c3, 0x9, 0x2803, 0x3, 0x0, 0xb9a3, 0x3, 0x6, 0x4, 0x4, 0x6, 0x9, 0xa73b, 0x3, 0x6c1, 0x2, 0x8, 0x9, 0x3, 0x2, 0x2, 0x100, 0xd3, 0x2, 0x0, 0x1ffc0, 0x0, 0x3, 0x0, 0x1, 0xb78, 0x7, 0x4, 0xfffffff7, 0x4, 0xb21, 0x41, 0x7, 0xffffff80, 0x6, 0xb, 0xb655, 0x9, 0x1, 0x1, 0x3, 0x5, 0x5, 0xb47f, 0x8, 0x7ff, 0xb, 0x8, 0x5, 0xee, 0x5, 0x9, 0x8, 0x5, 0x9, 0x7, 0x2, 0x4, 0x3, 0x0, 0xfff, 0x6, 0x2, 0x10, 0xac, 0x8, 0xc, 0xd654, 0x916, 0xfffffffb, 0x800, 0xd6, 0x4, 0x6, 0xfffffffe, 0x577, 0x5, 0x0, 0x5, 0x1, 0x8, 0x1, 0xffffffff, 0x9, 0x7fff, 0x1, 0x3, 0x6, 0x8001, 0x8001, 0xffff7fff, 0xfffffffb, 0x7, 0x5, 0xfffff2dc, 0x7, 0x5, 0x7, 0x401, 0x9, 0x7, 0x8000, 0x4, 0x2a0, 0xd1, 0x100, 0x0, 0x8, 0xfff, 0xb, 0xfff, 0x5, 0x9, 0xb928, 0x8, 0x5, 0x9, 0x6, 0x6, 0x1, 0xc5dc, 0x9, 0x0, 0x7, 0x1, 0x993, 0x9, 0x6, 0x1, 0x9, 0x9f, 0x5, 0xf, 0x2d9f, 0x7, 0x3, 0x8, 0x4, 0x3, 0xffffffff, 0x7f, 0x632, 0x7fffffff, 0x8, 0x4c, 0x5, 0x3ff, 0x7, 0x3, 0x3, 0x5, 0xdcb, 0x0, 0x7fff, 0x7, 0x7, 0x3, 0x4, 0x9, 0x2, 0xfffffd74, 0x7fffffff, 0x100, 0x8, 0x4, 0x9, 0x1, 0x6, 0x40, 0x3, 0x6, 0x2, 0x4, 0xe06e, 0x100, 0x5, 0x0, 0x3, 0x6, 0x800, 0x9, 0x60000, 0x13015288, 0x4d4b, 0x2, 0x33e, 0x66e, 0x4, 0x6, 0xffffffff, 0x2, 0x1, 0x3, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x30f9, 0xa, 0x1, {0x9, 0x2, 0x4, 0x0, 0x0, 0xff}, {0x51, 0x0, 0xb, 0x0, 0x7, 0x1}, 0x10, 0xffffffff, 0xaa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1640}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xf52, 0x0, 0xee08, 0x6, 0x3, 0x5, 0x2, 0x7ff, 0xd, 0x2, 0x3, 0x3, 0x5, 0xf, 0xe7fc, 0x9, 0x8, 0x9, 0x7f, 0x4, 0x79, 0x8, 0xef, 0x2, 0x9, 0x9, 0xffff, 0x7e31, 0xb, 0x4, 0xff, 0x0, 0xffffffff, 0xfffffb76, 0x0, 0x800, 0x2, 0x6, 0xe, 0x4, 0x2c1, 0x5, 0xfffffffd, 0x10001, 0x5, 0xfffffabd, 0x784, 0xc, 0x5ee5, 0x4, 0x6, 0x5, 0x9, 0x1, 0x9, 0x6, 0x1, 0x3, 0x7f, 0x1, 0x82, 0x8, 0x4, 0x9, 0x4, 0x5, 0x7, 0x1, 0x50d, 0x7, 0x1, 0x5, 0x0, 0xe63, 0x3962, 0x4, 0x352, 0xa, 0x8, 0x80000000, 0x4, 0x5, 0x401, 0x1, 0x4, 0x0, 0x7f, 0x4000000, 0x56, 0xfffffffa, 0x9, 0x5, 0x5, 0xffffffff, 0x10, 0x4, 0x3ff, 0x2, 0x6, 0x0, 0x3, 0x18, 0x10, 0x9, 0xb, 0x3, 0x6, 0x3, 0x1ff, 0x8264, 0x0, 0x6, 0x22, 0x80000001, 0xffffbc73, 0x8ecb, 0x2912, 0x6, 0x3, 0xfffffff7, 0x7fff, 0x100, 0x4, 0x3, 0x100, 0xa, 0xa, 0x9, 0x9, 0x6, 0x6, 0x8, 0xdad0, 0x800, 0x1, 0x5, 0xe9a, 0x71, 0x9, 0x6, 0x2, 0x6, 0x3, 0x188, 0xfffffffc, 0x0, 0x8f3b, 0x0, 0x4, 0x0, 0x8, 0x1, 0x213c000, 0x5, 0x8, 0x4, 0x5, 0x0, 0x4, 0x6, 0x8, 0xfffffffc, 0x36f6f7d2, 0x8, 0x100, 0x27d95b7f, 0xfffffffe, 0x9, 0xff, 0x5e6c, 0x8, 0x0, 0x8, 0x2, 0x2, 0x9, 0x0, 0x4, 0xffff, 0x2, 0x4, 0xa8c7, 0xf, 0xfffffff9, 0x80000001, 0x5, 0x9, 0x5d, 0xf, 0xf, 0x29, 0x6b, 0x1, 0x7, 0x3, 0x8, 0x7fffffff, 0x7, 0x3ff, 0x5, 0x3, 0x200, 0x7fff, 0x8, 0x8, 0x8, 0x4, 0x9, 0x7, 0x7ff, 0x6, 0x40, 0x7, 0x3, 0x7f, 0xc, 0x0, 0x80000001, 0x6, 0x6, 0x1, 0x79f, 0x72, 0xffff0001, 0x0, 0x1, 0x9, 0x84f, 0xfffffffc, 0xffffffc3, 0x0, 0x9, 0x400, 0x7f, 0xcf, 0x0, 0xfffffffa, 0xff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x8, 0x9, 0x1, 0x4000, 0x3, 0xffffffff, 0x7c0, 0xc, 0xf, 0x9, 0x9, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x9, 0x8, 0x36, {0x7, 0x0, 0x3, 0x3, 0x0, 0x8}, {0xa, 0x0, 0x7ff, 0x9, 0x5, 0x10}, 0x40, 0x10, 0x2}}]]}, {0x38, 0x6, "aff63017ec41ff158851cc697c74b4443aace2bc186f91f6c0689ba2c23d407f2d417e5fd39cd804ca11ce1b58fa3392103aead2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0xe0, 0xb, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8a1e}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "411a9764e27d70084dfc7091494cdb70"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_CT_ACTION={0x6, 0x3, 0x30}]}, {0x63, 0x6, "c025238870931b5b0d306bb3946cf264768b293fedb86bf7f763d1586a12818fdea7415fcb8cb423c1d3659323e41dced056c769f59b987517e233a190e9f46daa2f2b1ad57e2a60712196335726cc67a3f06210ddf1525d325f163b6cbe1a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_gact={0xe4, 0x1b, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c85, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1235, 0x3}}]}, {0x9f, 0x6, "c54f1cbb2d8b59bfc53a79855cdcbc0ce52037afd8649d034abac2910ca4a2bfdeb1e63a11d8804547d1ac60c55e75c50760b5f8a043903124ae7e886150cde1fff98baed3352eb5cc7cea42a0517a2852a5df0a0d2d432e0d27e5e31c4ed6d9ea7ebd7c6ad43e16601ab949312f695b6e1383b92b58583d503adeb9af242d48389080499004d568a2797e9147e2714ac2385c1248f00d02551de6"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xd0, 0x1f, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x2, 0x20000000, 0x3, 0x9}, 0xa6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xc1e, 0x3, 0x4, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7ff, 0x8, 0x5}, 0x2fc5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x8, 0x80000000, 0x3}, 0xe}}]}, {0x30, 0x6, "6929465169db6409bc708ffefcb78ff2871eb6be2b3e766416a33eb8a6adcce3d7573cda9b6b10fac36aeb80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_ACT={0xe4, 0x4, [@m_ife={0xe0, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x74b}, @TCA_IFE_TYPE={0x6, 0x5, 0xe}, @TCA_IFE_TYPE={0x6, 0x5, 0xf}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xff}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x84, 0x6, "ea2b676d1ddc1288fef4afd6e5bf53f1e038f0bb98b3c14b423a24c520b4c27b064ca2c19bea679bd388058839ed8b6a61c8f1425f32e51585082965f900c0664b77a69515d065c9f18251ef436aa11c15a88a8de8063e9ba41bcf2908f838a4ec3c8901b860ab5d7ced674c25167323debaf548c7ed372e0f1cb0b957356549"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x401}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x3194}, 0x1, 0x0, 0x0, 0x40448a0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c"], 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f0000002480)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) ftruncate(r3, 0x20cf01) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffff8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000687c24b680d5501ec88a83208be1e65468a07b6dee5ee28349684574605b5586078492d41ec8d88637fc9881cad25fde6246342fbca0c52bccae22ba082eb674a60fa1e566d572178c83db52151279b5d771b29fb1e3cdabd85da4891ac8f4d57c9e31a08c0508d4fc816f98a225bb5e5bb7f4a092328cdb2cd3d2bef4974284297e54875eb80edd05146ab4635b8310385318e916915f2841e7193cfc4153e08b60a1f2c67f4b45b098c03e1a5cfc5378b21de9fe2f0e131fb2817c96d7", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='ext4_free_inode\x00', r9}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) 857.714405ms ago: executing program 4 (id=989): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7d3, &(0x7f0000003780)="$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") r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") unlink(&(0x7f0000000180)='./file1\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fdatasync(r1) fsync(r1) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000005c0)=""/186, 0xba}, {0x0}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000001580)=""/4099, 0x1003}], 0x6}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b6300800000000000000224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a000100777061a9a6b6"], 0x20}}, 0x0) listen(r3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="11000000000000000001000001000000ff0000000000000014000000000000000000000002000000a300000000000000140000000000000000000000010000001900000000000000e8000000000000000000000007000000861b000000030109"], 0x130}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r3, &(0x7f0000000700)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @private1}, 0x1c) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002980), 0x1, 0x0) pwritev(r7, &(0x7f00000042c0)=[{&(0x7f00000041c0)="753455e89f", 0x5}], 0x1, 0x2, 0x4) 766.518912ms ago: executing program 3 (id=990): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="a5", 0x1, 0x8e46) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000000)={0x1}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) fspick(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) 765.826752ms ago: executing program 3 (id=991): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x4800) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r6}, 0x10) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d418000000000000002900000002000000", 0xfe60) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="49e300000000000000000f0000002e577ffef865c08fc7d55fff025072a8f64b7836d72c7c2e97d3a9a0861c9aec7e90c4936c9e20"], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) 686.932969ms ago: executing program 2 (id=992): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x6, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000ac14141d000000000000000000000006ac1414bb00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500e0000002000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000002b00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000006c00000002000000fc01000000000000000000000000000000000000040000"], 0x1fc}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10132) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000100000a00000006000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000080000000000000000000000000000000000000faffbffffffffffff4ff000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000a0010000100000000000000"], 0xc4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) rename(&(0x7f0000000600)='./file0\x00', 0x0) 565.55048ms ago: executing program 0 (id=993): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004d0000480000000000059078ac1414000a01010044140503ffffffff0000000000000000000000008907ce0000000083030000000000000066b0a485ccd159b1fb5b192454d2053b1da0a50576efa1689c3b95376cb40d8db9e118b3130d8506ccceb5da61a01fd32e594830bf038feeb3a7aafa0b9875c6c0b724a2d37352ee86ff19ad6b61c223466d56ea7a1cdeee31a2025ca723481f7e193fab604061f1cc505cdba8561a6acdbf71583519f3bbc75ff70e9cf19d3e9204bbc95edb75a3149a8b99010ba6fd7e8b20af22c572e85ce0bff4004c82ed7d0666", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/14]) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000207900431840000102030109022d0014bb06a305090400080103010309092105000001223d0d0905810340000e7f200905020300020804df"], &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x50, 0x4, 0x3, 0x40, 0x3}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xe}}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000f80)='./file0\x00', 0x2000002, &(0x7f0000000fc0)={[], [{@subj_user={'subj_user', 0x3d, '/dev/sg#\x00'}}]}, 0x0, 0x52e, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000900), 0x0, 0x482) set_mempolicy(0x2002, 0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000425000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x1, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f00000000c0), 0xfffffff4) 82.643362ms ago: executing program 1 (id=994): r0 = syz_io_uring_setup(0x100207, &(0x7f0000000540)={0x0, 0x4000000, 0x40, 0x1, 0x1f8}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x6d3, &(0x7f00000008c0), &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x67, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x528a, 0x4ef6, 0x8, 0x0, 0x0) r3 = epoll_create1(0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000002380)=ANY=[], &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000280)={0x14823545fa636de0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0xc000400e}) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}, {}], 0x3, 0x3f0d6348, 0x0, 0x2a) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001414) ioctl$TUNSETOFFLOAD(r7, 0x40047452, 0x40323f827c0000) shutdown(r4, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000012c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) close(r4) 0s ago: executing program 4 (id=995): syz_open_procfs(0x0, 0x0) setreuid(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0xfffb, 0x8, 0x8, 0x1}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) iopl(0x3) unshare(0x20040600) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1001f0) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r6, 0x1269, r8) epoll_pwait2(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) kernel console output (not intermixed with test programs): l+0x278d/0x2d60 [ 100.631553][ T6670] do_syscall_64+0xc9/0x1c0 [ 100.636042][ T6670] ? clear_bhb_loop+0x55/0xb0 [ 100.640778][ T6670] ? clear_bhb_loop+0x55/0xb0 [ 100.645566][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.651469][ T6670] RIP: 0033:0x7f0b37dfcef9 [ 100.655877][ T6670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.675647][ T6670] RSP: 002b:00007f0b36a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.684067][ T6670] RAX: ffffffffffffffda RBX: 00007f0b37fb5f80 RCX: 00007f0b37dfcef9 [ 100.692125][ T6670] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 100.700086][ T6670] RBP: 00007f0b37e6f046 R08: 0000000000000020 R09: 0000000000000000 [ 100.708064][ T6670] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 100.716221][ T6670] R13: 0000000000000000 R14: 00007f0b37fb5f80 R15: 00007ffd392a2a88 [ 100.724275][ T6670] [ 100.727535][ T6670] Mem-Info: [ 100.730694][ T6670] active_anon:5359 inactive_anon:2 isolated_anon:0 [ 100.730694][ T6670] active_file:4333 inactive_file:19881 isolated_file:0 [ 100.730694][ T6670] unevictable:0 dirty:313 writeback:0 [ 100.730694][ T6670] slab_reclaimable:2643 slab_unreclaimable:14242 [ 100.730694][ T6670] mapped:23287 shmem:3170 pagetables:514 [ 100.730694][ T6670] sec_pagetables:0 bounce:0 [ 100.730694][ T6670] kernel_misc_reclaimable:0 [ 100.730694][ T6670] free:1894582 free_pcp:11619 free_cma:0 [ 100.775946][ T6670] Node 0 active_anon:21436kB inactive_anon:8kB active_file:17332kB inactive_file:79524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93148kB dirty:1252kB writeback:0kB shmem:12680kB writeback_tmp:0kB kernel_stack:3152kB pagetables:2056kB sec_pagetables:0kB all_unreclaimable? no [ 100.804084][ T6670] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.831034][ T6670] lowmem_reserve[]: 0 2866 7844 0 [ 100.836068][ T6670] Node 0 DMA32 free:2950336kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953968kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 100.864791][ T6670] lowmem_reserve[]: 0 0 4978 0 [ 100.869625][ T6670] Node 0 Normal free:4612632kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:21436kB inactive_anon:8kB active_file:17332kB inactive_file:79524kB unevictable:0kB writepending:1252kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:42840kB local_pcp:10348kB free_cma:0kB [ 100.899930][ T6670] lowmem_reserve[]: 0 0 0 0 [ 100.904422][ T6670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.917081][ T6670] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950336kB [ 100.933133][ T6670] Node 0 Normal: 177*4kB (UM) 81*8kB (UME) 54*16kB (UME) 79*32kB (UME) 321*64kB (UME) 198*128kB (UME) 118*256kB (UME) 69*512kB (UME) 39*1024kB (UME) 28*2048kB (UME) 1074*4096kB (UM) = 4612556kB [ 100.952475][ T6670] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 100.961770][ T6670] 27414 total pagecache pages [ 100.966436][ T6670] 2 pages in swap cache [ 100.970570][ T6670] Free swap = 124668kB [ 100.974702][ T6670] Total swap = 124996kB [ 100.978848][ T6670] 2097051 pages RAM [ 100.982716][ T6670] 0 pages HighMem/MovableOnly [ 100.987472][ T6670] 80167 pages reserved [ 101.029131][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.039777][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.049606][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.060149][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.072978][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.093378][ T6552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102200][ T6552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.110984][ T6552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.119815][ T6552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.124575][ T6681] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.137053][ T6681] vhci_hcd: invalid port number 219 [ 101.142302][ T6681] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 101.153630][ T6679] sctp: [Deprecated]: syz.2.613 (pid 6679) Use of int in maxseg socket option. [ 101.153630][ T6679] Use struct sctp_assoc_value instead [ 101.161269][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.189613][ T6679] loop2: detected capacity change from 0 to 512 [ 101.196747][ T4543] bridge_slave_1: left allmulticast mode [ 101.202390][ T4543] bridge_slave_1: left promiscuous mode [ 101.207553][ T6679] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 101.208142][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.226405][ T4543] bridge_slave_0: left allmulticast mode [ 101.232121][ T4543] bridge_slave_0: left promiscuous mode [ 101.236973][ T29] audit: type=1400 audit(1725692481.233:13737): avc: denied { block_suspend } for pid=6678 comm="syz.2.613" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.237842][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.263145][ T29] audit: type=1400 audit(1725692481.263:13738): avc: denied { execute } for pid=6682 comm="syz.0.615" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 101.378155][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.399722][ T4543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.410347][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.421307][ T4543] bond0 (unregistering): Released all slaves [ 101.478761][ T6595] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.512279][ T4543] hsr_slave_0: left promiscuous mode [ 101.518395][ T4543] hsr_slave_1: left promiscuous mode [ 101.528076][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.535646][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.554327][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.561961][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.563973][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.577957][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.586638][ T4543] veth1_macvtap: left promiscuous mode [ 101.592200][ T4543] veth0_macvtap: left promiscuous mode [ 101.598112][ T4543] veth1_vlan: left promiscuous mode [ 101.603648][ T4543] veth0_vlan: left promiscuous mode [ 101.709066][ T4543] team0 (unregistering): Port device team_slave_1 removed [ 101.725575][ T4543] team0 (unregistering): Port device team_slave_0 removed [ 101.784196][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.791358][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.799980][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.807047][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.899112][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.997125][ T6595] veth0_vlan: entered promiscuous mode [ 102.003051][ T6707] loop2: detected capacity change from 0 to 2048 [ 102.018766][ T6595] veth1_vlan: entered promiscuous mode [ 102.025646][ T6623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.036773][ T6623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.043525][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.059045][ T29] audit: type=1326 audit(1725692482.033:13739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 102.064614][ T6623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.082633][ T29] audit: type=1326 audit(1725692482.033:13740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 102.082685][ T29] audit: type=1326 audit(1725692482.033:13741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 102.082789][ T29] audit: type=1326 audit(1725692482.033:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 102.182463][ T6623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.211827][ T6707] syzkaller0: entered allmulticast mode [ 102.220326][ T6595] veth0_macvtap: entered promiscuous mode [ 102.237210][ T6595] veth1_macvtap: entered promiscuous mode [ 102.282379][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.293103][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.303094][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.313571][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.327721][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.346745][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.357632][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.367513][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.378257][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.389225][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.407327][ T5659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.411264][ T6595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.425224][ T6595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.434007][ T6595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.442776][ T6595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.463460][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.473750][ T6723] loop2: detected capacity change from 0 to 128 [ 102.481540][ T6723] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 102.485322][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.507969][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.515357][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.531616][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.538703][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.602523][ T6729] loop2: detected capacity change from 0 to 512 [ 102.638656][ T6623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.756200][ T6623] veth0_vlan: entered promiscuous mode [ 102.764887][ T6623] veth1_vlan: entered promiscuous mode [ 102.781026][ T6623] veth0_macvtap: entered promiscuous mode [ 102.788988][ T6750] usb usb1: usbfs: process 6750 (syz.2.625) did not claim interface 1 before use [ 102.790338][ T6623] veth1_macvtap: entered promiscuous mode [ 102.809065][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.819598][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.829521][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.840072][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.849904][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.860576][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.871330][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.885069][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.895671][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.905484][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.916038][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.925836][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.936310][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.947179][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.958810][ T6623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.967616][ T6623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.976592][ T6623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.985356][ T6623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.589170][ T6773] loop2: detected capacity change from 0 to 512 [ 103.602067][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.613816][ T6773] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 103.862086][ T6753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.969444][ T995] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 103.977479][ T995] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 104.009557][ T6797] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.634'. [ 104.010190][ T995] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 104.028459][ T6789] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.634'. [ 104.040963][ T995] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 104.103337][ T6805] loop4: detected capacity change from 0 to 512 [ 104.121472][ T6805] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 104.152632][ T6805] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 104.198565][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.636'. [ 104.468493][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'. [ 104.557151][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 104.557167][ T29] audit: type=1326 audit(1725692484.483:13905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.587386][ T29] audit: type=1326 audit(1725692484.483:13906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.611042][ T29] audit: type=1326 audit(1725692484.483:13907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.637384][ T29] audit: type=1326 audit(1725692484.583:13908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52f47ccf33 code=0x7ffc0000 [ 104.660715][ T29] audit: type=1326 audit(1725692484.583:13909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52f47ccf33 code=0x7ffc0000 [ 104.684024][ T29] audit: type=1326 audit(1725692484.583:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.707493][ T29] audit: type=1326 audit(1725692484.583:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.730941][ T29] audit: type=1326 audit(1725692484.613:13912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.754498][ T29] audit: type=1326 audit(1725692484.613:13913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.778246][ T29] audit: type=1326 audit(1725692484.613:13914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 104.805908][ T6836] loop2: detected capacity change from 0 to 256 [ 104.813782][ T6836] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.853314][ T6841] loop3: detected capacity change from 0 to 128 [ 104.862115][ T6841] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.644: iget: checksum invalid [ 104.873791][ T6841] EXT4-fs (loop3): get root inode failed [ 104.879475][ T6841] EXT4-fs (loop3): mount failed [ 105.005190][ T6852] loop3: detected capacity change from 0 to 512 [ 105.006940][ T6847] loop2: detected capacity change from 0 to 512 [ 105.014383][ T6852] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.650: casefold flag without casefold feature [ 105.018360][ T6847] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.037838][ T6852] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.650: couldn't read orphan inode 15 (err -117) [ 105.054358][ T6852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.058519][ T6847] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.075910][ T6847] EXT4-fs (loop2): blocks per group (256) and clusters per group (32768) inconsistent [ 105.122106][ T6859] loop4: detected capacity change from 0 to 512 [ 105.888822][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.935396][ T6876] loop3: detected capacity change from 0 to 256 [ 105.944607][ T6876] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.101378][ T6886] loop3: detected capacity change from 0 to 512 [ 106.205169][ T6886] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 106.236866][ T6886] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 106.291885][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 106.559157][ T6903] loop3: detected capacity change from 0 to 512 [ 107.032112][ T6916] loop3: detected capacity change from 0 to 1024 [ 107.041848][ T6916] EXT4-fs: Ignoring removed orlov option [ 107.047582][ T6916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.056407][ T6916] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.067374][ T6916] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 107.078080][ T6916] EXT4-fs (loop3): invalid journal inode [ 107.083820][ T6916] EXT4-fs (loop3): can't get journal size [ 107.099222][ T6916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.132198][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.669'. [ 107.164716][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.507128][ T6934] loop4: detected capacity change from 0 to 256 [ 107.517595][ T6935] loop2: detected capacity change from 0 to 4096 [ 107.518133][ T6934] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.536921][ T995] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 107.544611][ T995] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 107.552532][ T995] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 107.557795][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.560506][ T995] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 107.615744][ T6935] loop2: detected capacity change from 4096 to 0 [ 107.623223][ T6935] bio_check_eod: 10 callbacks suppressed [ 107.623237][ T6935] syz.2.685: attempt to access beyond end of device [ 107.623237][ T6935] loop2: rw=12288, sector=640, nr_sectors = 8 limit=0 [ 107.642548][ T6935] syz.2.685: attempt to access beyond end of device [ 107.642548][ T6935] loop2: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 107.656436][ T6935] syz.2.685: attempt to access beyond end of device [ 107.656436][ T6935] loop2: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 107.671095][ T6935] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #12: block 4: comm syz.2.685: unable to read itable block [ 107.684236][ T6935] syz.2.685: attempt to access beyond end of device [ 107.684236][ T6935] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 107.685226][ T6937] netlink: 100 bytes leftover after parsing attributes in process `syz.2.685'. [ 107.697454][ T6935] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 107.702173][ T6935] EXT4-fs (loop2): I/O error while writing superblock [ 107.721610][ T6935] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 107.731999][ T6935] syz.2.685: attempt to access beyond end of device [ 107.731999][ T6935] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 107.745342][ T6935] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 107.756080][ T3396] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 107.763863][ T3396] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 107.773625][ T3396] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 107.781643][ T6935] EXT4-fs (loop2): I/O error while writing superblock [ 107.788586][ T6935] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #12: comm syz.2.685: mark_inode_dirty error [ 107.800234][ T6935] syz.2.685: attempt to access beyond end of device [ 107.800234][ T6935] loop2: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 107.813421][ T6935] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 107.822112][ T3396] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 107.842259][ T6935] EXT4-fs (loop2): I/O error while writing superblock [ 107.849551][ T6937] syz.2.685: attempt to access beyond end of device [ 107.849551][ T6937] loop2: rw=12288, sector=640, nr_sectors = 8 limit=0 [ 107.859661][ T6945] loop3: detected capacity change from 0 to 512 [ 107.884558][ T5659] syz-executor: attempt to access beyond end of device [ 107.884558][ T5659] loop2: rw=12288, sector=128, nr_sectors = 8 limit=0 [ 107.900956][ T6945] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.908310][ T5659] syz-executor: attempt to access beyond end of device [ 107.908310][ T5659] loop2: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 107.916692][ T6945] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 107.929309][ T5659] syz-executor: attempt to access beyond end of device [ 107.929309][ T5659] loop2: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 107.936980][ T6945] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 107.957267][ T6945] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.677: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 107.975675][ T6945] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.677: couldn't read orphan inode 13 (err -117) [ 107.987672][ T5659] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #2: block 4: comm syz-executor: unable to read itable block [ 108.000832][ T6945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.013219][ T5659] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 108.021562][ T5659] EXT4-fs (loop2): I/O error while writing superblock [ 108.028415][ T5659] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 108.045597][ T5659] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 108.053871][ T5659] EXT4-fs (loop2): I/O error while writing superblock [ 108.060899][ T5659] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 108.072808][ T6952] syz.4.681[6952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.072854][ T6952] syz.4.681[6952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.073122][ T5659] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 108.104216][ T5659] EXT4-fs (loop2): I/O error while writing superblock [ 108.118908][ T3665] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4559: inode #12: block 4: comm kworker/u8:10: unable to read itable block [ 108.133067][ T3665] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 108.139613][ T6952] syz.4.681[6952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.141344][ T6952] syz.4.681[6952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.143058][ T3665] EXT4-fs (loop2): I/O error while writing superblock [ 108.171567][ T3665] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:10: unable to read itable block [ 108.186871][ T3665] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 108.195150][ T3665] EXT4-fs (loop2): I/O error while writing superblock [ 108.202486][ T5659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.212344][ T5659] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 108.696128][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.741061][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.748577][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.756285][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.764220][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.771858][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.779607][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.787737][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.795503][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.802905][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.810311][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.817747][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.825118][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.832612][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.840053][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.847453][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.854830][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.862222][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.869616][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.877081][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.884524][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.892008][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.899455][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.906846][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.914227][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.921609][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.929087][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.936526][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.943904][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.951315][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.958778][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.966190][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.973597][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.981126][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.988704][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.996121][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.003511][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.011143][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.018593][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.026017][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.033441][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.040812][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.048327][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.055852][ T3335] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 109.064114][ T3335] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.079700][ T1339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.103428][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 109.112272][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.119787][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.129778][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.137326][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.176990][ T1339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.202159][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.233280][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.341115][ T1339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.389594][ T1339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.562112][ T1339] veth0_to_bond: left allmulticast mode [ 109.567727][ T1339] veth0_to_bond: left promiscuous mode [ 109.573384][ T1339] bridge0: port 3(veth0_to_bond) entered disabled state [ 109.584013][ T1339] bridge_slave_1: left allmulticast mode [ 109.589861][ T1339] bridge_slave_1: left promiscuous mode [ 109.595730][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.605076][ T1339] bridge_slave_0: left allmulticast mode [ 109.610771][ T1339] bridge_slave_0: left promiscuous mode [ 109.616461][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.768397][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.778907][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.789747][ T1339] bond0 (unregistering): Released all slaves [ 109.822782][ T6968] chnl_net:caif_netlink_parms(): no params data found [ 109.859913][ T1339] hsr_slave_0: left promiscuous mode [ 109.866110][ T1339] hsr_slave_1: left promiscuous mode [ 109.875483][ T1339] veth1_macvtap: left promiscuous mode [ 109.881061][ T1339] veth0_macvtap: left promiscuous mode [ 109.886570][ T1339] veth1_vlan: left promiscuous mode [ 109.891783][ T1339] veth0_vlan: left promiscuous mode [ 110.000967][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 110.022042][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 110.181872][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.188981][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.241202][ T6968] bridge_slave_0: entered allmulticast mode [ 110.291944][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 110.303820][ T6999] loop3: detected capacity change from 0 to 256 [ 110.317589][ T6968] bridge_slave_0: entered promiscuous mode [ 110.380029][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.387131][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.442750][ T6968] bridge_slave_1: entered allmulticast mode [ 110.475602][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 110.475616][ T29] audit: type=1400 audit(1725692490.463:14251): avc: denied { connect } for pid=6996 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.511350][ T6968] bridge_slave_1: entered promiscuous mode [ 110.630105][ T6968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.653466][ T6968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.700429][ T6968] team0: Port device team_slave_0 added [ 110.714425][ T6968] team0: Port device team_slave_1 added [ 110.748785][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.755898][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.781970][ T6968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.815451][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.822500][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.848585][ T6968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.940326][ T6968] hsr_slave_0: entered promiscuous mode [ 110.947112][ T6968] hsr_slave_1: entered promiscuous mode [ 110.967576][ T7005] pim6reg1: entered promiscuous mode [ 110.972886][ T7005] pim6reg1: entered allmulticast mode [ 111.032247][ T6998] syz.3.692 (6998) used greatest stack depth: 7384 bytes left [ 112.106196][ T29] audit: type=1326 audit(1725692492.013:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 112.130006][ T29] audit: type=1326 audit(1725692492.013:14253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 112.284550][ T7028] sctp: [Deprecated]: syz.4.698 (pid 7028) Use of int in maxseg socket option. [ 112.284550][ T7028] Use struct sctp_assoc_value instead [ 112.310652][ T7028] loop4: detected capacity change from 0 to 512 [ 112.317901][ T7028] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 112.395010][ T6968] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.405046][ T7035] loop4: detected capacity change from 0 to 512 [ 112.412403][ T7035] ext4: Unknown parameter 'smackfsdef' [ 112.420978][ T6968] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.514374][ T6968] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.523671][ T6968] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.599915][ T6968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.708555][ T6968] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.737097][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.744493][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.774416][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.781591][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.883102][ T6968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.940885][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.968779][ T7056] sctp: [Deprecated]: syz.3.707 (pid 7056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.968779][ T7056] Use struct sctp_sack_info instead [ 113.993011][ T6968] veth0_vlan: entered promiscuous mode [ 114.006349][ T6968] veth1_vlan: entered promiscuous mode [ 114.021976][ T6968] veth0_macvtap: entered promiscuous mode [ 114.030205][ T6968] veth1_macvtap: entered promiscuous mode [ 114.041055][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.051688][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.060641][ T29] audit: type=1400 audit(1725692494.053:14254): avc: denied { getopt } for pid=7070 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.061585][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.084053][ T7071] loop4: detected capacity change from 0 to 512 [ 114.091398][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.100090][ T7071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.107411][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.107426][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.109899][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.148844][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.159476][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.166129][ T7071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.169346][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.188077][ T7072] loop3: detected capacity change from 0 to 8192 [ 114.192354][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.199534][ T7071] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.208456][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.208471][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.209874][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.235887][ T29] audit: type=1400 audit(1725692494.223:14255): avc: denied { mounton } for pid=7067 comm="syz.3.709" path="/20/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.243074][ T6968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.280627][ T6968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.289527][ T6968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.298320][ T6968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.312355][ T7071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.375033][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.383797][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.394032][ T29] audit: type=1400 audit(1725692494.393:14256): avc: denied { unmount } for pid=6595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 114.428284][ T7078] loop4: detected capacity change from 0 to 512 [ 114.434790][ T7078] ext4: Unknown parameter 'subj_user' [ 114.791758][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.884766][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.908088][ T29] audit: type=1326 audit(1725692494.893:14257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb674cef9 code=0x7ffc0000 [ 114.931612][ T29] audit: type=1326 audit(1725692494.893:14258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb674cef9 code=0x7ffc0000 [ 114.955601][ T29] audit: type=1326 audit(1725692494.903:14259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bb674cef9 code=0x7ffc0000 [ 114.979332][ T29] audit: type=1326 audit(1725692494.903:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb674cef9 code=0x7ffc0000 [ 115.904724][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 115.904767][ T29] audit: type=1326 audit(1725692495.893:14282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 115.934588][ T29] audit: type=1326 audit(1725692495.893:14283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 115.958168][ T29] audit: type=1326 audit(1725692495.893:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 115.981676][ T29] audit: type=1326 audit(1725692495.893:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.005117][ T29] audit: type=1326 audit(1725692495.893:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.028600][ T29] audit: type=1326 audit(1725692495.893:14287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.051994][ T29] audit: type=1326 audit(1725692495.893:14288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.075481][ T29] audit: type=1326 audit(1725692495.893:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.098973][ T29] audit: type=1326 audit(1725692495.893:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.122400][ T29] audit: type=1326 audit(1725692495.893:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x7ffc0000 [ 116.230470][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 116.239380][ T7113] openvswitch: netlink: Flow key attr not present in new flow. [ 116.250954][ T7113] bridge0: port 3(vlan2) entered blocking state [ 116.257310][ T7113] bridge0: port 3(vlan2) entered disabled state [ 116.266932][ T7113] vlan2: entered allmulticast mode [ 116.274389][ T7113] vlan2: left allmulticast mode [ 116.336277][ T7124] loop3: detected capacity change from 0 to 512 [ 116.359218][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.379719][ T7124] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.507123][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.527335][ T7133] loop3: detected capacity change from 0 to 128 [ 116.535441][ T7133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.780485][ T7133] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.318170][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.325013][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.334876][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.345147][ T7146] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 117.372438][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.384443][ T6595] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.394652][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.409361][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.443855][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.464061][ T7146] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.667247][ T7155] usb usb1: usbfs: process 7155 (syz.0.731) did not claim interface 1 before use [ 118.024838][ T7168] loop2: detected capacity change from 0 to 512 [ 118.031634][ T7168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.043222][ T7168] EXT4-fs (loop2): 1 orphan inode deleted [ 118.049112][ T7168] EXT4-fs (loop2): 1 truncate cleaned up [ 118.055130][ T7168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.085062][ T7158] syz.2.733: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 118.099902][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.2.733 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 118.110534][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.120578][ T7158] Call Trace: [ 118.123859][ T7158] [ 118.126847][ T7158] dump_stack_lvl+0xf2/0x150 [ 118.131454][ T7158] dump_stack+0x15/0x20 [ 118.135683][ T7158] warn_alloc+0x145/0x1b0 [ 118.140071][ T7158] ? __schedule+0x5fa/0x950 [ 118.144591][ T7158] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 118.150549][ T7158] __vmalloc_node_range_noprof+0xaa/0xec0 [ 118.156282][ T7158] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.161568][ T7158] ? __rcu_read_unlock+0x4e/0x70 [ 118.166538][ T7158] ? avc_has_perm_noaudit+0x1cc/0x210 [ 118.171951][ T7158] ? xskq_create+0x36/0xd0 [ 118.176405][ T7158] vmalloc_user_noprof+0x59/0x70 [ 118.181372][ T7158] ? xskq_create+0x79/0xd0 [ 118.185819][ T7158] xskq_create+0x79/0xd0 [ 118.190080][ T7158] xsk_init_queue+0x82/0xd0 [ 118.194587][ T7158] xsk_setsockopt+0x409/0x520 [ 118.199504][ T7158] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.204719][ T7158] __sys_setsockopt+0x1d8/0x250 [ 118.209568][ T7158] __x64_sys_setsockopt+0x66/0x80 [ 118.214615][ T7158] x64_sys_call+0x278d/0x2d60 [ 118.219289][ T7158] do_syscall_64+0xc9/0x1c0 [ 118.223811][ T7158] ? clear_bhb_loop+0x55/0xb0 [ 118.228507][ T7158] ? clear_bhb_loop+0x55/0xb0 [ 118.233195][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.239199][ T7158] RIP: 0033:0x7f5bb674cef9 [ 118.243603][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.263231][ T7158] RSP: 002b:00007f5bb53c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.271637][ T7158] RAX: ffffffffffffffda RBX: 00007f5bb6905f80 RCX: 00007f5bb674cef9 [ 118.279599][ T7158] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 118.287625][ T7158] RBP: 00007f5bb67bf046 R08: 0000000000000020 R09: 0000000000000000 [ 118.295672][ T7158] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 118.303728][ T7158] R13: 0000000000000000 R14: 00007f5bb6905f80 R15: 00007ffc00434718 [ 118.311698][ T7158] [ 118.314940][ T7158] Mem-Info: [ 118.318268][ T7158] active_anon:23592 inactive_anon:2 isolated_anon:0 [ 118.318268][ T7158] active_file:3872 inactive_file:17923 isolated_file:0 [ 118.318268][ T7158] unevictable:0 dirty:237 writeback:0 [ 118.318268][ T7158] slab_reclaimable:2664 slab_unreclaimable:14014 [ 118.318268][ T7158] mapped:26691 shmem:21201 pagetables:638 [ 118.318268][ T7158] sec_pagetables:0 bounce:0 [ 118.318268][ T7158] kernel_misc_reclaimable:0 [ 118.318268][ T7158] free:1884911 free_pcp:3783 free_cma:0 [ 118.327734][ T7170] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 118.363715][ T7158] Node 0 active_anon:94484kB inactive_anon:8kB active_file:15488kB inactive_file:71692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106764kB dirty:948kB writeback:0kB shmem:84804kB writeback_tmp:0kB kernel_stack:3344kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no [ 118.371988][ T7170] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.374294][ T7170] EXT4-fs (loop2): Remounting filesystem read-only [ 118.399867][ T7158] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.399925][ T7158] lowmem_reserve[]: 0 2866 7844 0 [ 118.400018][ T7158] Node 0 DMA32 free:2950336kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953968kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 118.447157][ T7158] lowmem_reserve[]: 0 0 4978 0 [ 118.447248][ T7158] Node 0 Normal free:4573820kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:94252kB inactive_anon:8kB active_file:15488kB inactive_file:71692kB unevictable:0kB writepending:948kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:12024kB local_pcp:10160kB free_cma:0kB [ 118.447353][ T7158] lowmem_reserve[]: 0 0 0 0 [ 118.447379][ T7158] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.447547][ T7158] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950336kB [ 118.447695][ T7158] Node 0 Normal: 87*4kB (UME) 212*8kB (UME) 100*16kB (UE) 85*32kB (UME) 79*64kB (UE) 53*128kB (UE) 79*256kB (UME) 64*512kB (UME) 47*1024kB (UME) 17*2048kB (UME) 1079*4096kB (UM) = 4573724kB [ 118.447890][ T7158] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 118.447974][ T7158] 43000 total pagecache pages [ 118.447980][ T7158] 2 pages in swap cache [ 118.447986][ T7158] Free swap = 124412kB [ 118.447993][ T7158] Total swap = 124996kB [ 118.448000][ T7158] 2097051 pages RAM [ 118.448005][ T7158] 0 pages HighMem/MovableOnly [ 118.448012][ T7158] 80167 pages reserved [ 118.534381][ T7158] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 118.688993][ T6968] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.874728][ T7183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.885756][ T7183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.896458][ T7183] bond0 (unregistering): Released all slaves [ 119.328026][ T7199] loop3: detected capacity change from 0 to 128 [ 119.409558][ T7208] loop3: detected capacity change from 0 to 512 [ 119.416860][ T7208] EXT4-fs: Ignoring removed i_version option [ 119.423038][ T7208] EXT4-fs: Ignoring removed nobh option [ 119.429406][ T7208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.440912][ T7208] EXT4-fs (loop3): 1 truncate cleaned up [ 119.447136][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.982087][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.033823][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 120.042830][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.050451][ T7222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.060574][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.068022][ T7222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.141662][ T7226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.177270][ T7226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.194581][ T7226] bond0 (unregistering): Released all slaves [ 120.295833][ T7234] ip6gretap0 speed is unknown, defaulting to 1000 [ 120.598398][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 120.607327][ T7239] netlink: 'syz.4.754': attribute type 14 has an invalid length. [ 120.615087][ T7239] netlink: 'syz.4.754': attribute type 11 has an invalid length. [ 120.625342][ T7239] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.634115][ T7239] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.642871][ T7239] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.651645][ T7239] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.661606][ T7239] vxlan0: entered promiscuous mode [ 121.388382][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.397461][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.508479][ T7250] loop2: detected capacity change from 0 to 512 [ 121.518639][ T7250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 121.535110][ T7250] System zones: 0-2, 18-18, 34-34 [ 121.552780][ T7250] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.560519][ T7250] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 121.577078][ T7250] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 121.583962][ T7250] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.757: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.648399][ T7250] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.757: couldn't read orphan inode 13 (err -117) [ 121.714700][ T7250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.884478][ T6968] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.925694][ T7260] loop4: detected capacity change from 0 to 128 [ 122.124496][ T7271] ip6gretap0 speed is unknown, defaulting to 1000 [ 122.914017][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 122.914036][ T29] audit: type=1326 audit(1725692502.903:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.0.775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b37dfcef9 code=0x0 [ 123.079567][ T7281] syzkaller0: entered promiscuous mode [ 123.085094][ T7281] syzkaller0: entered allmulticast mode [ 123.157661][ T7287] loop2: detected capacity change from 0 to 128 [ 123.170910][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 123.344322][ T29] audit: type=1326 audit(1725692503.333:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.408293][ T29] audit: type=1326 audit(1725692503.363:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.431875][ T29] audit: type=1326 audit(1725692503.363:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.455318][ T29] audit: type=1326 audit(1725692503.363:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.494672][ T29] audit: type=1326 audit(1725692503.483:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.519270][ T29] audit: type=1326 audit(1725692503.483:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.697806][ T29] audit: type=1326 audit(1725692503.683:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.721333][ T29] audit: type=1326 audit(1725692503.683:14377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 123.744766][ T29] audit: type=1326 audit(1725692503.683:14378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 124.409863][ T7298] pim6reg1: entered promiscuous mode [ 124.415198][ T7298] pim6reg1: entered allmulticast mode [ 124.569759][ T7306] ip6gretap0 speed is unknown, defaulting to 1000 [ 124.952911][ T7314] loop4: detected capacity change from 0 to 512 [ 124.987721][ T7314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 124.996392][ T7314] System zones: 0-2, 18-18, 34-34 [ 125.005683][ T7314] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.024354][ T7314] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 125.048840][ T7314] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 125.065712][ T7314] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.774: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 125.088566][ T7314] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.774: couldn't read orphan inode 13 (err -117) [ 125.103988][ T7314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.221600][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.601090][ T7335] siw: device registration error -23 [ 125.794256][ T7342] ip6gretap0 speed is unknown, defaulting to 1000 [ 126.077774][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 126.086801][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.094302][ T7353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.103138][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.110722][ T7353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.124309][ T7355] bridge0: port 3(veth0_to_bond) entered blocking state [ 126.132447][ T7355] bridge0: port 3(veth0_to_bond) entered disabled state [ 126.151644][ T7355] veth0_to_bond: entered allmulticast mode [ 126.170582][ T7355] veth0_to_bond: entered promiscuous mode [ 126.182153][ T7355] bridge0: port 3(veth0_to_bond) entered blocking state [ 126.189451][ T7355] bridge0: port 3(veth0_to_bond) entered forwarding state [ 126.247018][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.255891][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.264509][ T7362] pim6reg1: entered promiscuous mode [ 126.270073][ T7362] pim6reg1: entered allmulticast mode [ 126.682040][ T7383] ip6gretap0 speed is unknown, defaulting to 1000 [ 127.075362][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.084170][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.087439][ T7393] team_slave_0: entered promiscuous mode [ 127.097563][ T7393] team_slave_1: entered promiscuous mode [ 127.103277][ T7393] vlan2: entered promiscuous mode [ 127.108488][ T7393] team0: entered promiscuous mode [ 127.115332][ T7393] team0: left promiscuous mode [ 127.120584][ T7393] team_slave_0: left promiscuous mode [ 127.125968][ T7393] team_slave_1: left promiscuous mode [ 127.368603][ T7402] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 127.392773][ T7403] loop2: detected capacity change from 0 to 1024 [ 127.400059][ T7403] EXT4-fs: Ignoring removed nobh option [ 127.417577][ T7403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.470810][ T7412] pim6reg1: entered promiscuous mode [ 127.476161][ T7412] pim6reg1: entered allmulticast mode [ 127.604222][ T7403] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 4 with error 28 [ 127.616459][ T7403] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.616459][ T7403] [ 127.626103][ T7403] EXT4-fs (loop2): Total free blocks count 0 [ 127.632074][ T7403] EXT4-fs (loop2): Free/Dirty block details [ 127.637976][ T7403] EXT4-fs (loop2): free_blocks=0 [ 127.642899][ T7403] EXT4-fs (loop2): dirty_blocks=0 [ 127.647936][ T7403] EXT4-fs (loop2): Block reservation details [ 127.653892][ T7403] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 127.674927][ T6968] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.684482][ T7420] bridge0: port 3(veth0_to_bond) entered blocking state [ 127.692388][ T7420] bridge0: port 3(veth0_to_bond) entered disabled state [ 127.702205][ T7420] veth0_to_bond: entered allmulticast mode [ 127.713151][ T7420] veth0_to_bond: entered promiscuous mode [ 127.782677][ T7428] syzkaller0: entered promiscuous mode [ 127.788175][ T7428] syzkaller0: entered allmulticast mode [ 128.015952][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 128.015967][ T29] audit: type=1326 audit(1725692508.013:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.048139][ T29] audit: type=1326 audit(1725692508.013:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.071935][ T29] audit: type=1326 audit(1725692508.013:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.095251][ T29] audit: type=1326 audit(1725692508.013:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.103751][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.118897][ T29] audit: type=1326 audit(1725692508.013:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.118969][ T29] audit: type=1326 audit(1725692508.013:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.125933][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.148605][ T29] audit: type=1326 audit(1725692508.013:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.181574][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.201718][ T29] audit: type=1326 audit(1725692508.013:14704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.201748][ T29] audit: type=1326 audit(1725692508.013:14705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x7ffc0000 [ 128.209636][ T7441] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 128.231594][ T29] audit: type=1326 audit(1725692508.013:14706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7438 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52f47fefe5 code=0x7ffc0000 [ 128.259781][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.270086][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.286502][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.310715][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.317455][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.324271][ T7441] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.347682][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.371656][ T7450] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 128.389961][ T7450] loop3: detected capacity change from 0 to 1024 [ 128.397759][ T7450] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.408963][ T7450] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.420168][ T7450] JBD2: no valid journal superblock found [ 128.425932][ T7450] EXT4-fs (loop3): Could not load journal inode [ 128.461064][ T7455] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 128.469336][ T7455] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 128.711816][ T7464] ip6gretap0 speed is unknown, defaulting to 1000 [ 128.718979][ T7464] ip6gretap0 speed is unknown, defaulting to 1000 [ 129.383998][ T7470] ip6gretap0 speed is unknown, defaulting to 1000 [ 129.390830][ T7470] ip6gretap0 speed is unknown, defaulting to 1000 [ 129.981552][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 130.011449][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 130.070389][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 130.076923][ T7502] siw: device registration error -23 [ 130.111626][ T7506] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 130.170330][ T7507] Process accounting resumed [ 130.224171][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.232825][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.260221][ T7512] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.013898][ T7527] loop4: detected capacity change from 0 to 8192 [ 131.020690][ T7527] vfat: Unknown parameter 'ÿÿ' [ 131.061208][ T7527] loop4: detected capacity change from 0 to 512 [ 131.081031][ T7527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.093959][ T7527] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.130729][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.643496][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.835'. [ 131.645129][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.662938][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.673614][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.835'. [ 131.701719][ T7544] loop3: detected capacity change from 0 to 2048 [ 131.718387][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.835'. [ 131.728375][ T7544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.774253][ T7544] syzkaller0: entered allmulticast mode [ 131.867060][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.880794][ T7565] loop4: detected capacity change from 0 to 512 [ 131.917200][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.930166][ T7565] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.952707][ T7569] Process accounting resumed [ 131.964363][ T7565] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.837: Directory hole found for htree leaf block 0 [ 132.066854][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.077201][ T7580] program syz.0.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.248983][ T7589] usb usb1: usbfs: process 7589 (syz.3.842) did not claim interface 1 before use [ 134.685428][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 134.685441][ T29] audit: type=1326 audit(1725692514.673:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.718078][ T29] audit: type=1326 audit(1725692514.683:14976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.719818][ T7593] loop3: detected capacity change from 0 to 128 [ 134.741533][ T29] audit: type=1326 audit(1725692514.683:14977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.773761][ T29] audit: type=1326 audit(1725692514.743:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.780215][ T7593] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.797275][ T29] audit: type=1326 audit(1725692514.743:14979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.828188][ T29] audit: type=1326 audit(1725692514.743:14980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.828689][ T7593] vhci_hcd: invalid port number 219 [ 134.851705][ T29] audit: type=1326 audit(1725692514.743:14981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.856790][ T7593] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 134.887741][ T29] audit: type=1326 audit(1725692514.743:14982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.911183][ T29] audit: type=1326 audit(1725692514.743:14983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.934605][ T29] audit: type=1326 audit(1725692514.743:14984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 134.990703][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 135.128012][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 135.139911][ T7622] loop4: detected capacity change from 0 to 2048 [ 135.170751][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.281340][ T7629] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.853: bg 0: block 234: padding at end of block bitmap is not set [ 135.325596][ T7629] EXT4-fs (loop4): Remounting filesystem read-only [ 135.555360][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 135.775369][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.940103][ T7648] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.955082][ T7650] program syz.4.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.048641][ T7653] ip6gretap0 speed is unknown, defaulting to 1000 [ 136.056355][ T7653] ip6gretap0 speed is unknown, defaulting to 1000 [ 136.275094][ T7661] loop2: detected capacity change from 0 to 512 [ 136.334120][ T7661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.347928][ T7661] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.382315][ T7661] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.861: Directory hole found for htree leaf block 0 [ 136.412745][ T6968] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.522984][ T7677] loop2: detected capacity change from 0 to 256 [ 136.533755][ T7677] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.917048][ T7696] netlink: 148 bytes leftover after parsing attributes in process `syz.0.872'. [ 136.987913][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.002407][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.029446][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.039910][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.054210][ T7700] dummy0: entered promiscuous mode [ 137.061213][ T7700] dummy0: left promiscuous mode [ 137.315383][ T7707] loop4: detected capacity change from 0 to 512 [ 137.429371][ T7707] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.875: casefold flag without casefold feature [ 137.442234][ T7707] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.875: couldn't read orphan inode 15 (err -117) [ 137.455138][ T7707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.894959][ T7716] loop2: detected capacity change from 0 to 1764 [ 137.899201][ T7715] ip6gretap0 speed is unknown, defaulting to 1000 [ 137.915695][ T7715] ip6gretap0 speed is unknown, defaulting to 1000 [ 138.019458][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.036869][ T7712] netlink: 100 bytes leftover after parsing attributes in process `syz.1.886'. [ 138.051153][ T7718] ip6gretap0 speed is unknown, defaulting to 1000 [ 138.067654][ T7718] ip6gretap0 speed is unknown, defaulting to 1000 [ 138.084419][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.099126][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.228499][ T7715] veth0_vlan: left promiscuous mode [ 138.242495][ T7715] veth0_vlan: entered promiscuous mode [ 138.881890][ T7726] program syz.0.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.026104][ T7739] ip6gretap0 speed is unknown, defaulting to 1000 [ 139.032827][ T7739] ip6gretap0 speed is unknown, defaulting to 1000 [ 139.129502][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'. [ 139.419220][ T7744] loop4: detected capacity change from 0 to 2048 [ 139.447448][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.602048][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.634223][ T7749] loop4: detected capacity change from 0 to 4096 [ 139.641412][ T7749] EXT4-fs: Ignoring removed nobh option [ 139.648854][ T7749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.671256][ T7749] ip6gretap0 speed is unknown, defaulting to 1000 [ 139.678207][ T7749] ip6gretap0 speed is unknown, defaulting to 1000 [ 139.716196][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 139.716218][ T29] audit: type=1400 audit(1725692519.713:15391): avc: denied { block_suspend } for pid=7748 comm="syz.4.884" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.744270][ T29] audit: type=1400 audit(1725692519.713:15392): avc: denied { read } for pid=7748 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.806049][ T7755] ip6gretap0 speed is unknown, defaulting to 1000 [ 139.812913][ T7755] ip6gretap0 speed is unknown, defaulting to 1000 [ 140.009397][ T7759] ip6gretap0 speed is unknown, defaulting to 1000 [ 140.016536][ T7759] ip6gretap0 speed is unknown, defaulting to 1000 [ 140.111939][ T29] audit: type=1326 audit(1725692520.043:15393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 140.135408][ T29] audit: type=1326 audit(1725692520.043:15394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b2cdcef9 code=0x7ffc0000 [ 140.247689][ T7762] loop3: detected capacity change from 0 to 2048 [ 140.277848][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.460603][ T29] audit: type=1326 audit(1725692520.453:15395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 140.486261][ T29] audit: type=1326 audit(1725692520.483:15396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 140.509789][ T29] audit: type=1326 audit(1725692520.483:15397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 140.533366][ T29] audit: type=1326 audit(1725692520.483:15398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 140.556940][ T29] audit: type=1326 audit(1725692520.483:15399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 140.580495][ T29] audit: type=1326 audit(1725692520.483:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 140.606352][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.639391][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.696035][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.701382][ T7770] loop3: detected capacity change from 0 to 1024 [ 140.712124][ T7770] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 140.722829][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.732647][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.742317][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.753757][ T7770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.797613][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.808077][ T7769] dummy0: entered promiscuous mode [ 140.813807][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.824926][ T7769] dummy0: left promiscuous mode [ 140.863625][ T6595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.418829][ T7782] loop4: detected capacity change from 0 to 512 [ 141.428191][ T7782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.440986][ T7782] EXT4-fs (loop4): 1 truncate cleaned up [ 141.458773][ T7782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.482793][ T7782] program syz.4.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.504237][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.313425][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 148.313440][ T29] audit: type=1400 audit(1725692528.303:15508): avc: denied { execmem } for pid=7789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 148.347643][ T7797] siw: device registration error -23 [ 148.354808][ T29] audit: type=1400 audit(1725692528.343:15509): avc: denied { create } for pid=7793 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.375066][ T29] audit: type=1400 audit(1725692528.343:15510): avc: denied { write } for pid=7793 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.395226][ T29] audit: type=1326 audit(1725692528.343:15511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.3.898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52f47ccef9 code=0x0 [ 148.421507][ T29] audit: type=1400 audit(1725692528.343:15512): avc: denied { read } for pid=7798 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.443069][ T29] audit: type=1400 audit(1725692528.343:15513): avc: denied { open } for pid=7798 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.443948][ T7791] No such timeout policy "syz0" [ 148.466602][ T29] audit: type=1400 audit(1725692528.343:15514): avc: denied { mounton } for pid=7798 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 148.493062][ T29] audit: type=1400 audit(1725692528.413:15515): avc: denied { name_bind } for pid=7794 comm="syz.4.900" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 148.514707][ T29] audit: type=1400 audit(1725692528.413:15516): avc: denied { node_bind } for pid=7794 comm="syz.4.900" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 148.536888][ T29] audit: type=1400 audit(1725692528.413:15517): avc: denied { ioctl } for pid=7790 comm="syz.1.901" path="socket:[22898]" dev="sockfs" ino=22898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.674014][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 148.712678][ T7798] ip6gretap0 speed is unknown, defaulting to 1000 [ 148.726362][ T7798] ip6gretap0 speed is unknown, defaulting to 1000 [ 148.858204][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 148.913755][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.920898][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.930600][ T7798] bridge_slave_0: entered allmulticast mode [ 148.937434][ T7798] bridge_slave_0: entered promiscuous mode [ 148.949955][ T1339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.961984][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.969083][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.976547][ T7798] bridge_slave_1: entered allmulticast mode [ 148.983161][ T7798] bridge_slave_1: entered promiscuous mode [ 149.007415][ T7798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.020357][ T1339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.034871][ T7798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.066144][ T1339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.079487][ T7798] team0: Port device team_slave_0 added [ 149.087307][ T7798] team0: Port device team_slave_1 added [ 149.113484][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.120542][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.146678][ T7798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.160553][ T1339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.173686][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.180811][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.206885][ T7798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.251276][ T7798] hsr_slave_0: entered promiscuous mode [ 149.257795][ T7798] hsr_slave_1: entered promiscuous mode [ 149.263818][ T7798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.271449][ T7798] Cannot create hsr debugfs directory [ 149.288895][ T1339] bridge_slave_1: left allmulticast mode [ 149.294769][ T1339] bridge_slave_1: left promiscuous mode [ 149.300695][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.309793][ T1339] bridge_slave_0: left allmulticast mode [ 149.315455][ T1339] bridge_slave_0: left promiscuous mode [ 149.321232][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.636496][ T1339] hsr_slave_0: left promiscuous mode [ 149.645820][ T1339] hsr_slave_1: left promiscuous mode [ 149.664234][ T1339] veth1_macvtap: left promiscuous mode [ 149.669896][ T1339] veth0_macvtap: left promiscuous mode [ 149.675464][ T1339] veth1_vlan: left promiscuous mode [ 149.680837][ T1339] veth0_vlan: left promiscuous mode [ 150.142230][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 150.163337][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 150.236597][ T7843] ip6gretap0 speed is unknown, defaulting to 1000 [ 150.243545][ T7843] ip6gretap0 speed is unknown, defaulting to 1000 [ 150.322956][ T7853] loop4: detected capacity change from 0 to 1024 [ 150.330778][ T7853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.339592][ T7853] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.350670][ T7853] EXT4-fs (loop4): group descriptors corrupted! [ 150.643413][ T7798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.653919][ T7798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.788569][ T1339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.801616][ T7798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.818151][ T7798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.852095][ T1339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.947413][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.959545][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.969054][ T1339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.984704][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.992059][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.004022][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.011114][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.019665][ T7868] ip6gretap0 speed is unknown, defaulting to 1000 [ 151.036324][ T1339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.049357][ T7868] ip6gretap0 speed is unknown, defaulting to 1000 [ 151.060861][ T7878] loop4: detected capacity change from 0 to 2048 [ 151.079227][ T7878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.128398][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 151.137745][ T1339] veth0_to_bond: left allmulticast mode [ 151.143346][ T1339] veth0_to_bond: left promiscuous mode [ 151.149093][ T1339] bridge0: port 3(veth0_to_bond) entered disabled state [ 151.160754][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.169945][ T1339] bridge_slave_1: left allmulticast mode [ 151.175599][ T1339] bridge_slave_1: left promiscuous mode [ 151.181306][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.189082][ T1339] bridge_slave_0: left allmulticast mode [ 151.194737][ T1339] bridge_slave_0: left promiscuous mode [ 151.200477][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.272483][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 151.281327][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 151.306713][ T35] ip6gretap0 speed is unknown, defaulting to 1000 [ 151.319523][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 151.353481][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.381515][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.388634][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.396320][ T7868] bridge_slave_0: entered allmulticast mode [ 151.397988][ T7900] block device autoloading is deprecated and will be removed. [ 151.402802][ T7868] bridge_slave_0: entered promiscuous mode [ 151.410602][ T7900] bio_check_eod: 10 callbacks suppressed [ 151.410613][ T7900] syz.0.921: attempt to access beyond end of device [ 151.410613][ T7900] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.422432][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.441318][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.448451][ T7900] FAT-fs (loop1): unable to read boot sector [ 151.448844][ T7868] bridge_slave_1: entered allmulticast mode [ 151.460772][ T7868] bridge_slave_1: entered promiscuous mode [ 151.488884][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.499541][ T1339] hsr_slave_0: left promiscuous mode [ 151.505240][ T1339] hsr_slave_1: left promiscuous mode [ 151.512714][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.520407][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.532632][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.540103][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.553932][ T1339] veth1_macvtap: left promiscuous mode [ 151.559653][ T1339] veth0_macvtap: left promiscuous mode [ 151.650966][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 151.662329][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 151.720542][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.771120][ T7868] team0: Port device team_slave_0 added [ 151.779120][ T7868] team0: Port device team_slave_1 added [ 151.839477][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.846656][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.872684][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.886241][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.893189][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.919211][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.930652][ T7922] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 151.940503][ T7922] SELinux: failed to load policy [ 151.957831][ T7868] hsr_slave_0: entered promiscuous mode [ 151.963916][ T7868] hsr_slave_1: entered promiscuous mode [ 151.987598][ T7798] veth0_vlan: entered promiscuous mode [ 152.072514][ T7798] veth1_vlan: entered promiscuous mode [ 152.111207][ T7798] veth0_macvtap: entered promiscuous mode [ 152.118900][ T7798] veth1_macvtap: entered promiscuous mode [ 152.130689][ T7798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.141383][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.155483][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.176942][ T7798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.187410][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.209250][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.227177][ T7798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.235961][ T7798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.244682][ T7798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.253563][ T7798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.365079][ T7868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.380480][ T7868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.399829][ T7868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.407554][ T7934] syz.0.927[7934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.407631][ T7934] syz.0.927[7934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.421553][ T7868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.542072][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.572583][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.580682][ T7948] loop2: detected capacity change from 0 to 1024 [ 152.589576][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.596735][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.606048][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 152.615280][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 152.628591][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.635688][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.647608][ T7948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.700546][ T7868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.711001][ T7868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.732925][ T7798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.767712][ T7955] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 152.775693][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.792320][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.812698][ T7955] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 152.889944][ T7965] bridge0: port 3(team0) entered blocking state [ 152.896529][ T7965] bridge0: port 3(team0) entered disabled state [ 152.906197][ T7965] team0: entered allmulticast mode [ 152.911534][ T7965] team_slave_0: entered allmulticast mode [ 152.917514][ T7965] team_slave_1: entered allmulticast mode [ 152.926360][ T7965] team0: entered promiscuous mode [ 152.931427][ T7965] team_slave_0: entered promiscuous mode [ 152.937164][ T7965] team_slave_1: entered promiscuous mode [ 152.943324][ T7965] bridge0: port 3(team0) entered blocking state [ 152.949633][ T7965] bridge0: port 3(team0) entered forwarding state [ 152.959574][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.052279][ T7868] veth0_vlan: entered promiscuous mode [ 153.061348][ T7868] veth1_vlan: entered promiscuous mode [ 153.093789][ T7868] veth0_macvtap: entered promiscuous mode [ 153.110021][ T7868] veth1_macvtap: entered promiscuous mode [ 153.122553][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.133260][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.144761][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.155740][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.166301][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.176193][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.186684][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.197593][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.216867][ T7868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.225608][ T7868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.234372][ T7868] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.243189][ T7868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.267719][ T7976] loop1: detected capacity change from 0 to 256 [ 153.319166][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 153.319180][ T29] audit: type=1400 audit(1725692533.313:16033): avc: denied { unmount } for pid=6552 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 153.348800][ T29] audit: type=1326 audit(1725692533.313:16034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2823c3ea7 code=0x7ffc0000 [ 153.372574][ T29] audit: type=1326 audit(1725692533.313:16035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd282368859 code=0x7ffc0000 [ 153.395929][ T29] audit: type=1326 audit(1725692533.313:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd2823ccef9 code=0x7ffc0000 [ 153.419446][ T29] audit: type=1326 audit(1725692533.313:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2823c3ea7 code=0x7ffc0000 [ 153.442893][ T29] audit: type=1326 audit(1725692533.313:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd282368859 code=0x7ffc0000 [ 153.466265][ T29] audit: type=1326 audit(1725692533.313:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd2823ccef9 code=0x7ffc0000 [ 153.489553][ T29] audit: type=1326 audit(1725692533.313:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2823c3ea7 code=0x7ffc0000 [ 153.512882][ T29] audit: type=1326 audit(1725692533.313:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd282368859 code=0x7ffc0000 [ 153.536246][ T29] audit: type=1326 audit(1725692533.343:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd2823ccef9 code=0x7ffc0000 [ 153.561496][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.621839][ T7984] loop1: detected capacity change from 0 to 512 [ 153.629000][ T7984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.642053][ T7988] bridge_slave_0: left allmulticast mode [ 153.647186][ T7984] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.940: bg 0: block 248: padding at end of block bitmap is not set [ 153.647783][ T7988] bridge_slave_0: left promiscuous mode [ 153.663765][ T7984] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.940: Failed to acquire dquot type 1 [ 153.667510][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.680038][ T7984] EXT4-fs (loop1): 1 truncate cleaned up [ 153.691721][ T7984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.706019][ T7984] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.706935][ T7988] bridge_slave_1: left allmulticast mode [ 153.722188][ T7988] bridge_slave_1: left promiscuous mode [ 153.727878][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.735250][ T7984] EXT4-fs error (device loop1): __ext4_remount:6491: comm syz.1.940: Abort forced by user [ 153.737142][ T7996] SELinux: failed to load policy [ 153.746442][ T7984] EXT4-fs (loop1): Remounting filesystem read-only [ 153.758134][ T7996] syz.2.944: attempt to access beyond end of device [ 153.758134][ T7996] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 153.758757][ T7984] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 153.770940][ T7996] FAT-fs (loop5): unable to read boot sector [ 153.788555][ T7988] bond0: (slave bond_slave_0): Releasing backup interface [ 153.799791][ T6552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.818009][ T7988] bond0: (slave bond_slave_1): Releasing backup interface [ 153.834710][ T7988] team0: Port device team_slave_0 removed [ 153.847028][ T7988] team0: Port device team_slave_1 removed [ 153.878775][ T7993] infiniband syzr: RDMA CMA: cma_listen_on_dev, error -98 [ 153.879328][ T8001] loop1: detected capacity change from 0 to 512 [ 153.900681][ T8001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.915032][ T8001] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.954038][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 153.957955][ T8007] loop4: detected capacity change from 0 to 4096 [ 153.971730][ T8007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.007581][ T6552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.083734][ T8013] loop1: detected capacity change from 0 to 1024 [ 154.090842][ T8013] EXT4-fs: quotafile must be on filesystem root [ 154.409589][ T8020] blktrace: Concurrent blktraces are not allowed on sg0 [ 154.531767][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.177919][ T8030] random: crng reseeded on system resumption [ 155.251866][ T8040] loop4: detected capacity change from 0 to 1024 [ 155.266443][ T8040] EXT4-fs: Ignoring removed orlov option [ 155.273968][ T8040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.307882][ T8040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 155.321371][ T8040] System zones: 0-1, 3-12 [ 155.331555][ T8040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.511987][ T8041] ip6gretap0 speed is unknown, defaulting to 1000 [ 155.567769][ T8053] loop3: detected capacity change from 0 to 512 [ 155.584437][ T8053] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.597262][ T8053] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.961: corrupted in-inode xattr: invalid ea_ino [ 155.610942][ T8053] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.961: couldn't read orphan inode 15 (err -117) [ 155.624832][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.628331][ T8040] ip6gretap0 speed is unknown, defaulting to 1000 [ 155.679896][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.3.961'. [ 155.745396][ T8055] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 155.790153][ T7868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.259974][ T6623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.304712][ T8069] ip6gretap0 speed is unknown, defaulting to 1000 [ 156.949432][ T8058] syz.1.963 (8058) used greatest stack depth: 6288 bytes left [ 156.950446][ T8084] syz.4.970[8084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.957176][ T8084] syz.4.970[8084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.290125][ T8090] bridge0: port 1(syz_tun) entered blocking state [ 157.307898][ T8090] bridge0: port 1(syz_tun) entered disabled state [ 157.314531][ T8090] syz_tun: entered allmulticast mode [ 157.320352][ T8090] syz_tun: entered promiscuous mode [ 157.326146][ T8090] bridge0: port 1(syz_tun) entered blocking state [ 157.332593][ T8090] bridge0: port 1(syz_tun) entered forwarding state [ 157.753526][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.771425][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.785410][ T8095] loop3: detected capacity change from 0 to 512 [ 157.791889][ T8095] ext4: Unknown parameter 'subj_user' [ 157.849780][ T8098] netlink: 68 bytes leftover after parsing attributes in process `syz.1.974'. [ 157.863641][ T8104] loop2: detected capacity change from 0 to 512 [ 157.869356][ T8098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.974'. [ 157.883613][ T8098] 9pnet_fd: Insufficient options for proto=fd [ 157.892135][ T8104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.905298][ T8104] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.970806][ T8104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.982317][ T7798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.283509][ T8112] syz.4.980 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 158.294487][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.4.980 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 158.305384][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 158.315488][ T8112] Call Trace: [ 158.318759][ T8112] [ 158.321680][ T8112] dump_stack_lvl+0xf2/0x150 [ 158.326275][ T8112] dump_stack+0x15/0x20 [ 158.330461][ T8112] dump_header+0x83/0x2d0 [ 158.334893][ T8112] oom_kill_process+0x341/0x4c0 [ 158.339841][ T8112] out_of_memory+0x9af/0xbe0 [ 158.344489][ T8112] ? __rcu_read_unlock+0x4e/0x70 [ 158.349515][ T8112] mem_cgroup_out_of_memory+0x13e/0x190 [ 158.355060][ T8112] try_charge_memcg+0x51b/0x810 [ 158.359907][ T8112] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 158.365994][ T8112] __read_swap_cache_async+0x2b7/0x520 [ 158.371451][ T8112] swap_cluster_readahead+0x276/0x3f0 [ 158.376923][ T8112] swapin_readahead+0xe4/0x760 [ 158.381699][ T8112] ? __filemap_get_folio+0x420/0x5b0 [ 158.387034][ T8112] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 158.392719][ T8112] ? swap_cache_get_folio+0x77/0x210 [ 158.397997][ T8112] do_swap_page+0x3da/0x1ef0 [ 158.402580][ T8112] ? cgroup_rstat_updated+0x99/0x550 [ 158.407855][ T8112] ? __rcu_read_lock+0x36/0x50 [ 158.412645][ T8112] ? pte_offset_map_nolock+0x124/0x1d0 [ 158.418165][ T8112] handle_mm_fault+0x8cb/0x2a30 [ 158.423022][ T8112] exc_page_fault+0x3b9/0x650 [ 158.427695][ T8112] asm_exc_page_fault+0x26/0x30 [ 158.432611][ T8112] RIP: 0033:0x7f73758609cc [ 158.437022][ T8112] Code: 72 64 0f 1f 40 00 69 3d e6 4c e1 00 e8 03 00 00 48 8d 1d c7 55 2e 00 e8 92 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 158.456627][ T8112] RSP: 002b:00007ffdf234d740 EFLAGS: 00010202 [ 158.462683][ T8112] RAX: 0000000000000000 RBX: 00007f7375b45f80 RCX: 0000000000000000 [ 158.470677][ T8112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555590d88808 [ 158.478671][ T8112] RBP: 00007f7375b47a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 158.486629][ T8112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000026c6e [ 158.494644][ T8112] R13: 00007ffdf234d840 R14: 0000000000000032 R15: ffffffffffffffff [ 158.502608][ T8112] [ 158.505748][ T8112] memory: usage 307200kB, limit 307200kB, failcnt 2688 [ 158.513035][ T8112] memory+swap: usage 306352kB, limit 9007199254740988kB, failcnt 0 [ 158.521088][ T8112] kmem: usage 291576kB, limit 9007199254740988kB, failcnt 0 [ 158.528381][ T8112] Memory cgroup stats for /syz4: [ 158.531502][ T8112] cache 135168 [ 158.539864][ T8112] rss 4096 [ 158.542939][ T8112] shmem 0 [ 158.545883][ T8112] mapped_file 135168 [ 158.549764][ T8112] dirty 135168 [ 158.553128][ T8112] writeback 8192 [ 158.556741][ T8112] workingset_refault_anon 4 [ 158.561268][ T8112] workingset_refault_file 0 [ 158.565913][ T8112] swap 180224 [ 158.569182][ T8112] swapcached 24576 [ 158.572892][ T8112] pgpgin 143144 [ 158.576404][ T8112] pgpgout 143105 [ 158.579941][ T8112] pgfault 139081 [ 158.583534][ T8112] pgmajfault 11 [ 158.586999][ T8112] inactive_anon 0 [ 158.590620][ T8112] active_anon 24576 [ 158.594409][ T8112] inactive_file 0 [ 158.598042][ T8112] active_file 135168 [ 158.601919][ T8112] unevictable 0 [ 158.605368][ T8112] hierarchical_memory_limit 314572800 [ 158.610817][ T8112] hierarchical_memsw_limit 9223372036854771712 [ 158.617001][ T8112] total_cache 135168 [ 158.620884][ T8112] total_rss 4096 [ 158.624418][ T8112] total_shmem 0 [ 158.627998][ T8112] total_mapped_file 135168 [ 158.632494][ T8112] total_dirty 135168 [ 158.636395][ T8112] total_writeback 8192 [ 158.640500][ T8112] total_workingset_refault_anon 4 [ 158.645565][ T8112] total_workingset_refault_file 0 [ 158.650666][ T8112] total_swap 180224 [ 158.654460][ T8112] total_swapcached 24576 [ 158.658746][ T8112] total_pgpgin 143145 [ 158.662720][ T8112] total_pgpgout 143106 [ 158.666866][ T8112] total_pgfault 139107 [ 158.670973][ T8112] total_pgmajfault 11 [ 158.670981][ T8112] total_inactive_anon 0 [ 158.671033][ T8112] total_active_anon 24576 [ 158.671040][ T8112] total_inactive_file 0 [ 158.671046][ T8112] total_active_file 135168 [ 158.671088][ T8112] total_unevictable 0 [ 158.671094][ T8112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.980,pid=8112,uid=0 [ 158.671150][ T8112] Memory cgroup out of memory: Killed process 8112 (syz.4.980) total-vm:87068kB, anon-rss:676kB, file-rss:16008kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 158.758782][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 158.767976][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 158.769975][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 158.769987][ T29] audit: type=1326 audit(1725692538.763:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.4.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737598cef9 code=0x0 [ 158.831507][ T29] audit: type=1400 audit(1725692538.823:16452): avc: denied { watch } for pid=8126 comm="syz.0.985" path="/proc/353/net" dev="proc" ino=25929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.888496][ T29] audit: type=1326 audit(1725692538.873:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 158.912088][ T29] audit: type=1326 audit(1725692538.873:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 158.935669][ T29] audit: type=1326 audit(1725692538.873:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 158.959214][ T29] audit: type=1326 audit(1725692538.873:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 158.982612][ T29] audit: type=1326 audit(1725692538.873:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 159.006100][ T29] audit: type=1326 audit(1725692538.873:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 159.029698][ T29] audit: type=1326 audit(1725692538.873:16459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b37dfcef9 code=0x7ffc0000 [ 159.053416][ T29] audit: type=1326 audit(1725692538.873:16460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b37dfee17 code=0x7ffc0000 [ 159.101860][ T8138] loop3: detected capacity change from 0 to 2048 [ 159.129333][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.650832][ T8150] loop4: detected capacity change from 0 to 764 [ 159.679526][ T7868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.788870][ T8156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8156 comm=syz.4.989 [ 159.802297][ T8150] netlink: 'syz.4.989': attribute type 29 has an invalid length. [ 159.930165][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.938721][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.559246][ T8161] syz.2.992 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 160.573360][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.2.992 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 160.584096][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.594214][ T8161] Call Trace: [ 160.597484][ T8161] [ 160.600459][ T8161] dump_stack_lvl+0xf2/0x150 [ 160.605097][ T8161] dump_stack+0x15/0x20 [ 160.609247][ T8161] dump_header+0x83/0x2d0 [ 160.613580][ T8161] oom_kill_process+0x341/0x4c0 [ 160.618450][ T8161] out_of_memory+0x9af/0xbe0 [ 160.623040][ T8161] ? __rcu_read_unlock+0x4e/0x70 [ 160.628040][ T8161] mem_cgroup_out_of_memory+0x13e/0x190 [ 160.633637][ T8161] try_charge_memcg+0x51b/0x810 [ 160.638490][ T8161] obj_cgroup_charge_pages+0xbd/0x1a0 [ 160.643914][ T8161] __memcg_kmem_charge_page+0x9d/0x170 [ 160.649371][ T8161] __alloc_pages_noprof+0x1bc/0x360 [ 160.654668][ T8161] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 160.660192][ T8161] alloc_pages_noprof+0xe1/0x100 [ 160.665205][ T8161] __vmalloc_node_range_noprof+0x736/0xec0 [ 160.671052][ T8161] __kvmalloc_node_noprof+0x121/0x170 [ 160.676493][ T8161] ? ip_set_alloc+0x1f/0x30 [ 160.680998][ T8161] ip_set_alloc+0x1f/0x30 [ 160.685333][ T8161] hash_netiface_create+0x273/0x730 [ 160.690601][ T8161] ? __nla_parse+0x40/0x60 [ 160.695092][ T8161] ? __pfx_hash_netiface_create+0x10/0x10 [ 160.700861][ T8161] ip_set_create+0x359/0x8a0 [ 160.705453][ T8161] ? strnstr+0xf1/0x100 [ 160.709657][ T8161] ? __nla_parse+0x40/0x60 [ 160.714142][ T8161] nfnetlink_rcv_msg+0x4a9/0x570 [ 160.719154][ T8161] netlink_rcv_skb+0x12c/0x230 [ 160.723917][ T8161] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.729460][ T8161] nfnetlink_rcv+0x16c/0x15e0 [ 160.734163][ T8161] ? kmem_cache_free+0xd8/0x280 [ 160.739059][ T8161] ? nlmon_xmit+0x51/0x60 [ 160.743497][ T8161] ? __kfree_skb+0x102/0x150 [ 160.748111][ T8161] ? consume_skb+0x57/0x180 [ 160.752610][ T8161] ? nlmon_xmit+0x51/0x60 [ 160.756987][ T8161] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 160.762351][ T8161] ? __dev_queue_xmit+0xb86/0x1fe0 [ 160.767520][ T8161] ? ref_tracker_free+0x3a5/0x410 [ 160.772540][ T8161] ? __rcu_read_unlock+0x4e/0x70 [ 160.777470][ T8161] ? __dev_queue_xmit+0x161/0x1fe0 [ 160.782597][ T8161] ? __netlink_deliver_tap+0x495/0x4c0 [ 160.788067][ T8161] netlink_unicast+0x599/0x670 [ 160.792830][ T8161] netlink_sendmsg+0x5cc/0x6e0 [ 160.797750][ T8161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.803107][ T8161] __sock_sendmsg+0x140/0x180 [ 160.807859][ T8161] ____sys_sendmsg+0x312/0x410 [ 160.812718][ T8161] __sys_sendmsg+0x1e9/0x280 [ 160.817310][ T8161] ? futex_wait+0x18e/0x1c0 [ 160.821828][ T8161] __x64_sys_sendmsg+0x46/0x50 [ 160.826840][ T8161] x64_sys_call+0x2689/0x2d60 [ 160.831529][ T8161] do_syscall_64+0xc9/0x1c0 [ 160.836109][ T8161] ? clear_bhb_loop+0x55/0xb0 [ 160.840781][ T8161] ? clear_bhb_loop+0x55/0xb0 [ 160.845518][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.851431][ T8161] RIP: 0033:0x7faa5a40cef9 [ 160.855839][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.875502][ T8161] RSP: 002b:00007faa59066038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.883909][ T8161] RAX: ffffffffffffffda RBX: 00007faa5a5c6058 RCX: 00007faa5a40cef9 [ 160.891870][ T8161] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000c [ 160.899844][ T8161] RBP: 00007faa5a47f046 R08: 0000000000000000 R09: 0000000000000000 [ 160.907908][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.915952][ T8161] R13: 0000000000000000 R14: 00007faa5a5c6058 R15: 00007ffc24142c38 [ 160.923933][ T8161] [ 160.926959][ C0] sched: RT throttling activated [ 160.927110][ T8161] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 160.939032][ T8161] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 160.947267][ T8161] kmem: usage 307088kB, limit 9007199254740988kB, failcnt 0 [ 160.954564][ T8161] Memory cgroup stats for /syz2: [ 160.954801][ T8161] cache 102400 [ 160.963082][ T8161] rss 0 [ 160.965842][ T8161] shmem 0 [ 160.968765][ T8161] mapped_file 102400 [ 160.972641][ T8161] dirty 102400 [ 160.976075][ T8161] writeback 0 [ 160.979354][ T8161] workingset_refault_anon 6 [ 160.983847][ T8161] workingset_refault_file 0 [ 160.988373][ T8161] swap 204800 [ 160.991656][ T8161] swapcached 12288 [ 160.995418][ T8161] pgpgin 253381 [ 160.998874][ T8161] pgpgout 253353 [ 161.002413][ T8161] pgfault 238573 [ 161.006018][ T8161] pgmajfault 10 [ 161.009463][ T8161] inactive_anon 12288 [ 161.013426][ T8161] active_anon 0 [ 161.016940][ T8161] inactive_file 102400 [ 161.020999][ T8161] active_file 0 [ 161.024475][ T8161] unevictable 0 [ 161.027930][ T8161] hierarchical_memory_limit 314572800 [ 161.033290][ T8161] hierarchical_memsw_limit 9223372036854771712 [ 161.039545][ T8161] total_cache 102400 [ 161.043438][ T8161] total_rss 0 [ 161.046719][ T8161] total_shmem 0 [ 161.050160][ T8161] total_mapped_file 102400 [ 161.054583][ T8161] total_dirty 102400 [ 161.058466][ T8161] total_writeback 0 [ 161.062253][ T8161] total_workingset_refault_anon 6 [ 161.067268][ T8161] total_workingset_refault_file 0 [ 161.072276][ T8161] total_swap 204800 [ 161.076080][ T8161] total_swapcached 12288 [ 161.080328][ T8161] total_pgpgin 253381 [ 161.084380][ T8161] total_pgpgout 253353 [ 161.088549][ T8161] total_pgfault 238573 [ 161.092660][ T8161] total_pgmajfault 10 [ 161.096647][ T8161] total_inactive_anon 12288 [ 161.101192][ T8161] total_active_anon 0 [ 161.105160][ T8161] total_inactive_file 102400 [ 161.109765][ T8161] total_active_file 0 [ 161.113729][ T8161] total_unevictable 0 [ 161.117739][ T8161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.992,pid=8157,uid=0 [ 161.132541][ T8161] Memory cgroup out of memory: Killed process 8157 (syz.2.992) total-vm:87200kB, anon-rss:568kB, file-rss:16164kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 161.151203][ T8157] ================================================================== [ 161.159287][ T8157] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 161.166657][ T8157] [ 161.168970][ T8157] read-write to 0xffff8881162c7e68 of 4 bytes by task 8158 on cpu 0: [ 161.177028][ T8157] mem_cgroup_iter+0x28e/0x380 [ 161.181789][ T8157] shrink_node+0x74a/0x1d40 [ 161.186290][ T8157] do_try_to_free_pages+0x3c6/0xc50 [ 161.191494][ T8157] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 161.197474][ T8157] try_charge_memcg+0x2bc/0x810 [ 161.202323][ T8157] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 161.208400][ T8157] __read_swap_cache_async+0x2b7/0x520 [ 161.213857][ T8157] swap_cluster_readahead+0x276/0x3f0 [ 161.219227][ T8157] swapin_readahead+0xe4/0x760 [ 161.223990][ T8157] do_swap_page+0x3da/0x1ef0 [ 161.228579][ T8157] handle_mm_fault+0x8cb/0x2a30 [ 161.233428][ T8157] exc_page_fault+0x296/0x650 [ 161.238105][ T8157] asm_exc_page_fault+0x26/0x30 [ 161.242959][ T8157] __get_user_8+0x11/0x20 [ 161.247286][ T8157] exit_robust_list+0x31/0x280 [ 161.252053][ T8157] futex_exit_release+0xe3/0x130 [ 161.256995][ T8157] exit_mm_release+0x1a/0x30 [ 161.261582][ T8157] exit_mm+0x38/0x190 [ 161.265564][ T8157] do_exit+0x55e/0x1720 [ 161.269708][ T8157] do_group_exit+0x102/0x150 [ 161.274290][ T8157] get_signal+0xf2f/0x1080 [ 161.278700][ T8157] arch_do_signal_or_restart+0x95/0x4b0 [ 161.284245][ T8157] syscall_exit_to_user_mode+0x59/0x130 [ 161.289799][ T8157] do_syscall_64+0xd6/0x1c0 [ 161.294294][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.300193][ T8157] [ 161.302504][ T8157] read to 0xffff8881162c7e68 of 4 bytes by task 8157 on cpu 1: [ 161.310034][ T8157] mem_cgroup_iter+0x93/0x380 [ 161.314704][ T8157] shrink_node+0x74a/0x1d40 [ 161.319199][ T8157] do_try_to_free_pages+0x3c6/0xc50 [ 161.324398][ T8157] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 161.330296][ T8157] try_charge_memcg+0x2bc/0x810 [ 161.335139][ T8157] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 161.341199][ T8157] __read_swap_cache_async+0x2b7/0x520 [ 161.346661][ T8157] swap_cluster_readahead+0x276/0x3f0 [ 161.352116][ T8157] swapin_readahead+0xe4/0x760 [ 161.356878][ T8157] do_swap_page+0x3da/0x1ef0 [ 161.361464][ T8157] handle_mm_fault+0x8cb/0x2a30 [ 161.366306][ T8157] exc_page_fault+0x3b9/0x650 [ 161.371007][ T8157] asm_exc_page_fault+0x26/0x30 [ 161.375860][ T8157] [ 161.378170][ T8157] value changed: 0x00000496 -> 0x0000049b [ 161.383963][ T8157] [ 161.386273][ T8157] Reported by Kernel Concurrency Sanitizer on: [ 161.392408][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.2.992 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 161.402983][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 161.413038][ T8157] ================================================================== [ 161.596516][ T8153] dccp_close: ABORT with 64 bytes unread